Edit tour

Windows Analysis Report
http://case-id-1000228259397.counselschambers.co.uk/

Overview

General Information

Sample URL:	http://case-id-1000228259397.counselschambers.co.uk/
Analysis ID:	1638251
Infos:

Detection

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,14392242175342624952,12325471337729548151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,14392242175342624952,12325471337729548151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4940 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228259397.counselschambers.co.uk/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://case-id-1000228259397.counselschambers.co.uk/

Avira URL Cloud: detection malicious, Label: malware

Phishing

AI detected phishing page

Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html

Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The provided URL 'case-id-1000228259397.counselschambers.co.uk' does not match the legitimate domain of Facebook., The URL contains a subdomain 'case-id-1000228259397' which is not associated with Facebook., The main domain 'counselschambers.co.uk' is unrelated to Facebook and suggests a potential phishing attempt., The presence of input fields for personal information such as phone number, full name, email address, and birthday is common in phishing sites attempting to harvest personal data. DOM: 2.1.pages.csv

AI detected suspicious Javascript

Source: 1.5..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://case-id-1000228259397.counselschambers.co.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. It appears to be collecting user IP addresses and sending encrypted data to an external server, which is highly suspicious and indicative of potential malicious intent.

HTML page contains obfuscated javascript

Source: https://case-id-1000228259397.counselschambers.co.uk/help.html	HTTP Parser: var _0x128029=_0x3b3d;function _0x3b3d(_0x15d4a1,_0x5b219b){var _0x29e93f=_0x416c();return
Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html	HTTP Parser: var _0x58efb4=_0x136f;(function(_0x29482d,_0x453fa9){var _0x81cf80=_0x136f,_0x523557=_0x294

Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html

HTTP Parser: Number of links: 0

Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html

HTTP Parser: Title: Business Help Center | Privacy Policy does not match URL

Source: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js

HTTP Parser: ;(function (root, factory) {if (typeof exports === "object") {// commonjsmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// amddefine([], factory);}else {// global (browser)root.cryptojs = factory();}}(this, function () {/*globals window, global, require*//** * cryptojs core components. */var cryptojs = cryptojs || (function (math, undefined) { var crypto; // native crypto from window (browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // native crypto in web worker (browser) if (typeof self !== 'undefined' && self.crypto) { crypto = self.crypto; } // native crypto from worker if (typeof globalthis !== 'undefined' && globalthis.crypto) { crypto = globalthis.crypto; } // native (experimental ie 11) crypto from window (browser) if (!crypto && typeof window !== 'undefined' && window.mscrypto) { ...

Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found

Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found
Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found

Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found
Source: https://case-id-1000228259397.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.187.31:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.187.31:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.187.31:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.5:54462 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:54461 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.23.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.23.99
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.96.26
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: case-id-1000228259397.counselschambers.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help.html HTTP/1.1Host: case-id-1000228259397.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-5b6c678b.css HTTP/1.1Host: case-id-1000228259397.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://case-id-1000228259397.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228259397.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEI9s/OAQiA1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228259397.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228259397.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react/umd/react.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228259397.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228259397.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228259397.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228259397.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228259397.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /case-support.html HTTP/1.1Host: case-id-1000228259397.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://case-id-1000228259397.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228259397.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228259397.counselschambers.co.uk/index-5b6c678b.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://case-id-1000228259397.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228259397.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228259397.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_114.1.dr

String found in binary or memory: /*Dirty hack for facebook big video page e.g: https://www.facebook.com/abc/videos/...*/ equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: case-id-1000228259397.counselschambers.co.uk
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: ipapi.co
Source: global traffic	DNS traffic detected: DNS query: pickoutsourcing.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveContent-Length: 55sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/json; charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://case-id-1000228259397.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228259397.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top

Source: chromecache_117.1.dr, chromecache_114.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_114.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/intl-tel-input
Source: chromecache_117.1.dr, chromecache_114.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-bootstrap
Source: chromecache_117.1.dr, chromecache_114.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Source: chromecache_117.1.dr, chromecache_114.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Source: chromecache_117.1.dr, chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1e9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1eb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f1.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fa.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fc.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1eb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ef.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fc.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fe.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1eb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ed.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ee.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f1.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fa.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fc.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ef.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f0.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1e8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ef.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1eb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ed.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f5.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fa.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fc.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fe.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1fa.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1e9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f1.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f5.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ed.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ee.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f5.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1ee.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f0.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fa.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fe.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ed.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f1.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fa.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fd.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fe.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ee.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f1.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f4-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1eb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ed.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f0.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f1.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fc.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f6-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fa.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fc.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ee.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f1.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fe.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1e9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ed.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f1.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f4.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f7.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fb.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fc.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ec.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1fe.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ff.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1f3.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1fa.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fc-1f1f8.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fd-1f1f0.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fe-1f1ea.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1e6.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1f2.svg
Source: chromecache_114.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1fc.svg
Source: chromecache_117.1.dr, chromecache_114.1.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: chromecache_100.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_109.1.dr	String found in binary or memory: https://github.com/jackocnr/intl-tel-input.git
Source: chromecache_100.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_104.1.dr, chromecache_101.1.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_112.1.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_120.1.dr	String found in binary or memory: https://tools.ietf.org/html/rfc9110#section-15.5.1

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54467
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54468
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.187.31:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.187.31:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.187.31:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.5:54462 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5872_803961694

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5872_803961694

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@24/44@41/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,14392242175342624952,12325471337729548151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,14392242175342624952,12325471337729548151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4940 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228259397.counselschambers.co.uk/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,14392242175342624952,12325471337729548151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,14392242175342624952,12325471337729548151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4940 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://case-id-1000228259397.counselschambers.co.uk/	100%	Avira URL Cloud	malware

Name	IP	Active	Malicious	Reputation
ipapi.co	104.26.8.44	true	false	high
cdn.jsdelivr.net.cdn.cloudflare.net	104.18.187.31	true	false	high
scontent.xx.fbcdn.net	157.240.252.13	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
case-id-1000228259397.counselschambers.co.uk	104.21.70.234	true	true	unknown
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
ipinfo.io	34.117.59.81	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.180.99	true	false	high
www.google.com	142.250.186.132	true	false	high
pickoutsourcing.com	104.21.16.1	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
static.xx.fbcdn.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://case-id-1000228259397.counselschambers.co.uk/case-support.html	true	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js	false	high
https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js	false	high
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	false	high
https://static.xx.fbcdn.net/rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW	false	high
https://a.nel.cloudflare.com/report/v4?s=eUuDkJBedYImNEGUtReWlsYCub6WleJEabFpG7So6zKWwFqEtWckIsIY540GSpQPJ8jZdT4xT%2BoM6Il57EZUHYNTGgT3CulUGCO7xsc3pD3a8n2VzG7riYILlub25I4IKpQnA%2FWf	false	high
https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ipinfo.io/missingauth	chromecache_104.1.dr, chromecache_101.1.dr	false	high
https://tools.ietf.org/html/rfc9110#section-15.5.1	chromecache_120.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ff.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f4.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e6.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f7.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ed.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f8.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f6.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fe.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f3.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ed.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f7.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f3.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f7.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ee.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ea.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f2.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f0.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e9.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f0.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fc.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ed.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ea.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fc.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1e9.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e8.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e6.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ff.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f1.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1fa.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f7.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f9.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f7.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f2.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fe.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ff.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1fe.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f9.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fb.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ec.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ec.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ea.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f4.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f8.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg	chromecache_114.1.dr	false	high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_112.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fb.svg	chromecache_114.1.dr	false	high
https://getbootstrap.com/)	chromecache_100.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e8.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fc.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f1.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f8.svg	chromecache_114.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f2.svg	chromecache_114.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.8.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
104.18.187.31	cdn.jsdelivr.net.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.21.80.1	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.67.69.226	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.70.234	case-id-1000228259397.counselschambers.co.uk	United States	13335	CLOUDFLARENETUS	true
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.16.1	pickoutsourcing.com	United States	13335	CLOUDFLARENETUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.67.168.191	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.9
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638251
Start date and time:	2025-03-14 10:19:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://case-id-1000228259397.counselschambers.co.uk/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@24/44@41/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.238, 173.194.76.84, 142.250.184.238, 172.217.16.195, 172.217.18.110, 142.250.181.238, 142.250.186.174, 142.250.184.206, 142.250.186.46, 142.250.185.78, 142.250.185.74, 142.250.185.106, 142.250.185.234, 142.250.185.138, 142.250.74.202, 142.250.181.234, 216.58.206.74, 172.217.16.202, 172.217.18.10, 216.58.206.42, 172.217.16.138, 142.250.186.74, 142.250.185.202, 216.58.212.138, 172.217.18.106, 142.250.186.42, 172.217.18.14, 142.250.185.110, 172.217.18.3, 142.250.185.67, 142.250.80.46, 173.194.17.198, 23.199.214.10, 4.175.87.197, 150.171.28.10, 2.19.96.18
Excluded domains from analysis (whitelisted): www.bing.com, r1.sn-hp57knd6.gvt1.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, r1---sn-hp57knd6.gvt1.com, clientservices.googleapis.com, g.bing.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://case-id-1000228259397.counselschambers.co.uk/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io//json?
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	119175
Entropy (8bit):	5.312931607745592
Encrypted:	false
SSDEEP:	3072:rOoUFMlBxwlHb1Vjcpnd8US74ZnhA1IvUbidhmje7rP5yx60sC:ZZhAqvUbghUe7rPkkc
MD5:	365E05DCCD2211EEABA31DEFF514F5FA
SHA1:	A36F8E61ECCC12C333A44713DC4FAE6EC1548FC4
SHA-256:	150523E0558852A799AAE470EE18FDB61F89CF260EE6DA8EFD8687621156AE33
SHA-512:	F63CEC52665F84B468648C1C21AA4367724925E38C92E460851E0BCEAA9A6AAF215BBBCAD63945C7AF4A58368400F86035275E5D1C5AA308A856E79ED1B71534
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js
Preview:	/! For license information please see react-bootstrap.min.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","react-dom"],t):"object"==typeof exports?exports.ReactBootstrap=t(require("react"),require("react-dom")):e.ReactBootstrap=t(e.React,e.ReactDOM)}(self,((e,t)=>(()=>{var n={814:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function o(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var a=typeof n;if("string"===a\|\|"number"===a)e.push(n);else if(Array.isArray(n)){if(n.length){var s=o.apply(null,n);s&&e.push(s)}}else if("object"===a){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var i in n)r.call(n,i)&&n[i]&&e.push(i)}}}return e.join(" ")}e.exports?(o.default=o,e.exports=o):void 0===(n=function(){return o}.apply(t,[]))\|\|(e.expor

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
URL:	https://ipapi.co/ip
Preview:	8.46.123.189

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19157), with no line terminators
Category:	downloaded
Size (bytes):	19157
Entropy (8bit):	4.937770512209066
Encrypted:	false
SSDEEP:	192:6wR+nXh/TVc6jU+4v7fix43obCfCfIlSc:6wRWXhK6jU+4vTixaACaglSc
MD5:	6B7FB2EE130535419A67AFB198F41C2B
SHA1:	FFB8A25633C4DDEAB81D1B1742AC2FD0B442A4C6
SHA-256:	C6956E8710CF477F7014440385AE16EE4B8CC7ECFD02FDDD4D2F0C6C7FD15845
SHA-512:	CB27BFBB47A142CAD5ADF49DE9B893D7BB77F5183D90D73EBC435C09766E333D9AF8B5851AF5D49D8B96516EA96DF623D637016FF0B7F54670D9C890BF00C3BE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css
Preview:	.iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0!important;margin-bottom:0!important;padding-right:36px;margin-right:0}.iti__flag-container{position:absolute;top:0;bottom:0;right:0;padding:1px}.iti__selected-flag{z-index:1;position:relative;display:flex;align-items:center;height:100%;padding:0 6px 0 8px}.iti__arrow{margin-left:6px;width:0;height:0;border-left:3px solid transparent;border-right:3px solid transparent;border-top:4px solid #555}.iti__arrow--up{border-top:none;border-bottom:4px solid #555}.iti__country-list{position:absolute;z-index:2;list-style:none;text-align:left;padding:0;margin:0 0 0 -1px;box-shadow:1px 1px 4px rgba(0,0,0,.2);background-color:#fff;border:1px solid #ccc;white-space:nowrap;max-height:200px;overflow-y:scroll;-webkit-overflow-scrolling:touch}.iti__country-lis

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	dropped
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26993)
Category:	downloaded
Size (bytes):	29519
Entropy (8bit):	5.620109327436002
Encrypted:	false
SSDEEP:	768:ewqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCY9R:4fUQWodCjgtmKgNzazCw
MD5:	F75E31308C096A103A106C4F5A5D9A66
SHA1:	B6F78285064ECDF283081606D37B643C05D58B61
SHA-256:	FD20B6E4BB5AF8690406A2DE275141EA221822BA78A99261B5412D2BA9CA217C
SHA-512:	FA04A1C81F065A83A25CDC0E9416985DD2D3899B75D08CBAC6300219A769A8CB36D1A24EA21F8F26DDDBC14540E8279F7BBC85EEF6E55FA430C976625704D61A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js
Preview:	/. International Telephone Input v17.0.19. * https://github.com/jackocnr/intl-tel-input.git. * Licensed under the MIT license. */..!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use strict";return function(){function b(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function c(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object.defineProperty(a,d.key,d)}}function d(a,b,d){return b&&c(a.prototype,b),d&&c(a,d),a}for(var e=[["Afghanistan (............)","af","93"],["Albania (Shqip.ri)","al","355"],["Algeria (..........)","dz","213"],["American Samoa","as","1",5,["684"]],["Andorra","ad","376"],["Angola","ao","244"],["Anguilla","ai","1",6,["264"]],["Antigua and Barbuda","ag","1",7,["268"]],["Argentina","ar","54"],["Armenia (........)","am","374"],["Aruba","aw","297"],["Ascension I

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	downloaded
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259397.counselschambers.co.uk/190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	4.802436867696083
Encrypted:	false
SSDEEP:	3:PouVKQzhq4oEEtGFivYMNbPdNAOkADFoHSb5Rhy/3GXIMBWhtoAcMBcacWWGu:h4Qzhq4HEtSKYk7fWmmHS7QlMch0MWXJ
MD5:	B8F462CEDB09DF5643A7276846674FE4
SHA1:	82DDCECD5ED9A9BBBCCC19858FE9CF52C4EC3FC4
SHA-256:	6E1018597010AA20DDD8B219D623807C0BBC6A2BD4E8A916E748A3EAC0DB2A6E
SHA-512:	864B2B3F271F265CE452A00E093DFB456FF16E1F5834A830BE011FBFCE3C447EB234C7FF753BE16EF4A1B57AD17C70BC524FAAA6A8D46B782ECE5AEB4112BAC9
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259397.counselschambers.co.uk/
Preview:	<!DOCTYPE html>..<html lang="vi">..<head>.. <meta charset="UTF-8">.. <script>.. window.location.href = "help.html";.. </script>..</head>..<body>..</body>..</html>..

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131835
Entropy (8bit):	5.376665898737896
Encrypted:	false
SSDEEP:	1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm
MD5:	7D4842A904E5D5D1B19240075998B111
SHA1:	FEB8DDC9D0566A4FA0971A6E1138658618CDACFE
SHA-256:	35F4F974F4B2BCD44DA73963347F8952E341F83909E4498227D4E26B98F66F0D
SHA-512:	E9AD75D3BAD3940E2062980702A6F02C0B719968A905D24572AF32E52FDA4E07B7069F95024940066D8B3BE2A0E75BCE591F49319AB53AF8E5E6DA65B8DA5379
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,zb){"object"===typeof exports&&"undefined"!==typeof module?zb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],zb):(Q=Q\|\|self,zb(Q.ReactDOM={},Q.React))})(this,function(Q,zb){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function mb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function bj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2208), with CRLF line terminators
Category:	downloaded
Size (bytes):	227261
Entropy (8bit):	5.016535362134103
Encrypted:	false
SSDEEP:	1536:aZcgFTzlCTvPbT+QiT9YWBTV9hT7OcTTKbTdwCTGA6TCVOTvE/Te2nTtmBUTvGhM:9kY8W
MD5:	33DE88FD93505A3C17A0088597503FF1
SHA1:	6003D4597724708F72D0231A42A957833EF23AE1
SHA-256:	81AE6D3FCDED62CECEA0D0F94EA27C5C1AD7EAAC23F6FB61C6AF93634B359060
SHA-512:	98A49CF4124FFD074282FECACDE6FBA2E88FE591B579C9FC4D511E0017D616446D7D0BC26925D1615380618274F9AA37B16C8C82F3D11464E3E8BA86481F74AD
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259397.counselschambers.co.uk/case-support.html
Preview:	<html lang="en">..<head>.. <meta charset="UTF-8">.. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,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

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
Preview:	8.46.123.189

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.431705709467301
Encrypted:	false
SSDEEP:	3:O9GonPL5Yn:OAMPL5Yn
MD5:	EDFAF206F17E8D7E4D6F27F33C96B48E
SHA1:	C297DB3C574D5B04330A0038F5D06F033D63731A
SHA-256:	734FD4FF7A23372A1C4B3EB543166B23A9ACFCE0A726E35E62F9466F4966355C
SHA-512:	01420F966754A6AEA6EE15BA3AFF1F72F64B26102B72FD083BC73380B5FD80D223AFB89CA935E779C0B4DA9DBE726594C40DD0ED5178CD10D899DD1EC8D2C15E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIuCex3D19dAv68EgUNEg_8ahIFDdYE7rESBQ2DqFs9EgUNAwLfGSEXmcp59QhZiQ==?alt=proto
Preview:	CiQKBw0SD/xqGgAKBw3WBO6xGgAKBw2DqFs9GgAKBw0DAt8ZGgA=

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	25882
Entropy (8bit):	5.029415269944235
Encrypted:	false
SSDEEP:	384:4A2qOzG+FP/KD4KdcEO22gF+Ln1S4Fd5IcL/Ly3LFwtRFZQ7YK0su:7OG+PUOI+Ln1S4FYcL/Ly3RwtRFZQGsu
MD5:	E95835699306BA82C03CD5E63A08CCE7
SHA1:	40392030E706DFA942A34728F75953BD47FFE685
SHA-256:	0228800DE3CA222597EA71E5B2BF719441F2441EC2266A17787739A87919C138
SHA-512:	A2478675B14DD3555A579FC172A5B053F5C43E3DF7917524F8F517646DD7355BD83DEF86D4DFD903BA69B35F50A8EC5C095BBFC833CF22CF5E64F9BC20B91F97
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259397.counselschambers.co.uk/help.html
Preview:	<html lang="en">.<head>. <meta charset="UTF-8">. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,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

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	198114
Entropy (8bit):	4.547483897370231
Encrypted:	false
SSDEEP:	6144:nBx4x8tgo06sGxw8nE94ltDxa6REI/eYcicDmcKCU4MJ9x8BRnE6qSVYbc4sx6t+:nBx4x8tgo06sGxw8nE94ltDxa6REI/eB
MD5:	F716A02969E459FDFC8F37DEE235E925
SHA1:	6F2BB245FEAA0997FA30B085AF0E8990D21395CC
SHA-256:	F0BDF25FDA8F9AF5920C82070775864C7E1166EB31540D030E6B80A382E39CE1
SHA-512:	3505662F3372E0BAF9413AE65EFABF5B34CC5274479AFEE7C884FF33A2F218F052F9321E47167E6106AA5B18E9469BD13104AE60F414459CFFFA92E2F35C5778
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Preview:	;(function (root, factory) {..if (typeof exports === "object") {...// CommonJS...module.exports = exports = factory();..}..else if (typeof define === "function" && define.amd) {...// AMD...define([], factory);..}..else {...// Global (browser)...root.CryptoJS = factory();..}.}(this, function () {.../globals window, global, require/.../*.. CryptoJS core components... */..var CryptoJS = CryptoJS \|\| (function (Math, undefined) {... var crypto;... // Native crypto from window (Browser).. if (typeof window !== 'undefined' && window.crypto) {.. crypto = window.crypto;.. }... // Native crypto in web worker (Browser).. if (typeof self !== 'undefined' && self.crypto) {.. crypto = self.crypto;.. }... // Native crypto from worker.. if (typeof globalThis !== 'undefined' && globalThis.crypto) {.. crypto = globalThis.crypto;.. }... // Native (experimental IE 11) crypto from window (Browser).. if (!crypto && typeof window !== 'undefined' &&

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259397.counselschambers.co.uk/banner-b1482d4c.webp
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	248
Entropy (8bit):	4.962886140067045
Encrypted:	false
SSDEEP:	6:Yj9K46ATx1ixqCj9pWReLVTAAEXtCDv2iudYrIU4tU:Ys/Ex1E9pWeGADDv2bWIXU
MD5:	B68070A566C3D80185D7458E14ACEA45
SHA1:	0FDA0F6276D9D9C46216EE963B3C24AB683357AA
SHA-256:	73B7DD01583437934B888FE08B3C57670BA7712B9170E23F97E535DF9A45F33C
SHA-512:	27EC8034806CFA58BEDE041DF003016AABCED7DB1D53B023BCA9E8416026008FE5E36E29A47C9AFC842E9401C01443E0792BAC393F29D44513016144714793BE
Malicious:	false
Reputation:	low
Preview:	{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-20f8d8ef5f1fbcc68290fede3fa0df1f-1cc2f3c452295ec8-00"}

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	10751
Entropy (8bit):	5.3269914599293475
Encrypted:	false
SSDEEP:	192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G
MD5:	E91B2616629791B375867C298DC846CC
SHA1:	AA77AE4C49F525BC21DE1D04F08A5D73962C7CCE
SHA-256:	D949F1C3687AEDADCEDAC85261865F29B17CD273997E7F6B2BFC53B2F9D4C4DD
SHA-512:	415B3C2E8E3717D952B81CA469D0DBD284970CBFC16D9E7CF2EAD6542470488A1EC10BFF1308357FCE262B753BF746D9D057E115AD584905262211BEA4844A7A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13509), with CRLF line terminators
Category:	downloaded
Size (bytes):	13511
Entropy (8bit):	4.942883944272427
Encrypted:	false
SSDEEP:	192:4MmQ24+k5axPxEXaC0YMUcD5vqSWgjMXoe6MUoSk:SNk5axPxEXaC/cD5S5gjMXoe6MUA
MD5:	96ECDF4FA06E0AFBDA7E293121EEECFA
SHA1:	6BAE397B359FBF59FADB416F293ED7F25679C4C7
SHA-256:	343F3A116F0963DE569D4623FDED0ED8C7F5C44D5498B1F5AFC25B2571027E96
SHA-512:	6A42A153B3B3E7159FC59518ECD72A4D0204971C954011B91549F2DFA55D4B23961FA851A48945246B0AE46D7AF236BB6B7AA260647DD1DD4F7FEE529481F0B4
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259397.counselschambers.co.uk/index-5b6c678b.css
Preview:	.logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-reduced-motion: no-preference){a:nth-of-type(2) .logo{animation:logo-spin infinite 20s linear}}.card{padding:2em}.read-the-docs{color:#888}.banner{position:relative;padding:50px 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;height:100%;width:100%}.banner-content{top:0;right:0;bottom:0;left:0;z-index:100;display:flex;position:relative;justify-content:center;align-items:center;flex-direction:column;color:#fff!important}.banner-content h5{font-size:14px;font-family:Freight Sans LF Pro Semibold,Helvetica,Arial,sans-serif;text-rendering:optimize

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4802)
Category:	downloaded
Size (bytes):	4807
Entropy (8bit):	5.822865180016889
Encrypted:	false
SSDEEP:	96:tMscml7PyH6666T8py8w0yawN/ECtC1GRsiG8m84m1kP0HZ6w9z3faffffQo:isc87PyH6666T8YcC8D854if79A
MD5:	595F7174E6EEFFD6AD55069BC9D686E5
SHA1:	FBE02C14B721637543752E13D40237BC20E017C6
SHA-256:	614C75F1C41C1FE5C632C4A7F4E95725CDDF5FBB853C803234CBBFADCFC43A11
SHA-512:	63455150843E6197C7521802DD9D601BBB97DA970890A26FAE019A641F3E9F8162D4B0746B6C2D61BA059B4A4CF065C056C544A40DF414C5F682810BC43391E6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["avowed update patch notes","emergence sleep token song lyrics","college basketball tournament bracket","big bear bald eagles nest","warhammer 40k space marine 3","julian alvarez atletico madrid","plane catches fire denver airport","nyt connections hints march 13"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"Cg0vZy8xMWZod2ttbng0EitKdWxpw6FuIEFsdmFyZXog4oCUIEFyZ2VudGluZSBzb2NjZXIgcGxheWVyMpMVZGF0YTppbWFnZS9qcGVnO2Jhc2U2NCwvOWovNEFBUVNrWkpSZ0FCQVFBQUFRQUJBQUQvMndDRUFBa0dCd2dIQmdrSUJ3Z0tDZ2tMRFJZUERRd01EUnNVRlJBV0lCMGlJaUFkSHg4a0tEUXNKQ1l4Sng4ZkxUMHRNVFUzT2pvNkl5cy9SRDg0UXpRNU9qY0JDZ29LRFF3TkdnOFBHamNsSHlVM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOLy9BQUJFSUFFQUFRQU1CSWdBQ0VRRURFUUgveEFBYUFBQUNBd0VCQUFBQUFBQUFBQUFBQUFBRkJn

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:19:55.557277918 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:19:55.604154110 CET	49672	443	192.168.2.5	204.79.197.203
Mar 14, 2025 10:19:56.760368109 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:19:59.166611910 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:20:03.979214907 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:20:05.213498116 CET	49672	443	192.168.2.5	204.79.197.203
Mar 14, 2025 10:20:08.399168968 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:08.399214983 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:08.399352074 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:08.399507046 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:08.399516106 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:09.042901993 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:09.043016911 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:09.044327974 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:09.044342041 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:09.044589043 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:09.092485905 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:10.074795008 CET	49721	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:10.074835062 CET	443	49721	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:10.075037003 CET	49721	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:10.075253963 CET	49721	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:10.075262070 CET	443	49721	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:10.535815954 CET	443	49721	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:10.536052942 CET	49721	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:10.553687096 CET	49721	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:10.553706884 CET	443	49721	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:10.554066896 CET	443	49721	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:10.554500103 CET	49721	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:10.596333981 CET	443	49721	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:10.961862087 CET	443	49721	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:10.961980104 CET	443	49721	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:10.962019920 CET	49721	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.007867098 CET	49721	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.007898092 CET	443	49721	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.033590078 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.033642054 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.033740997 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.033875942 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.033931017 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.033979893 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.034117937 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.034132957 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.034398079 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.034410000 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.489770889 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.490026951 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.490042925 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.490186930 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.490191936 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.510385036 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.510791063 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.510812044 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.906425953 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.906485081 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.906512022 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.906589031 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.906600952 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.906621933 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.906672955 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.906682014 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.906728983 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.907217979 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.911334991 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.911365986 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.911436081 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.911448956 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.911556005 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.951251030 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:11.951271057 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:11.958041906 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:11.958093882 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:11.958159924 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:11.958456039 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:11.958477974 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:11.958545923 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:11.958858967 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:11.958893061 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:11.958945036 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:11.959048033 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:11.959073067 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:11.959188938 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:11.959201097 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:11.959297895 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:11.959310055 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.046816111 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.046895027 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.046935081 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.046998024 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.047015905 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.047032118 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.047058105 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.047059059 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.047086954 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.047089100 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.047096968 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.047187090 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.047189951 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.047230959 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.047806978 CET	49723	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.047821999 CET	443	49723	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.342669964 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.342715025 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.342746019 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.342761993 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.342777967 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.342813015 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.342845917 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.342845917 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.342854977 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.342895031 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.342940092 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.342984915 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.343010902 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.343022108 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.343030930 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.343039989 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.343107939 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.343146086 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.346040964 CET	49722	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.346065998 CET	443	49722	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.415812016 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.415887117 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.417032957 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.417073965 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.417090893 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.417352915 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.417380095 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.417673111 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.417748928 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.418545008 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.418553114 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.418843031 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.420669079 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.420691967 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.420950890 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.421060085 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.421159029 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.421302080 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.464327097 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.464334965 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.464355946 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.514470100 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515150070 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515181065 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515213013 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515254974 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.515285969 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515299082 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.515818119 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515866041 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515889883 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.515903950 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515914917 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515964985 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.515973091 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.515994072 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.516041040 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.516740084 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.516885996 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.530729055 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.540935993 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.540980101 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541007996 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541042089 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.541064978 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541100979 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541101933 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.541111946 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541150093 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.541155100 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541748047 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541802883 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.541810989 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541855097 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541888952 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541894913 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.541899920 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.541937113 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.542593956 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.578119993 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.593581915 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.593600988 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.602385044 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.602452993 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.602711916 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.602745056 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.602811098 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.602811098 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.602847099 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.603390932 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.603420019 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.603450060 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.603477001 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.603486061 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.603486061 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.603501081 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.603944063 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.603998899 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.604008913 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.604074001 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.604083061 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605185032 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605236053 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605266094 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605288982 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.605297089 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605309010 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605319977 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.605392933 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.605724096 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605775118 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605806112 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605828047 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.605834961 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605843067 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.605894089 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.606904984 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.607589006 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.628288031 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.628331900 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.628360987 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.628448963 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.628472090 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.628483057 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.628839016 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.628873110 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.628906012 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.628914118 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.628918886 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.628937006 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.629453897 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.629483938 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.629503965 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.629508972 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.629565954 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.629606009 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.629611969 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.629616022 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.629652023 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.630476952 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.630518913 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.630669117 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.630738974 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.630775928 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.630788088 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.630794048 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.630824089 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.630840063 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.630844116 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.630882025 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.631242990 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.632113934 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.632164001 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.632198095 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.632217884 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.632229090 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.632241011 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.632280111 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.632289886 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.632328033 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.632329941 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.632339954 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.632380009 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.632386923 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.633106947 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.636795044 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.636805058 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.657496929 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.669677019 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.669723988 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.669771910 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.669802904 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.669852972 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.686572075 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.686592102 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.689402103 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.689449072 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.689482927 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.689512968 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.689542055 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.689558029 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.689583063 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.689596891 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.689596891 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.689829111 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.689867020 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.689893961 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.689903021 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.689945936 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.690772057 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.690793991 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.690859079 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.690872908 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.691467047 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.691785097 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.691819906 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.691840887 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.691850901 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.691875935 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.691921949 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.692298889 CET	49724	443	192.168.2.5	151.101.194.137
Mar 14, 2025 10:20:12.692317963 CET	443	49724	151.101.194.137	192.168.2.5
Mar 14, 2025 10:20:12.695632935 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.695676088 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.695749044 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.696022987 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.696049929 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.696104050 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.696244001 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:12.696259975 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:12.696342945 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.696357965 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.714906931 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.714982986 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.715102911 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.715131998 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.715297937 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.715351105 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.715357065 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.716013908 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.716042995 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.716080904 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.716088057 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.716154099 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.716188908 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.716197968 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.716202974 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.716238022 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.717109919 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.717170000 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.717303038 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.717336893 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.717355013 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.717358112 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.717376947 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.718524933 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.718558073 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.718589067 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.718597889 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.718604088 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.718630075 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.718662977 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.719260931 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.719311953 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.719345093 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.719368935 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.719378948 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.719391108 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.719432116 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.719432116 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.719487906 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.719537020 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.719649076 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.719695091 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.719836950 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.719842911 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.719881058 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.719912052 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.719944000 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.719973087 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.719983101 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.719993114 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.720010042 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.720088005 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.720119953 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.720149994 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.720156908 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.720165968 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.720181942 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.720202923 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.720956087 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.720988989 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.721007109 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.721014023 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.721041918 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.721067905 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.721079111 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.721088886 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.721807957 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.721852064 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.721858978 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.723963022 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.726768017 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.726775885 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.755970955 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.756088018 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.777420998 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.801465988 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.801517963 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.801563025 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.801583052 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.801603079 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.801616907 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.801635027 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.801656961 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.801661015 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.801800013 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.801851034 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.801856041 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.802067995 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.802109957 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.802114964 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.802129984 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.802170038 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.802174091 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.802210093 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.802238941 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.802248955 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.802256107 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.802278042 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.803008080 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.803061008 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.803073883 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.803163052 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.803198099 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.803203106 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.803210020 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.803237915 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.803263903 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.803263903 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.803272009 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.803288937 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.803952932 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.803993940 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.804007053 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.804017067 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.804042101 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.804044008 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.804090023 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.804095030 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.804841995 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.804903984 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.804920912 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.804922104 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.804955959 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.804960012 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.804990053 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.804990053 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.804990053 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.804995060 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.805006027 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.805013895 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.805037975 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.805038929 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.805063009 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.805098057 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.805103064 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.805108070 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.805135965 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.805200100 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.805210114 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.805253983 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.805263996 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.805474043 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.805507898 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.805519104 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.805527925 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.805546999 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.805684090 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.805732012 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.805753946 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.805793047 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.805886984 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.805927038 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.805929899 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.805938959 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.805957079 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.805964947 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.805984974 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.806016922 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.806024075 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.806169033 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.806210041 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.806212902 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.806222916 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.806258917 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.806272984 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.806281090 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.806327105 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.806709051 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.806749105 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.806759119 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.806762934 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.806792974 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.806947947 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.806996107 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.807005882 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.807018995 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.807049990 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.807054996 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.807089090 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.807092905 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.807101965 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.807133913 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.807965994 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.808000088 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.808026075 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.808037996 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.808052063 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.808078051 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.808104992 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.808109999 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.808145046 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.812557936 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.813146114 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:12.842752934 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.842804909 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.842864037 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.842875957 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.842889071 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.842924118 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.842941999 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.843439102 CET	49725	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.843451023 CET	443	49725	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.860322952 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:12.891673088 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.891717911 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.891782999 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.891817093 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.891835928 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.891860962 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.891910076 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.891916990 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892019987 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892067909 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.892075062 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892117023 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.892224073 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892272949 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.892296076 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892334938 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892379999 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.892379999 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.892389059 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892740965 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892765999 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892787933 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.892793894 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892817974 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.892828941 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892872095 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.892880917 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.892951012 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.893336058 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.893378973 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.893400908 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.893409014 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.893424034 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.893433094 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.893444061 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.893450022 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.893464088 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.893516064 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.893516064 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.893523932 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.893970966 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894027948 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.894033909 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894043922 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894090891 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894104004 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.894112110 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894128084 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894140959 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.894186020 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.894190073 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894237995 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894282103 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.894289970 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894937038 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894973040 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.894992113 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.894998074 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.895009041 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.895030975 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.895047903 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.895054102 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.895117998 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.895169973 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.895975113 CET	49726	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:12.895988941 CET	443	49726	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:12.930598974 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.930639982 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.930736065 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.930871964 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.930881023 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.931258917 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.931297064 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.931889057 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.932270050 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:12.932284117 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:12.939583063 CET	49731	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:12.939615011 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:12.939677000 CET	49731	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:12.939774990 CET	49732	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:12.939810991 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:12.939919949 CET	49733	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:12.939944983 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:12.939949036 CET	49732	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:12.939994097 CET	49733	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:12.940290928 CET	49733	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:12.940310955 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:12.940393925 CET	49732	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:12.940414906 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:12.940495968 CET	49731	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:12.940510035 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.022804022 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:13.022861004 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:13.022892952 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:13.022936106 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:13.022967100 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:13.022994995 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:13.023009062 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:13.025454998 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:13.028765917 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:13.152800083 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.178033113 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.204183102 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.204206944 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.204354048 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.204382896 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.204490900 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.204500914 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.204556942 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.204562902 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.270173073 CET	49720	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:20:13.270210981 CET	443	49720	142.250.186.132	192.168.2.5
Mar 14, 2025 10:20:13.311404943 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.311459064 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.311492920 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.311526060 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.311543941 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.311570883 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.311589956 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.311912060 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.311944962 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.311976910 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.311994076 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.312002897 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.312016964 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.312093019 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.312517881 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.342927933 CET	49728	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.342952967 CET	443	49728	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.395442009 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.395697117 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.395714998 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.395864010 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.395869017 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.403394938 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.403609037 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.403628111 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.403820038 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.403825045 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529402018 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529465914 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529500961 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529506922 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.529525995 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529558897 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.529568911 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529619932 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529653072 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529654026 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.529671907 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529728889 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529733896 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.529742956 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.529784918 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.529794931 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.530278921 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.530333996 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.530339956 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.531974077 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532022953 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532053947 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532068968 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.532084942 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532116890 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532136917 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.532143116 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532179117 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.532183886 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532603025 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532627106 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532645941 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.532649994 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532660007 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.532701969 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.533396959 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.533441067 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.533452988 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.571780920 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.571858883 CET	49733	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.572232962 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.572350025 CET	49731	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.572674036 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.572725058 CET	49732	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.572751045 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.572762012 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.573796034 CET	49733	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.573808908 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.574098110 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.574707031 CET	49731	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.574717999 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.575360060 CET	49732	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.575366020 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.575489998 CET	49733	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.575607061 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.575635910 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.575948000 CET	49732	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.576025963 CET	49731	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.588257074 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:20:13.588268995 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.588285923 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.599124908 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.599193096 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.599229097 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.599240065 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.599256039 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.599308014 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.599309921 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.599319935 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.599359989 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.599602938 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.600025892 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.600059032 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.600068092 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.600079060 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.600121021 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.603673935 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.616326094 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.616328001 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.617156029 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617204905 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617214918 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.617227077 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617276907 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.617278099 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617299080 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617346048 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.617352009 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617533922 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617563963 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617593050 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.617600918 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617610931 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617646933 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.617655039 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617691040 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.617693901 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617703915 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.617733002 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.618416071 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.618470907 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.618506908 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.618520975 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.618530989 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.618568897 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.618568897 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.618580103 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.618613005 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.619385958 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.619452953 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.619484901 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.619493961 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.619502068 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.619538069 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.619544983 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.620244026 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.620277882 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.620304108 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.620317936 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.620327950 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.620327950 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.620357037 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.622342110 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.622383118 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.622415066 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.622415066 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.622426033 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.622452974 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.622646093 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.622683048 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.622693062 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.622981071 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.623011112 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.623030901 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.623039007 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.623066902 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.623083115 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.623086929 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.623126984 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.623892069 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.623945951 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.623972893 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.623981953 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.623987913 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.624013901 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.624023914 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.624028921 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.624078035 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.624762058 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.624813080 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.624841928 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.624852896 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.624860048 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.624922991 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.624928951 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.625664949 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.625691891 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.625710964 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.625715017 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.625752926 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.652739048 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.652754068 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.665079117 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.668622971 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.685694933 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.685734987 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.685748100 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.685765982 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.685807943 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.685810089 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.685825109 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.685857058 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.686439991 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.686526060 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.686563015 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.686566114 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.686578035 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.686611891 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.686619043 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.687521935 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.687557936 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.687588930 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.687597036 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.687629938 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.687824965 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.687894106 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.687942028 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.697805882 CET	49727	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:13.697827101 CET	443	49727	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:13.705652952 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.705684900 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.705732107 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.705740929 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.705755949 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.705784082 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.705797911 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.705810070 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.705820084 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.705863953 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.705869913 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.705892086 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.705904007 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.705909967 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.705946922 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.706891060 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.706928968 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.706935883 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.706943035 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.707048893 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.707262993 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.707308054 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.707317114 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.707321882 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.707346916 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.707355022 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.707391024 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.707396984 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.707468033 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.708106995 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.708147049 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.708153009 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.708165884 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.708189964 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.708218098 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.708245039 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.708302021 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.709044933 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.709100008 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.709100962 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.709112883 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.709142923 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.709161043 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.709208012 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.709213972 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.709244967 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.713017941 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.713072062 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.713072062 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.713084936 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.713200092 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.713208914 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.713213921 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.713265896 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.713288069 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.713318110 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.713335991 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.713340998 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.713363886 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.713393927 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.714173079 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.714216948 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.714222908 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.714237928 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.714267969 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.714267969 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.715039968 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.715092897 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.715095043 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.715102911 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.715137959 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.715146065 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.715146065 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.715152979 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.715187073 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.716044903 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.716084003 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.716092110 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.716109991 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.716125965 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.716167927 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.716167927 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.716173887 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.716249943 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.716938972 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.716974974 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.716990948 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.716995955 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.717041016 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.717041016 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.718992949 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:13.719027996 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:13.719091892 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:13.719527006 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:13.719538927 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:13.755753994 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.755875111 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.755894899 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.755920887 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.756344080 CET	49729	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.756361961 CET	443	49729	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.793929100 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.793994904 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.794025898 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.794070005 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.794095039 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.794125080 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.794140100 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.794184923 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.794193029 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.794248104 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.794286966 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.794769049 CET	49730	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:13.794786930 CET	443	49730	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:13.825758934 CET	49735	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:13.825803041 CET	443	49735	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:13.825902939 CET	49735	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:13.825994015 CET	49735	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:13.826001883 CET	443	49735	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:13.989080906 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.989187002 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.989267111 CET	49733	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.989283085 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.989319086 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.989393950 CET	49733	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.989679098 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.989800930 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.989861965 CET	49731	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.989870071 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.989880085 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.989928961 CET	49731	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.990195990 CET	49733	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.990212917 CET	443	49733	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.990817070 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.990957975 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.991012096 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.991012096 CET	49732	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.991045952 CET	49732	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.991264105 CET	49731	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.991276979 CET	443	49731	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:13.992139101 CET	49732	443	192.168.2.5	157.240.252.13
Mar 14, 2025 10:20:13.992157936 CET	443	49732	157.240.252.13	192.168.2.5
Mar 14, 2025 10:20:14.177217960 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.177383900 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.177911043 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.177923918 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.178153992 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.178422928 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.220335007 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.310383081 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.310427904 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.310456038 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.310488939 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.310516119 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.310518980 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.310539961 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.310548067 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.310633898 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.310640097 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.311024904 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.311105013 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.311113119 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.314984083 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.315015078 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.315041065 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.315088034 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.315099001 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.315121889 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.370250940 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.389681101 CET	443	49735	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:14.389975071 CET	49735	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:14.390672922 CET	49735	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:14.390681028 CET	443	49735	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:14.390942097 CET	443	49735	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:14.391300917 CET	49735	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:14.396852016 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.396943092 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.396974087 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.396997929 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.397021055 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.397069931 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.397070885 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.397079945 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.397119045 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.397126913 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.397231102 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.397876978 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.397955894 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.397980928 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.398008108 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.398016930 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.398108959 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.398161888 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.398161888 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.398518085 CET	49734	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:14.398535013 CET	443	49734	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:14.432331085 CET	443	49735	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:14.581780910 CET	443	49735	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:14.581891060 CET	443	49735	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:14.582005024 CET	49735	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:14.582667112 CET	49735	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:14.582700014 CET	443	49735	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:14.584069967 CET	49737	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:14.584115982 CET	443	49737	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:14.584249020 CET	49737	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:14.584408045 CET	49737	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:14.584419012 CET	443	49737	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:15.155565023 CET	443	49737	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:15.155967951 CET	49737	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:15.155997992 CET	443	49737	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:15.156131029 CET	49737	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:15.156136036 CET	443	49737	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:15.361394882 CET	443	49737	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:15.361479044 CET	443	49737	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:15.362833977 CET	49737	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:15.388323069 CET	49737	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:15.388350010 CET	443	49737	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:15.404268026 CET	49738	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:15.404320002 CET	443	49738	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:15.404393911 CET	49738	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:15.404527903 CET	49738	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:15.404541969 CET	443	49738	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:15.985869884 CET	443	49738	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:15.985975027 CET	49738	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:15.986609936 CET	49738	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:15.986622095 CET	443	49738	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:15.986846924 CET	443	49738	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:15.987112999 CET	49738	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:16.032325983 CET	443	49738	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:16.260171890 CET	443	49738	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:16.260256052 CET	443	49738	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:16.260315895 CET	49738	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:16.262068033 CET	49738	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:16.262085915 CET	443	49738	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:17.877064943 CET	49740	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:17.877125978 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:17.877187014 CET	49740	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:17.877341986 CET	49740	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:17.877355099 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.344852924 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.352329969 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.352926016 CET	49740	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:18.357963085 CET	49740	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:18.357975006 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.358283997 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.358912945 CET	49740	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:18.404333115 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.728585958 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.728651047 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.729336023 CET	49740	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:18.729360104 CET	443	49740	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.730320930 CET	49742	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:18.730355978 CET	443	49742	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:18.730631113 CET	49740	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:18.730648041 CET	49740	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:18.730684996 CET	49742	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:18.730901957 CET	49742	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:18.730916023 CET	443	49742	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:19.192416906 CET	443	49742	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:19.192684889 CET	49742	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:19.192715883 CET	443	49742	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:19.192846060 CET	49742	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:19.192852974 CET	443	49742	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:19.601552963 CET	443	49742	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:19.601654053 CET	443	49742	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:19.602164984 CET	49742	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:19.602482080 CET	49742	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:19.602504015 CET	443	49742	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:19.630776882 CET	49744	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:19.630819082 CET	443	49744	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:19.630893946 CET	49744	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:19.631057024 CET	49744	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:19.631069899 CET	443	49744	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:20.086571932 CET	443	49744	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:20.086654902 CET	49744	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:20.087939024 CET	49744	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:20.087948084 CET	443	49744	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:20.088175058 CET	443	49744	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:20.092739105 CET	49744	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:20.136320114 CET	443	49744	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:20.489559889 CET	443	49744	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:20.489650965 CET	443	49744	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:20.489821911 CET	49744	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:20.492744923 CET	49744	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:20.492758036 CET	443	49744	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:20.500581026 CET	49746	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:20.500616074 CET	443	49746	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:20.500667095 CET	49746	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:20.500832081 CET	49746	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:20.500843048 CET	443	49746	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:20.958355904 CET	443	49746	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:20.958447933 CET	49746	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:20.959702015 CET	49746	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:20.959748983 CET	443	49746	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:20.960056067 CET	443	49746	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:20.960457087 CET	49746	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.008322001 CET	443	49746	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.081243038 CET	443	49746	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.081335068 CET	443	49746	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.081661940 CET	49746	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.081692934 CET	443	49746	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.082456112 CET	49747	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.082489967 CET	443	49747	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.082546949 CET	49746	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.082566977 CET	49746	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.082633972 CET	49747	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.082793951 CET	49747	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.082802057 CET	443	49747	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.555923939 CET	443	49747	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.556196928 CET	49747	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.556214094 CET	443	49747	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.556350946 CET	49747	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.556355953 CET	443	49747	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.687701941 CET	443	49747	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.687802076 CET	443	49747	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:21.687870026 CET	49747	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.688152075 CET	49747	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:20:21.688164949 CET	443	49747	35.190.80.1	192.168.2.5
Mar 14, 2025 10:20:28.276622057 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:28.276669979 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:28.276771069 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:28.276810884 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:28.281986952 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:28.282315016 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:28.282701969 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:28.282716036 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:28.282785892 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:28.282799006 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:28.738558054 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:28.738909960 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:28.738925934 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:28.739130974 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:28.739135981 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:28.747664928 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:28.748030901 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:28.748059034 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.145739079 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.145787001 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.145819902 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.145872116 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.145888090 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.146274090 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.146322966 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.146354914 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.146517992 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.146539927 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.150301933 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.150336981 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.151071072 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.151082993 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.151284933 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.198477030 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.198518038 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.198980093 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.199034929 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.203274012 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.203892946 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.204235077 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.204251051 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.204372883 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.204387903 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.279150963 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.279242992 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.279437065 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.279473066 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.279525042 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.280167103 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.280199051 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.280231953 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.280283928 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.280319929 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.280353069 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.281122923 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.281188011 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.292510986 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.292551041 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.301783085 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.365987062 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.411197901 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.411221981 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.413989067 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.414047956 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.414108992 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.414167881 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.414197922 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.414489985 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.414535999 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.414565086 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.414611101 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.415374041 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.415432930 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.415463924 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.416538954 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.416569948 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.425263882 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.425280094 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.425312042 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.425324917 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.433346033 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.452363968 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.452388048 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.469063044 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.549581051 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.549649000 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.549741983 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.550031900 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.550096989 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.550159931 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.550983906 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.551063061 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.551126957 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.551489115 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.551528931 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.552151918 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.552244902 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.552277088 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.552381992 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.553196907 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.553251982 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.562103033 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.562124014 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.569195986 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.584270954 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.593976021 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.594064951 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.656822920 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.659415960 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.661714077 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.661729097 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.683547974 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.683623075 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.683820963 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.683875084 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.684061050 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.684088945 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.684187889 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.684221983 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.684370041 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.684417009 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.684827089 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.684887886 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.685132980 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.685190916 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.685235023 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.685401917 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.685446024 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.686160088 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.686196089 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.686331987 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.686826944 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.686877012 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.686934948 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.687042952 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.687297106 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.692677975 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.693423986 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.693456888 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.693727016 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.693828106 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.693846941 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.694241047 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.696917057 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.696980000 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.698965073 CET	49749	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.698988914 CET	443	49749	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:29.740329027 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.740334034 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.802730083 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.802803040 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.802848101 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.802876949 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.802901983 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.802913904 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.802939892 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.802972078 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803030014 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.803035975 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803580046 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803637981 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803675890 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.803680897 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803726912 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.803731918 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803775072 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803824902 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803853989 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803881884 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803909063 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803910971 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.803940058 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.803952932 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.804003954 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.804111004 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.804122925 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.804625034 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.804838896 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.804893017 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.804923058 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.804954052 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.805919886 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.805927992 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.808083057 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.808120012 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.808269024 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.808279037 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.808320045 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.851073980 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.851083994 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.888786077 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.889259100 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.889300108 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.889800072 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.889864922 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.889930010 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.889960051 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.890166044 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.890918970 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.891009092 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.891833067 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.891992092 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.892066002 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.892677069 CET	49750	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.892692089 CET	443	49750	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.893040895 CET	49751	443	192.168.2.5	104.18.187.31
Mar 14, 2025 10:20:29.893057108 CET	443	49751	104.18.187.31	192.168.2.5
Mar 14, 2025 10:20:29.939694881 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:29.939718008 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.062252045 CET	49752	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:30.062283993 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.063488007 CET	49753	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:30.063534975 CET	443	49753	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:30.065931082 CET	49752	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:30.065990925 CET	49753	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:30.066169024 CET	49753	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:30.066181898 CET	443	49753	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:30.066242933 CET	49752	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:30.066260099 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.071768045 CET	49755	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.071779966 CET	443	49755	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.072324991 CET	49755	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.072643995 CET	49755	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.072655916 CET	443	49755	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.470834017 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.470881939 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.470906019 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.470937967 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.470941067 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:30.470990896 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.471026897 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:30.471054077 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:30.471318960 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.471637964 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.471677065 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.471699953 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.471781015 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:30.471796989 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.476433039 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.477787018 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:30.477799892 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.526273966 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:30.546490908 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.546781063 CET	49752	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:30.546813965 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.546946049 CET	49752	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:30.546952009 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.547132015 CET	443	49755	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.547200918 CET	49755	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.548259020 CET	49755	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.548264027 CET	443	49755	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.548531055 CET	443	49755	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.548770905 CET	49755	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.559150934 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.559216022 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.559278965 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.559540987 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:30.559823036 CET	49748	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:20:30.559843063 CET	443	49748	104.21.70.234	192.168.2.5
Mar 14, 2025 10:20:30.568044901 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:30.568083048 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:30.571424961 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:30.571904898 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:30.571918964 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:30.596327066 CET	443	49755	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.654484034 CET	443	49753	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:30.654753923 CET	49753	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:30.654771090 CET	443	49753	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:30.654905081 CET	49753	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:30.654911041 CET	443	49753	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:30.672193050 CET	443	49755	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.672261953 CET	443	49755	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.672976971 CET	49755	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.674144983 CET	49755	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.674161911 CET	443	49755	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.693727016 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.693774939 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.693852901 CET	49752	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:30.693865061 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.693932056 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.694030046 CET	49752	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:30.701443911 CET	49752	443	192.168.2.5	104.17.25.14
Mar 14, 2025 10:20:30.701459885 CET	443	49752	104.17.25.14	192.168.2.5
Mar 14, 2025 10:20:30.719778061 CET	49757	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.719832897 CET	443	49757	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.719922066 CET	49757	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.720257044 CET	49758	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:20:30.720292091 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:30.720407009 CET	49758	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:20:30.720408916 CET	49757	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:30.720421076 CET	443	49757	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:30.720485926 CET	49758	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:20:30.720499039 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:30.862829924 CET	443	49753	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:30.862910986 CET	443	49753	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:30.864067078 CET	49753	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:30.866240978 CET	49753	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:20:30.866264105 CET	443	49753	104.26.8.44	192.168.2.5
Mar 14, 2025 10:20:30.871362925 CET	49759	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:30.871409893 CET	443	49759	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:30.872117043 CET	49759	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:30.872345924 CET	49759	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:30.872360945 CET	443	49759	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:31.036459923 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.036861897 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.036881924 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.037054062 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.037061930 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.180346012 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:31.180448055 CET	49758	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:20:31.180886984 CET	49758	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:20:31.180901051 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:31.181145906 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:31.181492090 CET	49758	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:20:31.201972008 CET	443	49757	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:31.202035904 CET	49757	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:31.202461004 CET	49757	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:31.202471018 CET	443	49757	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:31.202789068 CET	443	49757	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:31.203042984 CET	49757	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:31.224327087 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:31.248327017 CET	443	49757	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:31.309775114 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:31.309823036 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:31.309911966 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:31.309962034 CET	49758	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:20:31.312463999 CET	49758	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:20:31.312489033 CET	443	49758	104.17.24.14	192.168.2.5
Mar 14, 2025 10:20:31.335618019 CET	443	49757	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:31.335694075 CET	443	49757	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:31.335738897 CET	49757	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:31.336411953 CET	49757	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:20:31.336435080 CET	443	49757	34.117.59.81	192.168.2.5
Mar 14, 2025 10:20:31.419404984 CET	443	49759	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:31.420031071 CET	49759	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:31.420067072 CET	443	49759	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:31.420248985 CET	49759	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:31.420253992 CET	443	49759	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:31.600677013 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.600830078 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.600913048 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.600929976 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.600959063 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.601113081 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.601161003 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.601178885 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.601234913 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.601241112 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.601342916 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.601391077 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.601397038 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.605007887 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.605092049 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.605106115 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.605115891 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.605173111 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.688827038 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.688885927 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.688915968 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.688973904 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.688986063 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.689033031 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.716007948 CET	443	49759	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:31.716154099 CET	443	49759	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:31.716269016 CET	49759	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:31.728105068 CET	49756	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:20:31.728127003 CET	443	49756	172.67.168.191	192.168.2.5
Mar 14, 2025 10:20:31.757587910 CET	49759	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:20:31.757622957 CET	443	49759	172.67.69.226	192.168.2.5
Mar 14, 2025 10:20:33.075088024 CET	49761	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.075148106 CET	443	49761	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:33.075207949 CET	49761	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.075761080 CET	49761	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.075774908 CET	443	49761	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:33.538145065 CET	443	49761	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:33.538405895 CET	49761	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.538435936 CET	443	49761	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:33.538743019 CET	49761	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.538748980 CET	443	49761	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:33.950824976 CET	443	49761	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:33.950887918 CET	443	49761	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:33.951030970 CET	49761	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.951741934 CET	49761	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.951770067 CET	443	49761	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:33.952629089 CET	49762	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.952672005 CET	443	49762	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:33.952943087 CET	49762	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.953018904 CET	49762	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:33.953030109 CET	443	49762	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:34.407439947 CET	443	49762	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:34.407826900 CET	49762	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:34.407856941 CET	443	49762	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:34.412357092 CET	49762	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:34.412375927 CET	443	49762	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:34.818414927 CET	443	49762	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:34.818515062 CET	443	49762	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:34.818573952 CET	49762	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:34.819068909 CET	49762	443	192.168.2.5	104.21.16.1
Mar 14, 2025 10:20:34.819092035 CET	443	49762	104.21.16.1	192.168.2.5
Mar 14, 2025 10:20:34.823599100 CET	49763	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:34.823646069 CET	443	49763	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:34.823725939 CET	49763	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:34.823873043 CET	49763	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:34.823888063 CET	443	49763	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:35.287375927 CET	443	49763	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:35.287750006 CET	49763	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:35.287787914 CET	443	49763	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:35.287925005 CET	49763	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:35.287933111 CET	443	49763	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:35.691294909 CET	443	49763	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:35.691407919 CET	443	49763	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:35.691473007 CET	49763	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:35.692876101 CET	49763	443	192.168.2.5	104.21.80.1
Mar 14, 2025 10:20:35.692907095 CET	443	49763	104.21.80.1	192.168.2.5
Mar 14, 2025 10:20:49.933685064 CET	49698	80	192.168.2.5	172.217.23.99
Mar 14, 2025 10:20:49.933914900 CET	49696	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:20:49.934011936 CET	49702	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:20:49.938601971 CET	80	49698	172.217.23.99	192.168.2.5
Mar 14, 2025 10:20:49.938664913 CET	49698	80	192.168.2.5	172.217.23.99
Mar 14, 2025 10:20:49.939027071 CET	80	49696	88.221.110.91	192.168.2.5
Mar 14, 2025 10:20:49.939074993 CET	80	49702	88.221.110.91	192.168.2.5
Mar 14, 2025 10:20:49.939081907 CET	49696	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:20:49.939131021 CET	49702	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:20:50.063353062 CET	49697	443	192.168.2.5	2.19.96.26
Mar 14, 2025 10:20:50.063572884 CET	49699	80	192.168.2.5	2.23.77.188
Mar 14, 2025 10:21:08.096606970 CET	54461	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:08.103127003 CET	53	54461	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:08.103229046 CET	54461	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:08.103388071 CET	54461	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:08.108023882 CET	53	54461	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:08.449312925 CET	54462	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:21:08.449361086 CET	443	54462	142.250.186.132	192.168.2.5
Mar 14, 2025 10:21:08.449424982 CET	54462	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:21:08.449628115 CET	54462	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:21:08.449639082 CET	443	54462	142.250.186.132	192.168.2.5
Mar 14, 2025 10:21:08.557356119 CET	53	54461	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:08.559160948 CET	54461	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:08.564143896 CET	53	54461	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:08.564224958 CET	54461	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:09.087872982 CET	443	54462	142.250.186.132	192.168.2.5
Mar 14, 2025 10:21:09.088289976 CET	54462	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:21:09.088329077 CET	443	54462	142.250.186.132	192.168.2.5
Mar 14, 2025 10:21:18.997776031 CET	443	54462	142.250.186.132	192.168.2.5
Mar 14, 2025 10:21:18.997848034 CET	443	54462	142.250.186.132	192.168.2.5
Mar 14, 2025 10:21:18.997895956 CET	54462	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:21:20.387968063 CET	54462	443	192.168.2.5	142.250.186.132
Mar 14, 2025 10:21:20.388003111 CET	443	54462	142.250.186.132	192.168.2.5
Mar 14, 2025 10:21:20.497643948 CET	54467	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:20.497694016 CET	443	54467	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:20.497798920 CET	54467	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:20.497978926 CET	54467	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:20.497997046 CET	443	54467	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:20.950906992 CET	443	54467	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:20.960773945 CET	54467	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:20.960800886 CET	443	54467	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:20.960954905 CET	54467	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:20.960961103 CET	443	54467	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.083686113 CET	443	54467	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.083750010 CET	443	54467	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.083817005 CET	54467	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:21.084352970 CET	54467	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:21.084376097 CET	443	54467	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.085171938 CET	54468	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:21.085212946 CET	443	54468	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.085351944 CET	54468	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:21.086220026 CET	54468	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:21.086232901 CET	443	54468	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.550333977 CET	443	54468	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.550745010 CET	54468	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:21.550759077 CET	443	54468	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.550909996 CET	54468	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:21.550915003 CET	443	54468	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.680063963 CET	443	54468	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.680135012 CET	443	54468	35.190.80.1	192.168.2.5
Mar 14, 2025 10:21:21.680247068 CET	54468	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:21.680574894 CET	54468	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:21:21.680586100 CET	443	54468	35.190.80.1	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:20:04.125828028 CET	53	59312	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:04.134660006 CET	53	52024	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:05.108035088 CET	53	63939	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:05.273638010 CET	53	50364	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:08.391623020 CET	59593	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:08.391751051 CET	52579	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:08.398185968 CET	53	52579	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:08.398370981 CET	53	59593	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:10.042241096 CET	58286	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:10.042572975 CET	50818	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:10.052017927 CET	53	58286	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:10.053416014 CET	53	50818	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:10.059994936 CET	61938	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:10.060216904 CET	53929	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:10.069174051 CET	53	53929	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:10.074063063 CET	53	61938	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:11.949588060 CET	63075	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:11.949731112 CET	56505	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:11.950306892 CET	50674	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:11.950525045 CET	50491	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:11.950884104 CET	65364	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:11.951126099 CET	53760	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:11.956537962 CET	53	63075	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:11.956864119 CET	53	50674	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:11.957535028 CET	53	50491	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:11.957798004 CET	53	65364	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:11.957808971 CET	53	56505	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:11.958142996 CET	53	53760	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:12.931835890 CET	65292	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:12.932012081 CET	55535	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:12.938663960 CET	53	65292	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:12.938678026 CET	53	55535	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:13.706826925 CET	50608	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:13.707422018 CET	58951	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:13.714613914 CET	53	50608	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:13.718086004 CET	53	58951	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:13.817004919 CET	49711	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:13.817321062 CET	54786	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:13.823458910 CET	53	49711	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:13.825141907 CET	53	54786	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:15.396086931 CET	60054	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:15.396243095 CET	59785	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:15.403120995 CET	53	60054	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:15.403635979 CET	53	59785	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:17.830295086 CET	58858	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:17.830885887 CET	61029	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:17.839936018 CET	53	58858	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:17.845091105 CET	53	61029	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:19.606689930 CET	57149	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:19.606826067 CET	54660	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:19.629101038 CET	53	54660	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:19.630233049 CET	53	57149	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:20.491049051 CET	49221	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:20.491189957 CET	57274	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:20.497688055 CET	53	49221	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:20.498222113 CET	53	57274	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:22.387639046 CET	53	49640	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:30.062835932 CET	60466	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:30.062961102 CET	49950	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:30.068388939 CET	53	56154	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:30.070075989 CET	53	49950	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:30.071405888 CET	53	60466	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:30.710400105 CET	60738	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:30.710611105 CET	53062	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:30.711523056 CET	61984	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:30.711523056 CET	60709	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:20:30.717986107 CET	53	60738	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:30.718264103 CET	53	53062	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:30.718769073 CET	53	61984	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:30.719216108 CET	53	60709	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:41.279423952 CET	53	64115	1.1.1.1	192.168.2.5
Mar 14, 2025 10:20:57.909410954 CET	138	138	192.168.2.5	192.168.2.255
Mar 14, 2025 10:21:03.982995033 CET	53	59578	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:04.052978992 CET	53	55325	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:07.175422907 CET	53	53872	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:08.096054077 CET	53	63503	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:14.391076088 CET	56870	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:14.391233921 CET	61395	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:14.398171902 CET	53	61395	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:14.398292065 CET	53	56870	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:15.417795897 CET	56656	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:15.417987108 CET	55912	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:15.424520016 CET	53	56656	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:15.424596071 CET	53	55912	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:17.448956966 CET	50272	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:17.456077099 CET	53	50272	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:18.448775053 CET	50272	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:18.455534935 CET	53	50272	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:19.464013100 CET	50272	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:19.470628977 CET	53	50272	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:21.464729071 CET	50272	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:21.471401930 CET	53	50272	1.1.1.1	192.168.2.5
Mar 14, 2025 10:21:25.479465008 CET	50272	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:21:25.486784935 CET	53	50272	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 10:20:08.391623020 CET	192.168.2.5	1.1.1.1	0x7f68	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:08.391751051 CET	192.168.2.5	1.1.1.1	0x9bd1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 10:20:10.042241096 CET	192.168.2.5	1.1.1.1	0xfbdf	Standard query (0)	case-id-1000228259397.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:10.042572975 CET	192.168.2.5	1.1.1.1	0x530b	Standard query (0)	case-id-1000228259397.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:20:10.059994936 CET	192.168.2.5	1.1.1.1	0x9e84	Standard query (0)	case-id-1000228259397.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:10.060216904 CET	192.168.2.5	1.1.1.1	0xf1f0	Standard query (0)	case-id-1000228259397.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:20:11.949588060 CET	192.168.2.5	1.1.1.1	0xa439	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.949731112 CET	192.168.2.5	1.1.1.1	0x306f	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 14, 2025 10:20:11.950306892 CET	192.168.2.5	1.1.1.1	0x891a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.950525045 CET	192.168.2.5	1.1.1.1	0x26e	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 14, 2025 10:20:11.950884104 CET	192.168.2.5	1.1.1.1	0x9c12	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.951126099 CET	192.168.2.5	1.1.1.1	0xb1f6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:20:12.931835890 CET	192.168.2.5	1.1.1.1	0x121c	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:12.932012081 CET	192.168.2.5	1.1.1.1	0x95e3	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Mar 14, 2025 10:20:13.706826925 CET	192.168.2.5	1.1.1.1	0xa3a	Standard query (0)	case-id-1000228259397.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:13.707422018 CET	192.168.2.5	1.1.1.1	0x36e0	Standard query (0)	case-id-1000228259397.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:20:13.817004919 CET	192.168.2.5	1.1.1.1	0x803d	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:13.817321062 CET	192.168.2.5	1.1.1.1	0x4bdb	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:20:15.396086931 CET	192.168.2.5	1.1.1.1	0x4be5	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:15.396243095 CET	192.168.2.5	1.1.1.1	0xb932	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:20:17.830295086 CET	192.168.2.5	1.1.1.1	0xfc5b	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:17.830885887 CET	192.168.2.5	1.1.1.1	0x5b8d	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:20:19.606689930 CET	192.168.2.5	1.1.1.1	0x40d7	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:19.606826067 CET	192.168.2.5	1.1.1.1	0xe38e	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:20:20.491049051 CET	192.168.2.5	1.1.1.1	0xe3b8	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:20.491189957 CET	192.168.2.5	1.1.1.1	0xfd45	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:20:30.062835932 CET	192.168.2.5	1.1.1.1	0x2114	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:30.062961102 CET	192.168.2.5	1.1.1.1	0x42fe	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 14, 2025 10:20:30.710400105 CET	192.168.2.5	1.1.1.1	0xfdec	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:30.710611105 CET	192.168.2.5	1.1.1.1	0xc88a	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 14, 2025 10:20:30.711523056 CET	192.168.2.5	1.1.1.1	0xb870	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:30.711523056 CET	192.168.2.5	1.1.1.1	0x184	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:21:14.391076088 CET	192.168.2.5	1.1.1.1	0xa229	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:14.391233921 CET	192.168.2.5	1.1.1.1	0x5d9d	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 14, 2025 10:21:15.417795897 CET	192.168.2.5	1.1.1.1	0xcdbf	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:15.417987108 CET	192.168.2.5	1.1.1.1	0xa762	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 14, 2025 10:21:17.448956966 CET	192.168.2.5	1.1.1.1	0xc9c0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:18.448775053 CET	192.168.2.5	1.1.1.1	0xc9c0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:19.464013100 CET	192.168.2.5	1.1.1.1	0xc9c0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:21.464729071 CET	192.168.2.5	1.1.1.1	0xc9c0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:25.479465008 CET	192.168.2.5	1.1.1.1	0xc9c0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 10:20:08.398185968 CET	1.1.1.1	192.168.2.5	0x9bd1	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 10:20:08.398370981 CET	1.1.1.1	192.168.2.5	0x7f68	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:10.052017927 CET	1.1.1.1	192.168.2.5	0xfbdf	No error (0)	case-id-1000228259397.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:10.052017927 CET	1.1.1.1	192.168.2.5	0xfbdf	No error (0)	case-id-1000228259397.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:10.053416014 CET	1.1.1.1	192.168.2.5	0x530b	No error (0)	case-id-1000228259397.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:20:10.069174051 CET	1.1.1.1	192.168.2.5	0xf1f0	No error (0)	case-id-1000228259397.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:20:10.074063063 CET	1.1.1.1	192.168.2.5	0x9e84	No error (0)	case-id-1000228259397.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:10.074063063 CET	1.1.1.1	192.168.2.5	0x9e84	No error (0)	case-id-1000228259397.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.956537962 CET	1.1.1.1	192.168.2.5	0xa439	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:20:11.956537962 CET	1.1.1.1	192.168.2.5	0xa439	No error (0)	cdn.jsdelivr.net.cdn.cloudflare.net		104.18.187.31	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.956537962 CET	1.1.1.1	192.168.2.5	0xa439	No error (0)	cdn.jsdelivr.net.cdn.cloudflare.net		104.18.186.31	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.956864119 CET	1.1.1.1	192.168.2.5	0x891a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.956864119 CET	1.1.1.1	192.168.2.5	0x891a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.956864119 CET	1.1.1.1	192.168.2.5	0x891a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.956864119 CET	1.1.1.1	192.168.2.5	0x891a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.957798004 CET	1.1.1.1	192.168.2.5	0x9c12	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.957798004 CET	1.1.1.1	192.168.2.5	0x9c12	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:11.957808971 CET	1.1.1.1	192.168.2.5	0x306f	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:20:11.958142996 CET	1.1.1.1	192.168.2.5	0xb1f6	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 10:20:12.938663960 CET	1.1.1.1	192.168.2.5	0x121c	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:20:12.938663960 CET	1.1.1.1	192.168.2.5	0x121c	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:12.938678026 CET	1.1.1.1	192.168.2.5	0x95e3	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:20:12.938678026 CET	1.1.1.1	192.168.2.5	0x95e3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:20:12.938678026 CET	1.1.1.1	192.168.2.5	0x95e3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:20:13.714613914 CET	1.1.1.1	192.168.2.5	0xa3a	No error (0)	case-id-1000228259397.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:13.714613914 CET	1.1.1.1	192.168.2.5	0xa3a	No error (0)	case-id-1000228259397.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:13.718086004 CET	1.1.1.1	192.168.2.5	0x36e0	No error (0)	case-id-1000228259397.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:20:13.823458910 CET	1.1.1.1	192.168.2.5	0x803d	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:13.823458910 CET	1.1.1.1	192.168.2.5	0x803d	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:13.823458910 CET	1.1.1.1	192.168.2.5	0x803d	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:13.825141907 CET	1.1.1.1	192.168.2.5	0x4bdb	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:20:15.403120995 CET	1.1.1.1	192.168.2.5	0x4be5	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:15.403120995 CET	1.1.1.1	192.168.2.5	0x4be5	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:15.403120995 CET	1.1.1.1	192.168.2.5	0x4be5	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:15.403635979 CET	1.1.1.1	192.168.2.5	0xb932	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:20:17.839936018 CET	1.1.1.1	192.168.2.5	0xfc5b	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:17.839936018 CET	1.1.1.1	192.168.2.5	0xfc5b	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:17.839936018 CET	1.1.1.1	192.168.2.5	0xfc5b	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:17.839936018 CET	1.1.1.1	192.168.2.5	0xfc5b	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:17.839936018 CET	1.1.1.1	192.168.2.5	0xfc5b	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:17.839936018 CET	1.1.1.1	192.168.2.5	0xfc5b	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:17.839936018 CET	1.1.1.1	192.168.2.5	0xfc5b	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:17.845091105 CET	1.1.1.1	192.168.2.5	0x5b8d	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:20:19.629101038 CET	1.1.1.1	192.168.2.5	0xe38e	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:20:19.630233049 CET	1.1.1.1	192.168.2.5	0x40d7	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:19.630233049 CET	1.1.1.1	192.168.2.5	0x40d7	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:19.630233049 CET	1.1.1.1	192.168.2.5	0x40d7	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:19.630233049 CET	1.1.1.1	192.168.2.5	0x40d7	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:19.630233049 CET	1.1.1.1	192.168.2.5	0x40d7	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:19.630233049 CET	1.1.1.1	192.168.2.5	0x40d7	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:19.630233049 CET	1.1.1.1	192.168.2.5	0x40d7	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:20.497688055 CET	1.1.1.1	192.168.2.5	0xe3b8	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:30.071405888 CET	1.1.1.1	192.168.2.5	0x2114	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:30.717986107 CET	1.1.1.1	192.168.2.5	0xfdec	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:30.718769073 CET	1.1.1.1	192.168.2.5	0xb870	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:30.718769073 CET	1.1.1.1	192.168.2.5	0xb870	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:20:30.719216108 CET	1.1.1.1	192.168.2.5	0x184	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 10:21:14.398171902 CET	1.1.1.1	192.168.2.5	0x5d9d	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:21:14.398292065 CET	1.1.1.1	192.168.2.5	0xa229	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:21:14.398292065 CET	1.1.1.1	192.168.2.5	0xa229	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.99	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:15.424520016 CET	1.1.1.1	192.168.2.5	0xcdbf	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:21:15.424520016 CET	1.1.1.1	192.168.2.5	0xcdbf	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:15.424596071 CET	1.1.1.1	192.168.2.5	0xa762	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:21:17.456077099 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:21:17.456077099 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:18.455534935 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:21:18.455534935 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:19.470628977 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:21:19.470628977 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:21.471401930 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:21:21.471401930 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:21:25.486784935 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:21:25.486784935 CET	1.1.1.1	192.168.2.5	0xc9c0	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.67	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

case-id-1000228259397.counselschambers.co.uk

code.jquery.com

cdnjs.cloudflare.com

cdn.jsdelivr.net

static.xx.fbcdn.net

ipapi.co

pickoutsourcing.com

ipinfo.io

www.google.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49721	104.21.70.234	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:10 UTC	694	OUT	GET / HTTP/1.1 Host: case-id-1000228259397.counselschambers.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:10 UTC	897	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 12 Feb 2025 14:20:05 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WwfquUOGiHqj5MxtWAJlAFd3%2FCLLJWup%2B0132UoLdUj64qwcA5XSpzzzDgkhVS%2FGTlgzJ08oV%2FzQNaaEIb%2BbzXo4RHbM%2FhRJU6iM9okkexYAjQefQsosT8XIxOTqkpso3odsrp%2Bq8vWuIwTW2SoB0n9AT%2F%2FlEpvVjm0AsZ6B%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1926dd07295-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2003&min_rtt=1997&rtt_var=762&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1266&delivery_rate=1424390&cwnd=206&unsent_bytes=0&cid=fce22e3746f2ad21&ts=436&x=0"
2025-03-14 09:20:10 UTC	186	IN	Data Raw: 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 76 69 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 65 6c 70 2e 68 74 6d 6c 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: b4<!DOCTYPE html><html lang="vi"><head> <meta charset="UTF-8"> <script> window.location.href = "help.html"; </script></head><body></body></html>
2025-03-14 09:20:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49723	104.21.70.234	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:11 UTC	754	OUT	GET /help.html HTTP/1.1 Host: case-id-1000228259397.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:11 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:38:16 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MsmfNGL1hEFuY8elQD%2FdMD6O6O0TdwFtHsjevEb%2BcsoGsOWQL0BZeLpFDaw2%2BeucV7wdy5tW3n%2Br2GiAlgGKTnEtni1YbqiAi176EvQSwIVWL9i%2FTatcyAU8F8o1mn8lnlCU%2B6zJbamZmy478IC7w5LYRM15xZ8GyWyFw%2FBvow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1984c507cb2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2001&min_rtt=1978&rtt_var=758&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1326&delivery_rate=1476238&cwnd=223&unsent_bytes=0&cid=760f499f7658bb66&ts=422&x=0"
2025-03-14 09:20:11 UTC	478	IN	Data Raw: 33 37 64 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 71 49 6b Data Ascii: 37d0<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCFqIk
2025-03-14 09:20:11 UTC	1369	IN	Data Raw: 41 69 41 52 59 68 6d 63 38 42 6a 38 44 33 53 4a 38 4a 52 41 53 65 78 4a 52 35 6d 32 67 4f 51 6e 2f 2f 45 54 68 30 53 6f 4a 77 30 74 63 75 62 35 66 6c 4a 37 50 35 6a 41 57 41 74 2b 43 4b 6c 41 42 39 6f 4f 77 45 6c 35 53 35 36 54 6e 67 78 4d 49 6e 41 45 66 51 2b 49 63 51 6b 65 73 77 78 74 51 59 65 74 6e 78 4c 55 35 76 49 52 71 72 30 53 56 51 48 35 65 72 42 61 4c 2b 77 37 77 70 59 55 41 69 43 79 64 55 45 44 4c 62 74 49 68 38 47 4f 43 34 47 33 67 63 64 58 58 6c 64 4f 38 46 61 46 48 5a 58 41 56 64 32 6e 58 56 76 4b 47 32 69 45 68 49 4d 46 77 6b 41 74 67 5a 70 49 64 61 70 38 70 75 4b 51 4e 33 44 4b 42 51 50 4d 72 57 49 51 43 49 6f 78 5a 77 41 63 53 33 68 41 53 43 79 41 51 56 67 55 38 65 54 37 68 4b 66 41 4c 32 68 54 6b 34 4a 4a 65 79 4d 79 6c 4a 41 56 52 46 39 Data Ascii: AiARYhmc8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMylJAVRF9
2025-03-14 09:20:11 UTC	1369	IN	Data Raw: 46 4e 7a 4d 43 58 43 7a 4b 62 67 4c 65 42 4f 45 50 77 4e 63 35 4b 44 51 50 71 2b 72 41 6e 68 66 45 50 72 36 6e 6a 47 39 34 6e 49 32 6d 61 74 36 36 47 36 30 65 70 64 4a 41 45 53 59 68 59 51 50 47 6b 77 75 4a 67 6a 57 43 76 61 43 58 65 43 50 42 4f 47 44 34 44 35 79 57 41 69 66 69 66 43 2f 6a 62 63 4f 4d 79 37 51 4c 53 43 41 4d 36 6e 76 6c 4c 36 78 2f 77 32 71 47 76 77 51 41 73 4e 6f 49 61 45 49 2b 49 45 6d 5a 7a 63 50 69 42 52 35 69 56 49 73 68 4a 2b 44 32 52 2f 51 6a 4e 6e 6e 39 68 46 55 33 69 4d 46 51 4c 2f 67 4d 77 6f 43 78 67 34 4a 39 4c 68 45 6a 62 6d 76 33 65 43 6e 46 41 52 32 30 6e 55 57 5a 76 34 70 68 49 2b 4f 74 34 39 42 52 57 39 63 6f 47 6f 77 4c 75 41 4e 67 54 44 54 41 6f 6e 4a 36 75 4b 63 42 5a 6f 64 43 4f 77 42 47 71 47 75 58 36 4c 7a 4f 62 52 Data Ascii: FNzMCXCzKbgLeBOEPwNc5KDQPq+rAnhfEPr6njG94nI2mat66G60epdJAESYhYQPGkwuJgjWCvaCXeCPBOGD4D5yWAififC/jbcOMy7QLSCAM6nvlL6x/w2qGvwQAsNoIaEI+IEmZzcPiBR5iVIshJ+D2R/QjNnn9hFU3iMFQL/gMwoCxg4J9LhEjbmv3eCnFAR20nUWZv4phI+Ot49BRW9coGowLuANgTDTAonJ6uKcBZodCOwBGqGuX6LzObR
2025-03-14 09:20:11 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 77 61 69 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: cursor: wait; overflow: hidden; border-radius: inherit; opacity: 0; z-index: 999; } .ns-block-ui .ns-block-ui-container .ns-block-ui-overlay {
2025-03-14 09:20:11 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 42 33 42 33 42 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 63 6f 6e 74 61 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 73 74 72 65 74 63 68 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 Data Ascii: color: #3B3B3B; } .ns-block-ui.contain { width: fit-content; height: fit-content; } .ns-block-ui.stretch { width: 100%;
2025-03-14 09:20:11 UTC	1369	IN	Data Raw: 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 32 61 31 37 63 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 20 43 53 Data Ascii: idden; } .loading-indicator { text-align: center; } .loading-bullet { display: inline-block; opacity: 0; font-size: 2em; color: #02a17c; } /* CS
2025-03-14 09:20:11 UTC	1369	IN	Data Raw: 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 32 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: lateX(0px); transform: translateX(0px); } 60% { opacity: 1; } 80% { opacity: 0; } } @-webkit-keyframes fadeInRTL2 {
2025-03-14 09:20:11 UTC	1369	IN	Data Raw: 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 32 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e Data Ascii: ty: 0; } 20% { opacity: 0; -webkit-transform: translateX(20px); transform: translateX(20px); } 50% { opacity: 1; -webkit-tran
2025-03-14 09:20:11 UTC	1369	IN	Data Raw: 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 2b 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 2b 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 52 54 4c 33 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 52 54 4c 33 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 Data Ascii: 2; } .loading-bullet + .loading-bullet + .loading-bullet { -webkit-animation-name: fadeInRTL3; animation-name: fadeInRTL3; } </style> <style> .--savior-ov
2025-03-14 09:20:11 UTC	1369	IN	Data Raw: 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 4f 76 65 72 72 69 64 65 20 63 73 73 20 73 74 79 6c 65 73 20 66 6f 72 20 54 77 69 74 63 68 2e 74 76 2a 2f 0a 20 20 20 20 20 20 20 20 6d 61 69 6e 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 72 65 73 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6d 6f 64 61 6c 5f 5f 62 61 63 6b 64 72 6f 70 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 72 65 73 65 74 20 7b 0a 20 20 20 Data Ascii: position: absolute; top: 0; } /Override css styles for Twitch.tv/ main.--savior-overlay-z-index-reset { z-index: auto !important; } .modal__backdrop.--savior-overlay-z-index-reset {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49722	104.21.70.234	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:11 UTC	621	OUT	GET /index-5b6c678b.css HTTP/1.1 Host: case-id-1000228259397.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://case-id-1000228259397.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:12 UTC	940	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:12 GMT Content-Type: text/css Content-Length: 13511 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:46 GMT ETag: "34c7-62ddf0fd25ec2" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m7%2FRLaxKjmci%2Bb1OIT6U2mhy65x39RTWfeAIVoGWQD6mhl3MjyWTUr0GtR6FpFSVrDbkRNgngvH%2FIGtgOB0B3dj9OrSp9Yls6YslbpyNwZLJMKjJYziz1ZRyYkDjHsA3rocrLEofCBbQnOgrFweFZre2%2BwP9LwZ8TwQCn7pfag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b19b0b73c463-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1453&min_rtt=1447&rtt_var=556&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1193&delivery_rate=1944074&cwnd=74&unsent_bytes=0&cid=30e79ed38a8f0633&ts=837&x=0"
2025-03-14 09:20:12 UTC	429	IN	Data Raw: 2e 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 65 6d 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 66 69 6c 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 7d 2e 6c 6f 67 6f 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 34 36 63 66 66 61 61 29 7d 2e 6c 6f 67 6f 2e 72 65 61 63 74 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 31 64 61 66 62 61 61 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 67 6f 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 Data Ascii: .logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-re
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 62 61 6e 6e 65 72 2d 62 31 34 38 32 64 34 63 2e 77 65 62 70 29 7d 2e 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 34 33 37 36 30 62 33 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 35 30 70 78 20 30 3b 68 65 69 67 68 74 Data Ascii: x 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;height
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 70 78 3b 77 69 64 74 68 3a 34 30 76 77 7d 2e 70 72 6f 67 72 65 73 73 7b 68 65 69 67 68 74 3a 35 70 78 7d 2e 72 65 71 75 69 65 64 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 34 38 34 38 34 38 61 62 7d 2e 62 6f 64 79 20 2e 77 72 61 70 2d 74 69 74 6c 65 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 31 63 31 62 31 62 64 39 7d 69 6e 70 75 74 23 74 78 74 5f 74 65 6c 6c 2c 69 6e 70 75 74 23 74 78 74 5f 69 73 73 75 65 2c 69 6e 70 75 74 23 65 6d 61 69 6c 2c 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 35 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 Data Ascii: px;width:40vw}.progress{height:5px}.requied-text{font-size:16px;color:#484848ab}.body .wrap-title p{font-size:14px;color:#1c1b1bd9}input#txt_tell,input#txt_issue,input#email,input.form-control{height:50px!important}.react-international-phone-input{padding
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 68 33 2e 68 33 2d 63 6f 6e 66 69 67 7b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 62 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 69 63 6f 6e 46 62 2d 6b 65 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 Data Ascii: mportant;font-size:16px!important;line-height:19px;color:#000!important;font-weight:500!important;margin-bottom:8px!important}h3.h3-config{color:#000000bf;font-size:16px;font-weight:700;margin-bottom:10px;margin-top:20px}.iconFb-key{background-image:url(h
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 69 6e 76 65 72 74 28 35 39 25 29 20 73 65 70 69 61 28 31 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 33 35 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 36 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 36 25 29 20 63 6f 6e 74 72 61 73 74 28 39 34 25 29 7d 2e 74 65 78 74 2d 63 61 72 64 2d 63 75 73 74 6f 6d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 30 36 32 35 72 65 6d 21 69 6d 70 6f Data Ascii: d-repeat:no-repeat;display:inline-block;-webkit-filter:invert(59%) sepia(11%) saturate(200%) saturate(135%) hue-rotate(176deg) brightness(96%) contrast(94%)}.text-card-custom{font-family:inherit!important;font-weight:400!important;font-size:1.0625rem!impo
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 7b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 5f 5f 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 Data Ascii: t-international-phone-country-selector-button--hide-dropdown{cursor:auto}.react-international-phone-country-selector-button--hide-dropdown:hover{background-color:transparent}.react-international-phone-country-selector-button__button-content{display:flex;a
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 65 2d 64 69 73 61 62 6c 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 77 68 69 74 65 73 6d 6f 6b 65 29 29 3b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d Data Ascii: e-disabled-background-color, whitesmoke));cursor:auto}.react-international-phone-country-selector-button--disabled:hover{background-color:var(--react-international-phone-disabled-country-selector-background-color, var(--react-international-phone-disabled-
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 66 6c 61 67 2d 65 6d 6f 6a 69 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 31 34 70 78 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 Data Ascii: -dropdown__list-item-flag-emoji{margin-right:8px}.react-international-phone-country-selector-dropdown__list-item-country-name{margin-right:8px;font-size:var(--react-international-phone-dropdown-item-font-size, 14px)}.react-international-phone-country-sele
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 73 65 6c 65 63 74 65 64 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 67 72 61 79 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 66 6f 63 75 73 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 Data Ascii: lor:var(--react-international-phone-selected-dropdown-item-dial-code-color, var(--react-international-phone-dropdown-item-dial-code-color, gray))}.react-international-phone-country-selector-dropdown__list-item--focused{background-color:var(--react-interna
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 23 36 36 36 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 20 34 70 78 29 3b 6d Data Ascii: nal-phone-disabled-text-color, #666))}.react-international-phone-input-container{display:flex}.react-international-phone-input-container .react-international-phone-country-selector-button{border-radius:var(--react-international-phone-border-radius, 4px);m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49724	151.101.194.137	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:12 UTC	603	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:12 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 14 Mar 2025 09:20:12 GMT Age: 3185614 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740097-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 28 X-Timer: S1741944012.473971,VS0,VE0 Vary: Accept-Encoding
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-14 09:20:12 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49726	104.17.25.14	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:12 UTC	627	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:12 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:12 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-7b00" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 04 Mar 2026 09:20:12 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CMcMliQiZn3sMz%2BC2dzG%2BAkfhzpuLkMh93JQ3qRiiKEh8PPWlug8%2BMLzd7WeqkP8IW5Fn6x6xLU9X%2BkMiTN8z6GKXXz3XKUwcCqQ4hX%2FmeGqi%2F0QbLYS3Hk8TTj1AHLQKoofREcr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202b19e2b798c73-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:20:12 UTC	417	IN	Data Raw: 37 62 66 31 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 20 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 09 09 2f 2f 20 43 6f 6d 6d 6f 6e 4a 53 0a 09 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 09 09 2f 2f 20 41 4d 44 0a 09 09 64 65 66 69 6e 65 28 5b 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 7b 0a 09 09 2f 2f 20 47 6c 6f 62 61 6c 20 28 62 72 6f 77 73 65 72 29 0a 09 09 72 6f 6f 74 Data Ascii: 7bf1;(function (root, factory) {if (typeof exports === "object") {// CommonJSmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// AMDdefine([], factory);}else {// Global (browser)root
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 6f 6e 20 28 4d 61 74 68 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 20 20 20 20 76 61 72 20 63 72 79 70 74 6f 3b 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 66 72 6f 6d 20 77 69 6e 64 6f 77 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 20 7b 0a 09 20 20 20 20 20 20 20 20 63 72 79 70 74 6f 20 3d 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 3b 0a 09 20 20 20 20 7d 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 69 6e 20 77 65 62 20 77 6f 72 6b 65 72 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 65 6c 66 20 21 3d Data Ascii: on (Math, undefined) { var crypto; // Native crypto from window (Browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // Native crypto in web worker (Browser) if (typeof self !=
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 55 73 65 20 72 61 6e 64 6f 6d 42 79 74 65 73 20 6d 65 74 68 6f 64 20 28 4e 6f 64 65 4a 53 29 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 42 79 74 65 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 09 20 20 20 20 20 20 Data Ascii: return crypto.getRandomValues(new Uint32Array(1))[0]; } catch (err) {} } // Use randomBytes method (NodeJS) if (typeof crypto.randomBytes === 'function') { try {
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 2a 20 40 73 74 61 74 69 63 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 4d 79 54 79 70 65 20 3d 20 43 72 79 70 74 6f 4a 53 2e 6c 69 62 2e 42 61 73 65 2e 65 78 74 65 6e 64 28 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 66 69 65 6c 64 3a 20 27 76 61 6c 75 65 27 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 Data Ascii: * @static * * @example * * var MyType = CryptoJS.lib.Base.extend({ * field: 'value', * * method: function () { *
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 4d 79 54 79 70 65 2e 63 72 65 61 74 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 63 72 65 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 74 68 69 73 2e 65 78 74 65 6e 64 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 69 6e 69 74 2e 61 70 70 6c 79 28 69 6e 73 74 61 6e 63 65 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: * @example * * var instance = MyType.create(); */ create: function () { var instance = this.extend(); instance.init.apply(instance, arguments);
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 45 20 77 6f 6e 27 74 20 63 6f 70 79 20 74 6f 53 74 72 69 6e 67 20 75 73 69 6e 67 20 74 68 65 20 6c 6f 6f 70 20 61 62 6f 76 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 72 6f 70 65 72 74 69 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 27 74 6f 53 74 72 69 6e 67 27 29 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 20 3d 20 70 72 6f 70 65 72 74 69 65 73 2e 74 6f 53 74 72 69 6e 67 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 43 72 65 61 Data Ascii: // IE won't copy toString using the loop above if (properties.hasOwnProperty('toString')) { this.toString = properties.toString; } }, /** * Crea
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 33 2c 20 30 78 30 34 30 35 30 36 30 37 5d 2c 20 36 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 73 2c 20 73 69 67 42 79 74 65 73 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 73 20 3d 20 74 68 69 73 2e 77 6f 72 64 73 20 3d 20 77 6f 72 64 73 20 7c 7c 20 5b 5d 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 69 67 42 79 74 65 73 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 20 3d 20 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 Data Ascii: 3, 0x04050607], 6); */ init: function (words, sigBytes) { words = this.words = words \|\| []; if (sigBytes != undefined) { this.sigBytes = sigBytes; } else { this.s
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 20 76 61 72 20 74 68 69 73 53 69 67 42 79 74 65 73 20 3d 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 68 61 74 53 69 67 42 79 74 65 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 73 69 67 42 79 74 65 73 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 61 6d 70 20 65 78 63 65 73 73 20 62 69 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 6c 61 6d 70 28 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 6e 63 61 74 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 53 69 67 42 79 74 65 73 20 25 20 34 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 70 79 20 6f 6e 65 20 62 79 74 65 20 61 74 20 61 20 74 69 6d 65 0a 09 Data Ascii: var thisSigBytes = this.sigBytes; var thatSigBytes = wordArray.sigBytes; // Clamp excess bits this.clamp(); // Concat if (thisSigBytes % 4) { // Copy one byte at a time
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 66 20 74 68 69 73 20 77 6f 72 64 20 61 72 72 61 79 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 57 6f 72 64 41 72 72 61 79 7d 20 54 68 65 20 63 6c 6f 6e 65 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 63 6c 6f 6e 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 63 6c 6f 6e 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 42 61 73 65 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 Data Ascii: f this word array. * * @return {WordArray} The clone. * * @example * * var clone = wordArray.clone(); */ clone: function () { var clone = Base.clone.call(this)
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 68 65 78 53 74 72 69 6e 67 20 3d 20 43 72 79 70 74 6f 4a 53 2e 65 6e 63 2e 48 65 78 2e 73 74 72 69 6e 67 69 66 79 28 77 6f 72 64 41 72 72 61 79 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 73 74 72 69 6e 67 69 66 79 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 41 72 72 61 79 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 68 6f 72 74 63 75 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 6f 72 64 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 77 6f 72 64 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 Data Ascii: * * @example * * var hexString = CryptoJS.enc.Hex.stringify(wordArray); */ stringify: function (wordArray) { // Shortcuts var words = wordArray.words; var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49725	104.18.187.31	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:12 UTC	670	OUT	GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228259397.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:12 UTC	1095	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:12 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 5.3.0 x-jsd-version-type: version etag: W/"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y" Age: 1984847 x-served-by: cache-fra-eddf8230088-FRA, cache-lga21948-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VzsGlr4qoaMjC5FhMNpnQahjYvEvMUvxyt6bAiLUceYSWTAwVSjnkX1LlCyveyJtPcbezzNnDVxqiwa6Ye%2FOG%2FiRd4YMY3icn9S3LG1Ho5Y9Zpgbf8cggWI2%2FeIJs8Tcj7Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b19e1d7bf5f6-EWR
2025-03-14 09:20:12 UTC	274	IN	Data Raw: 37 62 32 34 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 Data Ascii: 7b24@charset "UTF-8";/! Bootstrap v5.3.0 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indi
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 70 6c 65 3a 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 23 64 36 33 33 38 34 3b 2d 2d 62 73 2d 72 65 64 3a 23 64 63 33 35 34 35 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 23 66 64 37 65 31 34 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 23 66 66 63 31 30 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 23 31 39 38 37 35 34 3b 2d 2d 62 73 2d 74 65 61 6c 3a 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 23 30 64 63 61 66 30 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 67 72 61 79 2d 32 30 30 3a 23 65 39 65 Data Ascii: ple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9e
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 63 38 63 62 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 61 33 63 66 62 62 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 39 65 65 61 66 39 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 66 66 65 36 39 63 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 66 31 61 65 62 35 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 65 39 65 63 65 66 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 61 64 62 35 62 64 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 32 35 35 2c 32 35 35 2c 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 30 2c 30 2c 30 3b 2d Data Ascii: c8cb;--bs-success-border-subtle:#a3cfbb;--bs-info-border-subtle:#9eeaf9;--bs-warning-border-subtle:#ffe69c;--bs-danger-border-subtle:#f1aeb5;--bs-light-border-subtle:#e9ecef;--bs-dark-border-subtle:#adb5bd;--bs-white-rgb:255,255,255;--bs-black-rgb:0,0,0;-
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 32 30 32 3b 2d 2d 62 73 2d 63 6f 64 65 2d 63 6f 6c 6f 72 3a 23 64 36 33 33 38 34 3b 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 3a 23 66 66 66 33 63 64 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 72 61 6e 73 6c 75 63 65 6e 74 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 37 35 29 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 2e 33 37 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 73 6d 3a 30 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6c Data Ascii: 202;--bs-code-color:#d63384;--bs-highlight-bg:#fff3cd;--bs-border-width:1px;--bs-border-style:solid;--bs-border-color:#dee2e6;--bs-border-color-translucent:rgba(0, 0, 0, 0.175);--bs-border-radius:0.375rem;--bs-border-radius-sm:0.25rem;--bs-border-radius-l
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 73 3a 23 36 65 61 38 66 65 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 61 37 61 63 62 31 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 37 35 62 37 39 38 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 36 65 64 66 66 36 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 66 66 64 61 36 61 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 65 61 38 36 38 66 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 64 61 72 6b 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 64 65 65 32 65 36 3b 2d 2d 62 73 2d 70 72 Data Ascii: s:#6ea8fe;--bs-secondary-text-emphasis:#a7acb1;--bs-success-text-emphasis:#75b798;--bs-info-text-emphasis:#6edff6;--bs-warning-text-emphasis:#ffda6a;--bs-danger-text-emphasis:#ea868f;--bs-light-text-emphasis:#f8f9fa;--bs-dark-text-emphasis:#dee2e6;--bs-pr
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 74 65 78 74 2d 61 6c 69 67 6e 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 68 72 7b 6d 61 72 67 69 6e 3a 31 72 65 6d 20 Data Ascii: ight:var(--bs-body-font-weight);line-height:var(--bs-body-line-height);color:var(--bs-body-color);text-align:var(--bs-body-text-align);background-color:var(--bs-body-bg);-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}hr{margin:1rem
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 6d 61 72 6b 2c 6d 61 72 6b 7b 70 61 64 64 69 6e 67 3a 2e 31 38 37 35 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 29 7d 73 75 62 2c 73 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 61 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 29 2c 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 6f 70 61 63 69 74 79 2c Data Ascii: ont-size:.875em}.mark,mark{padding:.1875em;background-color:var(--bs-highlight-bg)}sub,sup{position:relative;font-size:.75em;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:rgba(var(--bs-link-color-rgb),var(--bs-link-opacity,
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 73 65 6c 65 63 74 3a 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 31 7d 5b 6c 69 73 74 5d 3a 6e 6f 74 28 5b 74 79 70 65 3d 64 61 74 65 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 Data Ascii: gin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}select:disabled{opacity:1}[list]:not([type=date]):not([type=datetime-local]):not([type=month]):not([type
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 6f 75 74 70 75 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 69 66 72 61 6d 65 7b 62 6f 72 64 65 72 3a 30 7d 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 70 72 6f 67 72 65 73 73 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: tton{font:inherit;-webkit-appearance:button}output{display:inline-block}iframe{border:0}summary{display:list-item;cursor:pointer}progress{vertical-align:baseline}[hidden]{display:none!important}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:
2025-03-14 09:20:12 UTC	1369	IN	Data Raw: 3a 2d 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 e2 80 94 c2 a0 22 7d 2e 69 6d 67 2d 66 6c 75 69 64 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d Data Ascii: :-1rem;margin-bottom:1rem;font-size:.875em;color:#6c757d}.blockquote-footer::before{content:""}.img-fluid{max-width:100%;height:auto}.img-thumbnail{padding:.25rem;background-color:var(--bs-body-bg);border:var(--bs-border-width) solid var(--bs-border-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49720	142.250.186.132	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:12 UTC	567	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEI9s/OAQiA1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:13 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:12 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CWOiTYXrLJvEocFJ3ujZIA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 09:20:13 UTC	87	IN	Data Raw: 66 35 30 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 61 76 6f 77 65 64 20 75 70 64 61 74 65 20 70 61 74 63 68 20 6e 6f 74 65 73 22 2c 22 65 6d 65 72 67 65 6e 63 65 20 73 6c 65 65 70 20 74 6f 6b 65 6e 20 73 6f 6e 67 20 6c 79 72 69 63 73 22 2c 22 63 6f 6c 6c 65 67 65 Data Ascii: f50)]}'["",["avowed update patch notes","emergence sleep token song lyrics","college
2025-03-14 09:20:13 UTC	1390	IN	Data Raw: 20 62 61 73 6b 65 74 62 61 6c 6c 20 74 6f 75 72 6e 61 6d 65 6e 74 20 62 72 61 63 6b 65 74 22 2c 22 62 69 67 20 62 65 61 72 20 62 61 6c 64 20 65 61 67 6c 65 73 20 6e 65 73 74 22 2c 22 77 61 72 68 61 6d 6d 65 72 20 34 30 6b 20 73 70 61 63 65 20 6d 61 72 69 6e 65 20 33 22 2c 22 6a 75 6c 69 61 6e 20 61 6c 76 61 72 65 7a 20 61 74 6c 65 74 69 63 6f 20 6d 61 64 72 69 64 22 2c 22 70 6c 61 6e 65 20 63 61 74 63 68 65 73 20 66 69 72 65 20 64 65 6e 76 65 72 20 61 69 72 70 6f 72 74 22 2c 22 6e 79 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 68 69 6e 74 73 20 6d 61 72 63 68 20 31 33 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 Data Ascii: basketball tournament bracket","big bear bald eagles nest","warhammer 40k space marine 3","julian alvarez atletico madrid","plane catches fire denver airport","nyt connections hints march 13"],["","","","","","","",""],[],{"google:clientdata":{"bpc":fals
2025-03-14 09:20:13 UTC	1390	IN	Data Raw: 61 55 56 50 4d 33 70 47 53 6c 64 4b 65 44 6c 43 61 6c 46 48 61 7a 5a 4d 61 6e 59 35 56 46 64 57 5a 48 64 31 54 54 68 54 63 54 56 46 52 56 56 4b 55 55 56 4c 54 57 4e 75 53 58 6c 6c 5a 44 4e 49 4d 44 42 77 63 31 70 7a 5a 54 42 4e 4d 32 5a 56 5a 57 49 78 65 6c 4e 47 56 56 46 47 53 44 46 4d 55 32 78 72 5a 57 39 59 5a 57 6c 7a 54 6a 68 69 59 6d 64 58 4f 54 45 7a 5a 6b 68 78 54 6d 46 43 55 6d 52 61 56 55 35 6b 59 56 56 6e 63 32 4e 4c 56 55 6c 54 54 6c 64 78 52 6c 56 45 53 53 39 74 53 43 39 61 55 57 4e 61 4f 57 4e 49 55 55 4e 76 4c 30 52 4c 61 6b 35 4c 5a 6b 52 78 4e 6d 74 55 57 6c 42 75 59 32 64 6e 4c 32 4a 52 56 44 68 50 4f 54 46 74 4e 6d 70 79 56 58 4a 76 63 46 52 49 52 6c 4e 51 52 7a 52 48 51 56 46 34 57 6d 5a 6d 64 6e 64 79 59 32 5a 59 56 33 56 71 53 6b 35 Data Ascii: aUVPM3pGSldKeDlCalFHazZManY5VFdWZHd1TThTcTVFRVVKUUVLTWNuSXllZDNIMDBwc1pzZTBNM2ZVZWIxelNGVVFGSDFMU2xrZW9YZWlzTjhiYmdXOTEzZkhxTmFCUmRaVU5kYVVnc2NLVUlTTldxRlVESS9tSC9aUWNaOWNIUUNvL0RLak5LZkRxNmtUWlBuY2dnL2JRVDhPOTFtNmpyVXJvcFRIRlNQRzRHQVF4WmZmdndyY2ZYV3VqSk5
2025-03-14 09:20:13 UTC	1060	IN	Data Raw: 64 4b 59 58 68 4f 53 30 4a 79 59 30 6c 54 55 6c 68 36 63 57 31 61 4d 57 70 71 61 32 78 70 57 54 52 5a 62 6b 4e 34 63 6a 68 75 64 48 46 47 63 55 5a 31 62 6b 49 76 52 44 5a 74 62 32 70 79 62 30 45 79 4f 53 39 43 65 54 4e 6e 54 31 4a 35 52 44 6c 7a 53 44 6b 76 63 6e 41 31 4e 6d 78 31 54 55 35 78 64 48 45 77 5a 46 42 4a 53 31 70 49 56 48 6c 31 62 6b 68 6f 55 6a 6c 7a 4c 31 46 6a 61 6d 34 32 4e 6c 5a 75 61 46 5a 44 62 54 4a 74 57 57 78 6f 64 6d 70 57 57 58 52 34 53 58 64 55 62 47 4e 6e 4e 54 52 4d 52 57 51 78 53 58 70 36 65 48 46 6e 56 6b 59 32 5a 56 45 77 64 6d 39 53 53 56 6b 30 4e 7a 64 52 4b 31 68 31 55 56 56 6b 65 6e 51 35 53 58 4d 31 54 6c 68 48 56 56 42 4a 51 55 70 4b 55 48 64 4f 55 31 64 68 4d 7a 45 78 56 45 30 78 64 32 70 79 56 57 39 4c 63 57 39 74 53 Data Ascii: dKYXhOS0JyY0lTUlh6cW1aMWpqa2xpWTRZbkN4cjhudHFGcUZ1bkIvRDZtb2pyb0EyOS9CeTNnT1J5RDlzSDkvcnA1Nmx1TU5xdHEwZFBJS1pIVHl1bkhoUjlzL1Fjam42NlZuaFZDbTJtWWxodmpWWXR4SXdUbGNnNTRMRWQxSXp6eHFnVkY2ZVEwdm9SSVk0NzdRK1h1UVVkenQ5SXM1TlhHVVBJQUpKUHdOU1dhMzExVE0xd2pyVW9LcW9tS
2025-03-14 09:20:13 UTC	894	IN	Data Raw: 33 37 37 0d 0a 62 33 46 76 56 7a 5a 53 53 32 31 68 52 30 31 48 52 32 35 48 64 32 74 7a 55 6d 74 6e 64 56 5a 48 55 6a 56 73 53 55 6c 33 5a 6b 73 7a 5a 6b 45 77 54 6e 56 4f 54 32 74 47 4d 6d 78 76 63 57 52 78 61 6e 68 4b 4e 6d 38 33 4e 54 49 79 63 57 70 78 65 6b 74 44 55 55 5a 42 4c 7a 52 35 52 48 70 45 4d 56 45 76 51 55 68 33 63 7a 68 54 54 7a 41 31 4e 55 6f 31 51 58 70 78 4c 32 52 57 56 56 5a 78 4e 6d 74 57 62 45 31 7a 4f 44 42 4e 56 48 55 30 55 6d 6c 47 54 57 70 6d 63 46 55 76 64 30 46 32 53 69 74 43 4e 7a 6c 30 51 54 64 49 53 46 52 57 61 31 52 57 4d 57 56 46 62 57 74 72 59 56 49 7a 54 58 56 44 63 55 56 72 4e 32 6c 43 4d 6b 64 6c 4b 32 74 78 63 32 35 4d 57 47 56 7a 56 58 56 59 53 44 56 74 55 57 4a 35 59 32 78 7a 54 56 46 44 5a 6c 51 35 64 45 30 35 62 56 Data Ascii: 377b3FvVzZSS21hR01HR25Hd2tzUmtndVZHUjVsSUl3ZkszZkEwTnVOT2tGMmxvcWRxanhKNm83NTIycWpxektDUUZBLzR5RHpEMVEvQUh3czhTTzA1NUo1QXpxL2RWVVZxNmtWbE1zODBNVHU0UmlGTWpmcFUvd0F2SitCNzl0QTdISFRWa1RWMWVFbWtrYVIzTXVDcUVrN2lCMkdlK2txc25MWGVzVXVYSDVtUWJ5Y2xzTVFDZlQ5dE05bV
2025-03-14 09:20:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49727	104.21.70.234	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:13 UTC	710	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228259397.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228259397.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:13 UTC	941	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:13 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x8OC3THYZxsgJmOFRIsut8HjmUOoqqSV6FhDtA5uK8bZTl4CjendKRNzKRuNfAAWjm18bhH2BkirEbvvpo3MfYonlAgJLSaVJQhCO%2B9WADMRpoN7YRn8zHfFIWt25vsNUGuzj7D485w9ZAe6hB%2BSWQX%2FQMM1kITThDiGRUFjBQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1a2d9ee4380-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1550&min_rtt=1543&rtt_var=593&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1282&delivery_rate=1822721&cwnd=228&unsent_bytes=0&cid=434774120499396d&ts=452&x=0"
2025-03-14 09:20:13 UTC	428	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 36 81 09 74 0d 2d 8e 72 d9 2a d8 e7 Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs6t-r*
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 bd f2 24 a2 24 a2 29 bc 96 3e fd 00 Data Ascii: :WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8$$)>
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 51 ef 99 4f 5a f4 bc a3 ec 9d df 0e Data Ascii: ^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2QOZ
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 4f 2c 77 32 f1 d9 c2 e7 2d 3c 7b 14 Data Ascii: T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!O,w2-<{
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 Data Ascii: tOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwFtiwFti
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 92 69 35 3b 72 5a 6c 8c 92 8f 74 a6 Data Ascii: <i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%i5;rZlt
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 34 66 8c d3 19 8a 17 ab ae 88 bf e1 Data Ascii: f-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV4f
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 ba f4 aa 60 30 76 ed 52 b7 c3 50 1f Data Ascii: uM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C`0vRP
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 d7 a3 07 15 af e1 38 5b 8a cd f2 84 Data Ascii: ^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP8[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49728	104.18.187.31	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:13 UTC	647	OUT	GET /npm/react/umd/react.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228259397.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:13 UTC	1086	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=604800, s-maxage=43200 cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 18.3.1 x-jsd-version-type: version etag: W/"29ff-qneuTEn1Jbwh3h0E8Ipdc5YsfM4" Age: 8047 x-served-by: cache-fra-eddf8230081-FRA, cache-lga21932-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IU2bHpMxmV2CnF5w1zgVyTroVLgOKnN1tCGaFveq9QU6YLyBbJE9nhFvFR2XNRz%2FChFXAMgINti3H9Obr391AIrP4T9fpXUpB4WvCW8gqFiCH5qyx1Ie1Qs929LYK8MhXYE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1a2dc9b4346-EWR
2025-03-14 09:20:13 UTC	283	IN	Data Raw: 32 39 66 66 0d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: 29ff/** * @license React * react.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */(function(){
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 78 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 78 29 3a 28 63 3d 63 7c 7c 73 65 6c 66 2c 78 28 63 2e 52 65 61 63 74 3d 7b 7d 29 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 56 26 26 61 5b 56 5d 7c 7c 61 5b 22 40 40 69 74 65 72 61 74 6f 72 Data Ascii: "object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 69 6e 67 22 3a 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 68 3d 21 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 73 77 69 74 63 68 28 61 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 79 3a 63 61 73 65 20 71 61 3a 68 3d 21 30 7d 7d 69 66 28 68 29 72 65 74 75 72 6e 20 68 3d 61 2c 64 3d 64 28 68 29 2c 61 3d 22 22 3d 3d 3d 6d 3f 22 2e 22 2b 0a 4e 28 68 2c 30 29 3a 6d 2c 63 61 28 64 29 3f 28 65 3d 22 22 2c 6e 75 6c 6c 21 3d 61 26 26 28 65 3d 61 2e 72 65 70 6c 61 63 65 28 64 61 2c 22 24 26 2f 22 29 2b 22 2f 22 29 2c 42 28 64 2c 62 2c 65 2c 22 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 3a 6e 75 6c 6c 21 3d 64 26 26 28 4d 28 64 29 26 26 28 64 3d 6f 61 28 64 2c 65 2b 28 21 64 2e 6b 65 79 7c 7c 68 26 26 68 2e 6b Data Ascii: ing":case "number":h=!0;break;case "object":switch(a.$$typeof){case y:case qa:h=!0}}if(h)return h=a,d=d(h),a=""===m?"."+N(h,0):m,ca(d)?(e="",null!=a&&(e=a.replace(da,"$&/")+"/"),B(d,b,e,"",function(a){return a})):null!=d&&(M(d)&&(d=oa(d,e+(!d.key\|\|h&&h.k
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 5d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 69 66 28 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 5b 30 5d 2c 65 3d 61 2e 70 6f 70 28 29 3b 69 66 28 65 21 3d 3d 62 29 7b 61 5b 30 5d 3d 65 3b 61 3a 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2c 6b 3d 64 3e 3e 3e 31 3b 63 3c 6b 3b 29 7b 76 61 72 20 68 3d 32 2a 28 63 2b 31 29 2d 31 2c 6c 3d 61 5b 68 5d 2c 66 3d 68 2b 31 2c 67 3d 61 5b 66 5d 3b 69 66 28 30 3e 44 28 6c 2c 65 29 29 66 3c 64 26 26 30 3e 44 28 67 2c 6c 29 3f 28 61 5b 63 5d 3d 67 2c 61 5b 66 5d 3d 65 2c 63 3d 66 29 3a 28 61 5b 63 5d 3d 6c 2c 61 5b 68 5d 3d 65 2c 63 3d 68 29 3b 65 6c 73 65 20 69 66 28 66 3c 64 26 26 30 3e 44 28 67 2c 65 29 29 61 5b 63 5d 3d 67 2c 61 5b 66 Data Ascii: ]}function E(a){if(0===a.length)return null;var b=a[0],e=a.pop();if(e!==b){a[0]=e;a:for(var c=0,d=a.length,k=d>>>1;c<k;){var h=2*(c+1)-1,l=a[h],f=h+1,g=a[f];if(0>D(l,e))f<d&&0>D(g,l)?(a[c]=g,a[f]=e,c=f):(a[c]=l,a[h]=e,c=h);else if(f<d&&0>D(g,e))a[c]=g,a[f
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 63 74 2e 70 72 6f 66 69 6c 65 72 22 29 2c 76 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 72 6f 76 69 64 65 72 22 29 2c 77 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 6f 6e 74 65 78 74 22 29 2c 78 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 2c 79 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 2c 7a 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 41 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 2c 56 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 2c 58 3d 7b 69 73 4d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 31 7d 2c 65 6e Data Ascii: ct.profiler"),va=Symbol.for("react.provider"),wa=Symbol.for("react.context"),xa=Symbol.for("react.forward_ref"),ya=Symbol.for("react.suspense"),za=Symbol.for("react.memo"),Aa=Symbol.for("react.lazy"),V=Symbol.iterator,X={isMounted:function(a){return!1},en
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 65 6f 75 74 3f 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 6e 75 6c 6c 2c 6e 61 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 0a 76 6f 69 64 20 30 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 26 26 76 6f 69 64 20 30 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 2e 62 69 6e 64 28 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 29 3b 76 61 72 20 Data Ascii: eout?clearTimeout:null,na="undefined"!==typeof setImmediate?setImmediate:null;"undefined"!==typeof navigator&&void 0!==navigator.scheduling&&void 0!==navigator.scheduling.isInputPending&&navigator.scheduling.isInputPending.bind(navigator.scheduling);var
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 3a 62 2c 70 72 69 6f 72 69 74 79 4c 65 76 65 6c 3a 61 2c 73 74 61 72 74 54 69 6d 65 3a 63 2c 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3a 64 2c 73 6f 72 74 49 6e 64 65 78 3a 2d 31 7d 3b 63 3e 65 3f 28 61 2e 73 6f 72 74 49 6e 64 65 78 3d 63 2c 4f 28 72 2c 61 29 2c 6e 75 6c 6c 3d 3d 3d 70 28 71 29 26 26 61 3d 3d 3d 70 28 72 29 26 26 28 7a 3f 28 65 61 28 41 29 2c 41 3d 2d 31 29 3a 7a 3d 21 30 2c 54 28 51 2c 63 2d 65 29 29 29 3a 28 61 2e 73 6f 72 74 49 6e 64 65 78 3d 64 2c 4f 28 71 2c 61 29 2c 75 7c 7c 46 7c 7c 28 75 3d 21 30 2c 52 28 53 29 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 75 6e 73 74 61 62 6c 65 5f 63 61 6e 63 65 6c 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 63 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 7d 2c 75 6e 73 74 61 62 6c 65 Data Ascii: :b,priorityLevel:a,startTime:c,expirationTime:d,sortIndex:-1};c>e?(a.sortIndex=c,O(r,a),null===p(q)&&a===p(r)&&(z?(ea(A),A=-1):z=!0,T(Q,c-e))):(a.sortIndex=d,O(q,a),u\|\|F\|\|(u=!0,R(S)));return a},unstable_cancelCallback:function(a){a.callback=null},unstable
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 3b 63 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 52 65 61 63 74 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 28 2e 2e 2e 29 3a 20 54 68 65 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 52 65 61 63 74 20 65 6c 65 6d 65 6e 74 2c 20 62 75 74 20 79 6f 75 20 70 61 73 73 65 64 20 22 2b 61 2b 22 2e 22 29 3b 76 61 72 20 65 3d 6c 61 28 7b 7d 2c 61 2e 70 72 6f 70 73 29 2c 64 3d 61 2e 6b 65 79 2c 6b 3d 61 2e 72 65 66 2c 68 3d 61 2e 5f 6f 77 6e 65 72 3b 69 66 28 6e 75 6c 6c 21 3d 62 29 7b 76 6f 69 64 20 30 21 3d 3d 62 2e 72 65 66 26 26 28 6b 3d 62 2e 72 65 66 2c 68 3d 4c 2e 63 75 72 72 65 6e 74 29 3b 76 Data Ascii: ;c.cloneElement=function(a,b,c){if(null===a\|\|void 0===a)throw Error("React.cloneElement(...): The argument must be a React element, but you passed "+a+".");var e=la({},a.props),d=a.key,k=a.ref,h=a._owner;if(null!=b){void 0!==b.ref&&(k=b.ref,h=L.current);v
2025-03-14 09:20:13 UTC	893	IN	Data Raw: 63 2e 75 73 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 73 65 43 6f 6e 74 65 78 74 28 61 29 7d 3b 63 2e 75 73 65 44 65 62 75 67 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 7d 3b 63 2e 75 73 65 44 65 66 65 72 72 65 64 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 73 65 44 65 66 65 72 72 65 64 56 61 6c 75 65 28 61 29 7d 3b 0a 63 2e 75 73 65 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 73 65 45 66 66 65 63 74 28 61 2c 62 29 7d 3b 63 2e 75 73 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 Data Ascii: c.useContext=function(a){return g.current.useContext(a)};c.useDebugValue=function(a,b){};c.useDeferredValue=function(a){return g.current.useDeferredValue(a)};c.useEffect=function(a,b){return g.current.useEffect(a,b)};c.useId=function(){return g.current.u
2025-03-14 09:20:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49730	104.18.187.31	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:13 UTC	655	OUT	GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228259397.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:13 UTC	1097	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=604800, s-maxage=43200 cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 18.3.1 x-jsd-version-type: version etag: W/"202fb-/rjdydBWak+glxpuEThlhhjNrP4" Age: 2069 x-served-by: cache-fra-eddf8230141-FRA, cache-lga21943-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtW8g4%2BBdbg%2FTN3YxQoBzkV%2FEljUfp37xQv%2BUqU5dH8ns2IURfOiPD5vBPM2XStiE7T6h7vEbOYBi%2FqBQGNV1xzi%2BEDfA4ClYFdsbZORJPf2vpPXWVnHK6bs5vrvHMcxk4I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1a43bd342d5-EWR
2025-03-14 09:20:13 UTC	272	IN	Data Raw: 37 62 32 32 0d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f Data Ascii: 7b22/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */(functio
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 20 33 2e 30 2e 30 70 72 65 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 51 2c 7a 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 7a 62 28 65 78 70 6f 72 74 73 2c 72 65 71 75 69 72 65 28 22 72 65 61 63 74 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 72 65 61 63 74 22 5d 2c 7a 62 29 3a 28 51 3d 51 7c 7c 73 65 6c 66 2c 7a 62 28 51 2e 52 65 61 63 74 44 4f 4d 3d 7b 7d 2c 51 2e 52 65 61 63 74 29 29 7d Data Ascii: 3.0.0pre (Custom Build) \| MIT*/'use strict';(function(Q,zb){"object"===typeof exports&&"undefined"!==typeof module?zb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],zb):(Q=Q\|\|self,zb(Q.ReactDOM={},Q.React))}
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 3d 64 3b 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 73 70 61 63 65 3d 65 3b 74 68 69 73 2e 6d 75 73 74 55 73 65 50 72 6f 70 65 72 74 79 3d 63 3b 74 68 69 73 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 3d 61 3b 74 68 69 73 2e 74 79 70 65 3d 62 3b 74 68 69 73 2e 73 61 6e 69 74 69 7a 65 55 52 4c 3d 66 3b 74 68 69 73 2e 72 65 6d 6f 76 65 45 6d 70 74 79 53 74 72 69 6e 67 3d 67 7d 66 75 6e 63 74 69 6f 6e 20 24 64 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 52 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 3f 52 5b 62 5d 3a 6e 75 6c 6c 3b 69 66 28 6e 75 6c 6c 21 3d 3d 65 3f 30 21 3d 3d 65 2e 74 79 70 65 3a 64 7c 7c 21 28 32 3c 62 2e 6c 65 6e 67 74 68 29 7c 7c 22 6f 22 21 3d 3d 0a 62 5b 30 5d 26 26 22 4f 22 21 3d 3d 62 5b 30 5d 7c 7c 22 6e 22 21 Data Ascii: =d;this.attributeNamespace=e;this.mustUseProperty=c;this.propertyName=a;this.type=b;this.sanitizeURL=f;this.removeEmptyString=g}function $d(a,b,c,d){var e=R.hasOwnProperty(b)?R[b]:null;if(null!==e?0!==e.type:d\|\|!(2<b.length)\|\|"o"!==b[0]&&"O"!==b[0]\|\|"n"!
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 70 6c 69 74 28 22 5c 6e 22 29 2c 67 3d 65 2e 6c 65 6e 67 74 68 2d 31 2c 68 3d 66 2e 6c 65 6e 67 74 68 2d 31 3b 31 3c 3d 67 26 26 30 3c 3d 68 26 26 65 5b 67 5d 21 3d 3d 66 5b 68 5d 3b 29 68 2d 2d 3b 66 6f 72 28 3b 31 3c 3d 67 26 26 30 3c 3d 68 3b 67 2d 2d 2c 68 2d 2d 29 69 66 28 65 5b 67 5d 21 3d 3d 66 5b 68 5d 29 7b 69 66 28 31 21 3d 3d 67 7c 7c 31 21 3d 3d 68 29 7b 64 6f 20 69 66 28 67 2d 2d 2c 68 2d 2d 2c 30 3e 68 7c 7c 65 5b 67 5d 21 3d 3d 66 5b 68 5d 29 7b 76 61 72 20 6b 3d 22 5c 6e 22 2b 65 5b 67 5d 2e 72 65 70 6c 61 63 65 28 22 20 61 74 20 6e 65 77 20 22 2c 22 20 61 74 20 22 29 3b 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 26 26 6b 2e 69 6e 63 6c 75 64 65 73 28 22 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 22 29 26 26 28 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 22 3c Data Ascii: plit("\n"),g=e.length-1,h=f.length-1;1<=g&&0<=h&&e[g]!==f[h];)h--;for(;1<=g&&0<=h;g--,h--)if(e[g]!==f[h]){if(1!==g\|\|1!==h){do if(g--,h--,0>h\|\|e[g]!==f[h]){var k="\n"+e[g].replace(" at new "," at ");a.displayName&&k.includes("<anonymous>")&&(k=k.replace("<
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 20 64 65 28 61 28 62 29 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 6a 28 61 29 7b 76 61 72 20 62 3d 61 2e 74 79 70 65 3b 0a 73 77 69 74 63 68 28 61 2e 74 61 67 29 7b 63 61 73 65 20 32 34 3a 72 65 74 75 72 6e 22 43 61 63 68 65 22 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 28 62 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 43 6f 6e 74 65 78 74 22 29 2b 22 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 31 30 3a 72 65 74 75 72 6e 28 62 2e 5f 63 6f 6e 74 65 78 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 43 6f 6e 74 65 78 74 22 29 2b 22 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 31 38 3a 72 65 74 75 72 6e 22 44 65 68 79 64 72 61 74 65 64 46 72 61 67 6d 65 6e 74 22 3b 63 61 73 65 20 31 31 3a Data Ascii: de(a(b))}catch(c){}}return null}function gj(a){var b=a.type;switch(a.tag){case 24:return"Cache";case 9:return(b.displayName\|\|"Context")+".Consumer";case 10:return(b._context.displayName\|\|"Context")+".Provider";case 18:return"DehydratedFragment";case 11:
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 3d 22 22 2b 61 3b 66 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 63 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 3b 72 65 74 75 72 6e 7b 67 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 73 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 3d 22 22 2b 61 7d 2c 73 74 6f 70 54 72 61 63 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 0a 6e 75 6c 6c 3b 64 65 6c 65 74 65 20 61 5b 62 5d 7d 7d 7d 7d 66 75 6e 63 74 69 Data Ascii: tion(){return e.call(this)},set:function(a){d=""+a;f.call(this,a)}});Object.defineProperty(a,b,{enumerable:c.enumerable});return{getValue:function(){return d},setValue:function(a){d=""+a},stopTracking:function(){a._valueTracker=null;delete a[b]}}}}functi
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 76 61 6c 75 65 22 29 3f 6d 65 28 61 2c 62 2e 74 79 70 65 2c 63 29 3a 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 65 66 61 75 6c 74 56 61 6c 75 65 22 29 26 26 6d 65 28 61 2c 62 2e 74 79 70 65 2c 55 61 28 62 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 29 3b 6e 75 6c 6c 3d 3d 62 2e 63 68 65 63 6b 65 64 26 26 6e 75 6c 6c 21 3d 62 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 26 26 28 61 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 21 21 62 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 67 28 61 2c 62 2c 63 29 7b 69 66 28 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 76 61 6c 75 65 22 29 7c 7c 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 65 66 61 75 6c 74 Data Ascii: OwnProperty("value")?me(a,b.type,c):b.hasOwnProperty("defaultValue")&&me(a,b.type,Ua(b.defaultValue));null==b.checked&&null!=b.defaultChecked&&(a.defaultChecked=!!b.defaultChecked)}function mg(a,b,c){if(b.hasOwnProperty("value")\|\|b.hasOwnProperty("default
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 69 66 28 31 3c 63 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 39 33 29 29 3b 0a 63 3d 63 5b 30 5d 7d 62 3d 63 7d 6e 75 6c 6c 3d 3d 62 26 26 28 62 3d 22 22 29 3b 63 3d 62 7d 61 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 3d 7b 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 55 61 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 67 28 61 2c 62 29 7b 76 61 72 20 63 3d 55 61 28 62 2e 76 61 6c 75 65 29 2c 64 3d 55 61 28 62 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 6e 75 6c 6c 21 3d 63 26 26 28 63 3d 22 22 2b 63 2c 63 21 3d 3d 61 2e 76 61 6c 75 65 26 26 28 61 2e 76 61 6c 75 65 3d 63 29 2c 6e 75 6c 6c 3d 3d 62 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 26 26 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 21 3d 3d 63 26 26 28 61 2e 64 65 66 61 75 6c 74 56 61 6c Data Ascii: if(1<c.length)throw Error(m(93));c=c[0]}b=c}null==b&&(b="");c=b}a._wrapperState={initialValue:Ua(c)}}function og(a,b){var c=Ua(b.value),d=Ua(b.defaultValue);null!=c&&(c=""+c,c!==a.value&&(a.value=c),null==b.defaultValue&&a.defaultValue!==c&&(a.defaultVal
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 32 29 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 61 2c 62 29 7b 69 66 28 2d 31 3d 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 29 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 2e 69 73 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 61 6e 6e 6f 74 61 74 69 6f 6e 2d 78 6d 6c 22 3a 63 61 73 65 20 22 63 6f 6c 6f 72 2d 70 72 6f 66 69 6c 65 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 2d 73 72 63 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 2d 75 72 69 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 2d 66 6f 72 6d 61 74 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 2d 6e 61 6d 65 22 3a 63 61 73 65 20 22 Data Ascii: )throw Error(m(62));}}function qe(a,b){if(-1===a.indexOf("-"))return"string"===typeof b.is;switch(a){case "annotation-xml":case "color-profile":case "font-face":case "font-face-src":case "font-face-uri":case "font-face-format":case "font-face-name":case "
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 20 63 7d 66 75 6e 63 74 69 6f 6e 20 6a 6a 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 6b 29 7b 67 63 3d 21 31 3b 53 63 3d 6e 75 6c 6c 3b 6b 6a 2e 61 70 70 6c 79 28 6c 6a 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6a 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 6b 29 7b 6a 6a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 67 63 29 7b 69 66 28 67 63 29 7b 76 61 72 20 6e 3d 53 63 3b 67 63 3d 21 31 3b 53 63 3d 6e 75 6c 6c 7d 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 31 39 38 29 29 3b 54 63 7c 7c 28 54 63 3d 21 30 2c 75 65 3d 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 62 28 61 29 7b 76 61 72 20 62 3d 61 2c 63 3d 61 3b 69 66 28 61 2e 61 6c 74 65 72 6e 61 74 65 29 66 6f 72 28 3b 62 Data Ascii: c}function jj(a,b,c,d,e,f,g,h,k){gc=!1;Sc=null;kj.apply(lj,arguments)}function mj(a,b,c,d,e,f,g,h,k){jj.apply(this,arguments);if(gc){if(gc){var n=Sc;gc=!1;Sc=null}else throw Error(m(198));Tc\|\|(Tc=!0,ue=n)}}function nb(a){var b=a,c=a;if(a.alternate)for(;b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49729	104.18.187.31	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:13 UTC	662	OUT	GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228259397.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:13 UTC	1097	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=604800, s-maxage=43200 cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 2.9.0-beta.1 x-jsd-version-type: version etag: W/"1d187-o2+OYezMEsMzpEcT3E+ubsFUj8Q" Age: 1311 x-served-by: cache-fra-eddf8230077-FRA, cache-lga21937-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=772aedbBskkJqthrY03bHzR%2FlGSpf2dWatE4JQl56JCbbEEEZxu%2FuhnqbvsQl%2FV8FCbsOejBUst19S0Dstlkw1JCcvenw7dt0NfhlNJHFrSezhaUA5iKIR13SXFsDDZQWls%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1a43d22c4fb-EWR
2025-03-14 09:20:13 UTC	272	IN	Data Raw: 37 62 32 32 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 61 63 74 2d 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 72 65 61 63 74 22 29 2c 72 65 71 75 69 72 65 28 22 72 65 61 63 74 2d 64 6f 6d 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 72 65 61 63 Data Ascii: 7b22/! For license information please see react-bootstrap.min.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["reac
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 52 65 61 63 74 42 6f 6f 74 73 74 72 61 70 3d 74 28 72 65 71 75 69 72 65 28 22 72 65 61 63 74 22 29 2c 72 65 71 75 69 72 65 28 22 72 65 61 63 74 2d 64 6f 6d 22 29 29 3a 65 2e 52 65 61 63 74 42 6f 6f 74 73 74 72 61 70 3d 74 28 65 2e 52 65 61 63 74 2c 65 2e 52 65 61 63 74 44 4f 4d 29 7d 28 73 65 6c 66 2c 28 28 65 2c 74 29 3d 3e 28 28 29 3d 3e 7b 76 61 72 20 6e 3d 7b 38 31 34 3a 28 65 2c 74 29 3d 3e 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 Data Ascii: ):"object"==typeof exports?exports.ReactBootstrap=t(require("react"),require("react-dom")):e.ReactBootstrap=t(e.React,e.ReactDOM)}(self,((e,t)=>(()=>{var n={814:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function o(){for(var e=[],t=0;t
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 65 6e 74 73 5b 72 5d 3b 76 61 72 20 6f 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 6f 29 7b 76 61 72 20 74 3d 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 6e 29 3b 6e 75 6c 6c 21 3d 74 26 26 28 6f 3d 74 29 7d 7d 29 29 2c 6f 7d 29 29 7d 3b 76 61 72 20 72 2c 6f 3d 28 72 3d 6e 28 38 34 34 29 29 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 72 3a 7b 64 65 66 61 75 6c 74 3a 72 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 38 34 34 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 Data Ascii: ents[r];var o=null;return t.forEach((function(e){if(null==o){var t=e.apply(void 0,n);null!=t&&(o=t)}})),o}))};var r,o=(r=n(844))&&r.__esModule?r:{default:r};e.exports=t.default},844:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.d
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 41 53 53 5f 54 48 49 53 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 22 7d 2c 33 35 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 38 37 29 2c 6f 3d 36 30 31 30 33 3b 69 66 28 74 2e 46 72 61 67 6d 65 6e 74 3d 36 30 31 30 37 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 66 6f 72 29 7b 76 61 72 20 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 3b 6f 3d 61 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 74 2e 46 72 61 67 6d 65 6e 74 3d 61 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 7d 76 61 72 20 73 3d 72 2e 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 Data Ascii: ASS_THIS_OR_YOU_WILL_BE_FIRED"},356:(e,t,n)=>{"use strict";var r=n(787),o=60103;if(t.Fragment=60107,"function"==typeof Symbol&&Symbol.for){var a=Symbol.for;o=a("react.element"),t.Fragment=a("react.fragment")}var s=r.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WI
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 3b 76 61 72 20 61 3d 7b 7d 3b 72 65 74 75 72 6e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 61 29 2c 6f 2e 64 28 61 2c 7b 41 63 63 6f 72 64 69 6f 6e 3a 28 29 3d 3e 4f 65 2c 41 63 63 6f 72 64 69 6f 6e 42 75 74 74 6f 6e 3a 28 29 3d 3e 79 65 2c 41 63 63 6f 72 Data Ascii: =>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})};var a={};return(()=>{"use strict";o.r(a),o.d(a,{Accordion:()=>Oe,AccordionButton:()=>ye,Accor
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 73 2c 4d 6f 64 61 6c 54 69 74 6c 65 3a 28 29 3d 3e 44 73 2c 4e 61 76 3a 28 29 3d 3e 57 73 2c 4e 61 76 44 72 6f 70 64 6f 77 6e 3a 28 29 3d 3e 77 69 2c 4e 61 76 49 74 65 6d 3a 28 29 3d 3e 46 73 2c 4e 61 76 4c 69 6e 6b 3a 28 29 3d 3e 48 73 2c 4e 61 76 62 61 72 3a 28 29 3d 3e 67 69 2c 4e 61 76 62 61 72 42 72 61 6e 64 3a 28 29 3d 3e 7a 73 2c 4e 61 76 62 61 72 43 6f 6c 6c 61 70 73 65 3a 28 29 3d 3e 71 73 2c 4e 61 76 62 61 72 4f 66 66 63 61 6e 76 61 73 3a 28 29 3d 3e 76 69 2c 4e 61 76 62 61 72 54 65 78 74 3a 28 29 3d 3e 62 69 2c 4e 61 76 62 61 72 54 6f 67 67 6c 65 3a 28 29 3d 3e 58 73 2c 4f 66 66 63 61 6e 76 61 73 3a 28 29 3d 3e 70 69 2c 4f 66 66 63 61 6e 76 61 73 42 6f 64 79 3a 28 29 3d 3e 74 69 2c 4f 66 66 63 61 6e 76 61 73 48 65 61 64 65 72 3a 28 29 3d 3e 73 Data Ascii: s,ModalTitle:()=>Ds,Nav:()=>Ws,NavDropdown:()=>wi,NavItem:()=>Fs,NavLink:()=>Hs,Navbar:()=>gi,NavbarBrand:()=>zs,NavbarCollapse:()=>qs,NavbarOffcanvas:()=>vi,NavbarText:()=>bi,NavbarToggle:()=>Xs,Offcanvas:()=>pi,OffcanvasBody:()=>ti,OffcanvasHeader:()=>s
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 76 61 72 20 72 3d 6e 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 7d 28 65 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 Data Ascii: on(e,t){if("object"!=typeof e\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,"string");if("object"!=typeof r)return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==ty
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 75 72 6e 28 30 2c 6d 2e 6a 73 78 29 28 67 2c 7b 76 61 6c 75 65 3a 73 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 7d 76 61 72 20 4f 3d 2f 28 5b 41 2d 5a 5d 29 2f 67 2c 52 3d 2f 5e 6d 73 2d 2f 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 4f 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 28 65 29 2e 72 65 70 6c 61 63 65 28 52 2c 22 2d 6d 73 2d 22 29 7d 76 61 72 20 50 3d 2f 5e 28 28 74 72 61 6e 73 6c 61 74 65 7c 72 6f 74 61 74 65 7c 73 63 61 6c 65 29 28 58 7c 59 7c 5a 7c 33 64 29 3f 7c 6d Data Ascii: urn(0,m.jsx)(g,{value:s,children:a})};function C(e){return e&&e.ownerDocument\|\|document}var O=/([A-Z])/g,R=/^ms-/;function k(e){return function(e){return e.replace(O,"-$1").toLowerCase()}(e).replace(R,"-ms-")}var P=/^((translate\|rotate\|scale)(X\|Y\|Z\|3d)?\|m
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 3d 3d 49 3f 7b 73 74 61 74 75 73 3a 41 7d 3a 6e 75 6c 6c 7d 3b 76 61 72 20 61 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 61 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 21 30 2c 74 68 69 73 2e 61 70 70 65 61 72 53 74 61 74 75 73 29 7d 2c 61 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 69 66 28 65 21 3d 3d 74 68 69 73 2e 70 72 6f 70 73 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 73 74 61 74 65 2e 73 74 61 74 75 73 3b 74 68 69 73 2e 70 72 6f 70 73 2e 69 6e 3f 6e 21 3d 3d 4c 26 26 6e 21 3d 3d 42 26 26 28 74 3d 4c 29 3a 6e 21 3d 3d 4c 26 26 6e 21 3d 3d 42 7c 7c 28 74 Data Ascii: ==I?{status:A}:null};var a=o.prototype;return a.componentDidMount=function(){this.updateStatus(!0,this.appearStatus)},a.componentDidUpdate=function(e){var t=null;if(e!==this.props){var n=this.state.status;this.props.in?n!==L&&n!==B&&(t=L):n!==L&&n!==B\|\|(t
2025-03-14 09:20:13 UTC	1369	IN	Data Raw: 7d 29 29 7d 2c 61 2e 70 65 72 66 6f 72 6d 45 78 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 70 72 6f 70 73 2e 65 78 69 74 2c 6e 3d 74 68 69 73 2e 67 65 74 54 69 6d 65 6f 75 74 73 28 29 2c 72 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6e 6f 64 65 52 65 66 3f 76 6f 69 64 20 30 3a 44 28 29 2e 66 69 6e 64 44 4f 4d 4e 6f 64 65 28 74 68 69 73 29 3b 74 3f 28 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 45 78 69 74 28 72 29 2c 74 68 69 73 2e 73 61 66 65 53 65 74 53 74 61 74 65 28 7b 73 74 61 74 75 73 3a 46 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 72 6f 70 73 2e 6f 6e 45 78 69 74 69 6e 67 28 72 29 2c 65 2e 6f 6e 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6e 2e 65 78 69 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e Data Ascii: }))},a.performExit=function(){var e=this,t=this.props.exit,n=this.getTimeouts(),r=this.props.nodeRef?void 0:D().findDOMNode(this);t?(this.props.onExit(r),this.safeSetState({status:F},(function(){e.props.onExiting(r),e.onTransitionEnd(n.exit,(function(){e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49733	157.240.252.13	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:13 UTC	778	OUT	GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:13 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:20:13 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:20:13 UTC	3366	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 49 39 48 44 52 36 69 44 6a 77 62 54 77 65 58 4f 6d 32 57 49 68 59 74 70 4a 61 70 68 51 6a 56 4d 2d 58 56 6c 62 43 72 5f 51 5a 6f 42 6e 66 6a 78 41 34 32 5a 6d 57 54 51 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4a 32 44 75 30 31 4f 7a 76 33 5a 37 72 33 67 75 67 57 75 74 62 45 2d 79 51 6f 34 76 74 44 4c 5a 71 61 44 62 43 30 50 4f 71 4b 37 6d 71 37 4a 4e 67 35 51 69 76 61 51 79 49 78 6f 48 32 30 63 6d 5f 5a 56 58 63 65 79 67 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4b 57 58 70 46 6b 6d 4d 47 73 52 57 6b 5f 66 50 4e 35 35 63 4a 58 6b 4a 52 42 57 32 2d 74 35 4b 61 50 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcI9HDR6iDjwbTweXOm2WIhYtpJaphQjVM-XVlbCr_QZoBnfjxA42ZmWTQ"; e_fb_requesttime="AcJ2Du01Ozv3Z7r3gugWutbE-yQo4vtDLZqaDbC0POqK7mq7JNg5QivaQyIxoH20cm_ZVXceyg"; e_proxy="AcKWXpFkmMGsRWk_fPN55cJXkJRBW2-t5KaP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49732	157.240.252.13	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:13 UTC	778	OUT	GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:13 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:20:13 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:20:13 UTC	3365	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 49 54 45 53 6c 67 49 48 34 4e 37 31 2d 34 6d 54 50 65 6f 52 42 38 6e 57 31 31 66 79 75 68 61 51 57 46 67 77 30 50 32 4b 61 41 55 2d 33 37 69 6d 54 36 41 58 43 33 5a 51 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4c 58 73 64 65 4c 55 53 74 53 39 32 78 68 38 43 53 46 75 70 6e 48 35 38 5f 41 6e 51 6b 51 5a 34 69 74 69 75 6b 46 6a 54 79 54 34 71 76 72 33 6a 61 7a 6b 34 33 61 54 4d 4f 38 4e 4c 43 77 4d 2d 6a 44 41 74 54 37 6f 77 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4a 7a 33 5a 65 4e 32 74 67 79 6e 31 64 52 71 78 4d 31 41 31 62 70 51 36 31 50 67 6d 79 70 41 32 31 4e Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcITESlgIH4N71-4mTPeoRB8nW11fyuhaQWFgw0P2KaAU-37imT6AXC3ZQ"; e_fb_requesttime="AcLXsdeLUStS92xh8CSFupnH58_AnQkQZ4itiukFjTyT4qvr3jazk43aTMO8NLCwM-jDAtT7ow"; e_proxy="AcJz3ZeN2tgyn1dRqxM1A1bpQ61PgmypA21N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49731	157.240.252.13	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:13 UTC	778	OUT	GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:13 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:20:13 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:20:13 UTC	3363	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4c 46 39 49 36 78 4c 4f 31 5a 63 45 63 62 78 2d 43 74 45 6f 35 53 31 55 32 72 70 78 74 51 54 76 49 45 46 6e 39 4a 57 54 64 47 53 62 4c 4f 34 45 52 47 42 6c 52 31 6f 41 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 49 53 6d 48 59 42 6f 34 4a 51 53 6a 46 6b 2d 48 47 52 55 39 49 36 69 51 52 7a 67 6f 6b 6a 69 45 6b 41 55 79 34 72 5f 4b 50 6c 33 67 4e 68 37 56 57 51 59 49 76 49 62 57 39 7a 36 6f 65 36 76 70 61 57 4a 69 46 62 6d 41 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4b 35 4b 41 46 7a 5f 6c 51 48 68 56 77 49 4c 69 4a 6d 38 61 42 57 56 57 62 31 69 64 63 4c 67 5a 57 6c Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcLF9I6xLO1ZcEcbx-CtEo5S1U2rpxtQTvIEFn9JWTdGSbLO4ERGBlR1oA"; e_fb_requesttime="AcISmHYBo4JQSjFk-HGRU9I6iQRzgokjiEkAUy4r_KPl3gNh7VWQYIvIbW9z6oe6vpaWJiFbmA"; e_proxy="AcK5KAFz_lQHhVwILiJm8aBWVWb1idcLgZWl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49734	172.67.168.191	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:14 UTC	469	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228259397.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:14 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:14 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PIHiA3gKf9lrNddko8raqcaHvAO5y5mXxQ8DUSAE33gWDID2rp3RybT907q6FQuIIulv%2B%2F%2FU%2BsSzvv0O9gtz4rNj6OqkzBiXf80T1N9S3gJVQDv5kRuoXkDg%2FrzvEcCzr%2FKl9J%2BTvI8JVEnTplrl3Ujd7vboo47ZcBAaLTGpEg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1a91be97ca5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1966&min_rtt=1956&rtt_var=753&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1041&delivery_rate=1434184&cwnd=203&unsent_bytes=0&cid=54a81ac5f4d237f3&ts=140&x=0"
2025-03-14 09:20:14 UTC	420	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:20:14 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 36 81 09 74 Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs6t
2025-03-14 09:20:14 UTC	1369	IN	Data Raw: d6 6b 01 09 bc f7 c3 ed 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 bd f2 24 a2 Data Ascii: k:WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8$
2025-03-14 09:20:14 UTC	1369	IN	Data Raw: d0 00 00 e8 79 ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 51 ef 99 4f Data Ascii: y^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2QO
2025-03-14 09:20:14 UTC	1369	IN	Data Raw: ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 4f 2c 77 32 Data Ascii: >4T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!O,w2
2025-03-14 09:20:14 UTC	1369	IN	Data Raw: de 31 fe d6 48 45 61 61 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd Data Ascii: 1HEaatOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwFti
2025-03-14 09:20:14 UTC	1369	IN	Data Raw: 6d 83 90 33 96 19 5e 1b b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 92 69 35 3b Data Ascii: m3^<i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%i5;
2025-03-14 09:20:14 UTC	1369	IN	Data Raw: e3 4b 65 5b ec 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 34 66 8c d3 Data Ascii: Ke[Cqf-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV4f
2025-03-14 09:20:14 UTC	1369	IN	Data Raw: f8 9d 5c 4e 88 be 87 dc 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 ba f4 aa 60 Data Ascii: \NuM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C`
2025-03-14 09:20:14 UTC	1369	IN	Data Raw: 7c ae 56 33 ec 40 8a 2b c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 d7 a3 07 15 Data Ascii: \|V3@+^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49735	104.26.8.44	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:14 UTC	558	OUT	OPTIONS /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://case-id-1000228259397.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:14 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:14 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin access-control-allow-origin: https://case-id-1000228259397.counselschambers.co.uk access-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 86400 X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S3TTf7rRKEHJ8f7xtBLj0%2B4RDuT8UbGrD7fSCrupZd%2BHaeakb2KNyvAQZdMVwiQxFQ6ZDBapbVASL3miw3I6ed7sGD68X8h%2BJfrActUz51Wwg590M33vzrSA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1aa49394225-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4616&min_rtt=1582&rtt_var=6508&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=1134&delivery_rate=1754807&cwnd=224&unsent_bytes=0&cid=28cf5a5f2112a107&ts=298&x=0"
2025-03-14 09:20:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49737	104.26.8.44	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:15 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259397.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:15 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:15 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: OPTIONS, POST, OPTIONS, HEAD, GET X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228259397.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YqRhttEKRkgFT%2FnepfGGWzI%2FW547YiW%2BQL%2FJ7Qsm1%2BCdb19itLKGhkZI8LmI%2B8MR8hTtQ%2FXVy8DYQa2mW8b%2BzdsvLU5icm3QtTjZg1fjGHM7Qmb3BfAW9Lv7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1af2f07ef9d-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4399&min_rtt=1761&rtt_var=5765&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=1211&delivery_rate=1565683&cwnd=99&unsent_bytes=0&cid=62c939cdb3fcd9e5&ts=307&x=0"
2025-03-14 09:20:15 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49738	172.67.69.226	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:15 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:16 UTC	926	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:16 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: POST, GET, OPTIONS, HEAD, OPTIONS X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uIjxPmKeV6lu0hA%2FCclAcwBPYkpRZNMhmOJ0QF0YsP6U%2F4DF%2F5ifv2rxmQHsaoIIeAKJQYZzlLWto01Db2dRtbii21HmDPHr82tT8i9IRQgwHNUPdfJwM1xZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1b449f243fb-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4026&min_rtt=1533&rtt_var=5414&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2790&recv_bytes=950&delivery_rate=1838790&cwnd=151&unsent_bytes=0&cid=dab5e4c6ac38e341&ts=379&x=0"
2025-03-14 09:20:16 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49740	104.21.16.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:18 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228259397.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:18 UTC	865	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:20:18 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MM%2Bnq0hX0Iq32ApTxvHBdJkz6pgi3qv0W%2BeEDigCBZj2EHM%2BvmO4Z36z0A35NQkHnNFvIbHBNNlnEjp8Esc1tG8FoxgjsupK3f8BdwOd6DgwHzCYPBFiVZ2fmp00cDWWB0QuOEfR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1c31fad42fc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2316&min_rtt=2312&rtt_var=875&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1155&delivery_rate=1245202&cwnd=179&unsent_bytes=0&cid=097af26150f99e13&ts=394&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49742	104.21.16.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:19 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 55 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259397.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:19 UTC	55	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 35 51 62 38 7a 52 38 6e 66 41 6e 43 4b 75 41 68 4a 6c 45 75 66 2f 6f 70 4f 7a 72 70 55 4c 44 6f 6d 2b 4f 4a 51 2f 63 70 55 73 41 3d 22 7d Data Ascii: {"data":"5Qb8zR8nfAnCKuAhJlEuf/opOzrpULDom+OJQ/cpUsA="}
2025-03-14 09:20:19 UTC	869	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:19 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dqog5wlHK9A7K8KUBTRywseb3guCTZ2%2Bp2TCAU3nu9ugg6HlOgDGDKeVxykDCkCiN6V%2FG%2Fa6YKxcfEyQrzD1LNd7ygV6eeT23iQtN9hkyt5PiGEXGu3hQwMrjLbLhj5eFOabCoST"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1c88dbbc338-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1473&min_rtt=1468&rtt_var=560&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1387&delivery_rate=1935056&cwnd=216&unsent_bytes=0&cid=660d2ea60666a175&ts=424&x=0"
2025-03-14 09:20:19 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:20:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49744	104.21.80.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:20 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:20 UTC	833	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:20:20 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eUuDkJBedYImNEGUtReWlsYCub6WleJEabFpG7So6zKWwFqEtWckIsIY540GSpQPJ8jZdT4xT%2BoM6Il57EZUHYNTGgT3CulUGCO7xsc3pD3a8n2VzG7riYILlub25I4IKpQnA%2FWf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b1ce096690c2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2395&min_rtt=2393&rtt_var=903&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=970&delivery_rate=1208609&cwnd=52&unsent_bytes=0&cid=91743da4a7cc9fdc&ts=408&x=0"
2025-03-14 09:20:20 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 32 62 61 33 61 30 32 64 34 61 63 32 34 34 33 65 30 31 65 65 64 61 61 61 36 38 34 35 62 63 34 65 2d 35 31 39 35 32 63 33 34 33 34 35 63 35 39 30 34 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-2ba3a02d4ac2443e01eedaaa6845bc4e-51952c34345c5904-00"}
2025-03-14 09:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49746	35.190.80.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:20 UTC	546	OUT	OPTIONS /report/v4?s=eUuDkJBedYImNEGUtReWlsYCub6WleJEabFpG7So6zKWwFqEtWckIsIY540GSpQPJ8jZdT4xT%2BoM6Il57EZUHYNTGgT3CulUGCO7xsc3pD3a8n2VzG7riYILlub25I4IKpQnA%2FWf HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:21 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 14 Mar 2025 09:20:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49747	35.190.80.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:21 UTC	521	OUT	POST /report/v4?s=eUuDkJBedYImNEGUtReWlsYCub6WleJEabFpG7So6zKWwFqEtWckIsIY540GSpQPJ8jZdT4xT%2BoM6Il57EZUHYNTGgT3CulUGCO7xsc3pD3a8n2VzG7riYILlub25I4IKpQnA%2FWf HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 402 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:21 UTC	402	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 38 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 38 30 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 6e 67 2e 63 6f Data Ascii: [{"age":0,"body":{"elapsed_time":883,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.80.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourcing.co
2025-03-14 09:20:21 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:20:21 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49749	104.21.70.234	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:28 UTC	791	OUT	GET /case-support.html HTTP/1.1 Host: case-id-1000228259397.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://case-id-1000228259397.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:29 UTC	895	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:39:24 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FDoQHPwORTjm4soqSRvb4KQu4kvgBWRUMVPWt4Us3Z1r4se8KUW7L3suXrZaackB1fYTkv5fbO7ye167iwvQEuBOHtd%2FT8e9FgApKbRb1T9ZL%2B%2Bydex1Gx0cIqg2UQRaKjClw47%2FgYp%2BEdbSj%2FE5Z9%2FqFJZUQloAP4SHa%2FPW%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b204194180cd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1495&min_rtt=1492&rtt_var=562&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1363&delivery_rate=1957104&cwnd=187&unsent_bytes=0&cid=aae980f7717e058b&ts=413&x=0"
2025-03-14 09:20:29 UTC	474	IN	Data Raw: 33 37 63 65 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 Data Ascii: 37ce<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCF
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 65 71 43 6c 45 72 34 41 69 41 52 59 68 6d 63 38 42 6a 38 44 33 53 4a 38 4a 52 41 53 65 78 4a 52 35 6d 32 67 4f 51 6e 2f 2f 45 54 68 30 53 6f 4a 77 30 74 63 75 62 35 66 6c 4a 37 50 35 6a 41 57 41 74 2b 43 4b 6c 41 42 39 6f 4f 77 45 6c 35 53 35 36 54 6e 67 78 4d 49 6e 41 45 66 51 2b 49 63 51 6b 65 73 77 78 74 51 59 65 74 6e 78 4c 55 35 76 49 52 71 72 30 53 56 51 48 35 65 72 42 61 4c 2b 77 37 77 70 59 55 41 69 43 79 64 55 45 44 4c 62 74 49 68 38 47 4f 43 34 47 33 67 63 64 58 58 6c 64 4f 38 46 61 46 48 5a 58 41 56 64 32 6e 58 56 76 4b 47 32 69 45 68 49 4d 46 77 6b 41 74 67 5a 70 49 64 61 70 38 70 75 4b 51 4e 33 44 4b 42 51 50 4d 72 57 49 51 43 49 6f 78 5a 77 41 63 53 33 68 41 53 43 79 41 51 56 67 55 38 65 54 37 68 4b 66 41 4c 32 68 54 6b 34 4a 4a 65 79 4d 79 Data Ascii: eqClEr4AiARYhmc8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMy
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 69 4b 58 63 4c 48 41 46 4e 7a 4d 43 58 43 7a 4b 62 67 4c 65 42 4f 45 50 77 4e 63 35 4b 44 51 50 71 2b 72 41 6e 68 66 45 50 72 36 6e 6a 47 39 34 6e 49 32 6d 61 74 36 36 47 36 30 65 70 64 4a 41 45 53 59 68 59 51 50 47 6b 77 75 4a 67 6a 57 43 76 61 43 58 65 43 50 42 4f 47 44 34 44 35 79 57 41 69 66 69 66 43 2f 6a 62 63 4f 4d 79 37 51 4c 53 43 41 4d 36 6e 76 6c 4c 36 78 2f 77 32 71 47 76 77 51 41 73 4e 6f 49 61 45 49 2b 49 45 6d 5a 7a 63 50 69 42 52 35 69 56 49 73 68 4a 2b 44 32 52 2f 51 6a 4e 6e 6e 39 68 46 55 33 69 4d 46 51 4c 2f 67 4d 77 6f 43 78 67 34 4a 39 4c 68 45 6a 62 6d 76 33 65 43 6e 46 41 52 32 30 6e 55 57 5a 76 34 70 68 49 2b 4f 74 34 39 42 52 57 39 63 6f 47 6f 77 4c 75 41 4e 67 54 44 54 41 6f 6e 4a 36 75 4b 63 42 5a 6f 64 43 4f 77 42 47 71 47 75 Data Ascii: iKXcLHAFNzMCXCzKbgLeBOEPwNc5KDQPq+rAnhfEPr6njG94nI2mat66G60epdJAESYhYQPGkwuJgjWCvaCXeCPBOGD4D5yWAififC/jbcOMy7QLSCAM6nvlL6x/w2qGvwQAsNoIaEI+IEmZzcPiBR5iVIshJ+D2R/QjNnn9hFU3iMFQL/gMwoCxg4J9LhEjbmv3eCnFAR20nUWZv4phI+Ot49BRW9coGowLuANgTDTAonJ6uKcBZodCOwBGqGu
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 68 c6 b0 20 76 69 e1 bb 87 6e 20 43 53 53 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 63 73 73 2f 69 6e 74 6c 54 65 6c 49 6e 70 75 74 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 54 68 c6 b0 20 76 69 e1 bb 87 6e 20 4a 61 76 61 53 63 72 69 70 74 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 6a 73 2f 69 Data Ascii: h vin CSS --> <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css"> ... Th vin JavaScript --> <script src="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/i
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 Data Ascii: .ns-block-ui .ns-block-ui-container .ns-block-ui-loader-container { position: absolute; top: 50%; left: 0; right: 0; text-align: center;
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 62 6c 6f 63 6b 69 6e 67 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 61 64 65 6f 75 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: position: fixed; top: 0; right: 0; bottom: 0; left: 0; } .ns-block-ui.blocking .ns-block-ui-container:not(.fadeout) { opacity: 1;
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 20 20 20 20 20 66 72 6f 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d Data Ascii: from { opacity: 1; } to { opacity: 0; } } @-webkit-keyframes fadeInRTL1 { 0% { opacity: 0; -webkit-transform
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 34 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d Data Ascii: ansform: translateX(20px); } 40% { opacity: 1; -webkit-transform: translateX(0px); transform: translateX(0px); } 60% { opacity: 1;
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 32 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 Data Ascii: opacity: 1; } 80% { opacity: 0; } } @keyframes fadeInRTL3 { 0% { opacity: 0; } 20% { opa
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 74 6f 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 33 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d Data Ascii: e !important; } .--savior-overlay-z-index-top { z-index: 2147483643 !important; } .--savior-overlay-position-relative { position: relative; } .--savior-overlay-position-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49751	104.18.187.31	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:29 UTC	640	OUT	GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:29 UTC	1112	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:29 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 17.0.19 x-jsd-version-type: version etag: W/"734f-tveChQZOzfKDCBYG03tkPAXVi2E" Age: 1189977 x-served-by: cache-fra-etou8220100-FRA, cache-lga21962-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jhedAbeGanf0RerIMAnh1LcvBjHUmh1SqpBzAn%2B%2FoJ58HrjBub1vIoh7BdiGWh8EZTTglMXnQJDDkiwy%2FgTlgJPXViFGqksaZrq2MCoQF6gq39bcc4YLf6Q8%2FBOVm0UKYfM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b209ffc2b785-EWR
2025-03-14 09:20:29 UTC	257	IN	Data Raw: 37 33 34 66 0d 0a 2f 2a 0a 20 2a 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 54 65 6c 65 70 68 6f 6e 65 20 49 6e 70 75 74 20 76 31 37 2e 30 2e 31 39 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 61 63 6b 6f 63 6e 72 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2e 67 69 74 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3a 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 3d 61 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 Data Ascii: 734f/* * International Telephone Input v17.0.19 * https://github.com/jackocnr/intl-tel-input.git * Licensed under the MIT license */!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use s
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 69 63 74 22 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 64 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 Data Ascii: ict";return function(){function b(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function c(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 61 73 69 6c 29 22 2c 22 62 72 22 2c 22 35 35 22 5d 2c 5b 22 42 72 69 74 69 73 68 20 49 6e 64 69 61 6e 20 4f 63 65 61 6e 20 54 65 72 72 69 74 6f 72 79 22 2c 22 69 6f 22 2c 22 32 34 36 22 5d 2c 5b 22 42 72 69 74 69 73 68 20 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 22 2c 22 76 67 22 2c 22 31 22 2c 31 31 2c 5b 22 32 38 34 22 5d 5d 2c 5b 22 42 72 75 6e 65 69 22 2c 22 62 6e 22 2c 22 36 37 33 22 5d 2c 5b 22 42 75 6c 67 61 72 69 61 20 28 d0 91 d1 8a d0 bb d0 b3 d0 b0 d1 80 d0 b8 d1 8f 29 22 2c 22 62 67 22 2c 22 33 35 39 22 5d 2c 5b 22 42 75 72 6b 69 6e 61 20 46 61 73 6f 22 2c 22 62 66 22 2c 22 32 32 36 22 5d 2c 5b 22 42 75 72 75 6e 64 69 20 28 55 62 75 72 75 6e 64 69 29 22 2c 22 62 69 22 2c 22 32 35 37 22 5d 2c 5b 22 43 61 6d 62 6f 64 69 61 20 28 e1 9e 80 e1 9e Data Ascii: asil)","br","55"],["British Indian Ocean Territory","io","246"],["British Virgin Islands","vg","1",11,["284"]],["Brunei","bn","673"],["Bulgaria ()","bg","359"],["Burkina Faso","bf","226"],["Burundi (Uburundi)","bi","257"],["Cambodia (
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 75 62 6c 69 63 20 28 c4 8c 65 73 6b c3 a1 20 72 65 70 75 62 6c 69 6b 61 29 22 2c 22 63 7a 22 2c 22 34 32 30 22 5d 2c 5b 22 44 65 6e 6d 61 72 6b 20 28 44 61 6e 6d 61 72 6b 29 22 2c 22 64 6b 22 2c 22 34 35 22 5d 2c 5b 22 44 6a 69 62 6f 75 74 69 22 2c 22 64 6a 22 2c 22 32 35 33 22 5d 2c 5b 22 44 6f 6d 69 6e 69 63 61 22 2c 22 64 6d 22 2c 22 31 22 2c 31 33 2c 5b 22 37 36 37 22 5d 5d 2c 5b 22 44 6f 6d 69 6e 69 63 61 6e 20 52 65 70 75 62 6c 69 63 20 28 52 65 70 c3 ba 62 6c 69 63 61 20 44 6f 6d 69 6e 69 63 61 6e 61 29 22 2c 22 64 6f 22 2c 22 31 22 2c 32 2c 5b 22 38 30 39 22 2c 22 38 32 39 22 2c 22 38 34 39 22 5d 5d 2c 5b 22 45 63 75 61 64 6f 72 22 2c 22 65 63 22 2c 22 35 39 33 22 5d 2c 5b 22 45 67 79 70 74 20 28 e2 80 ab d9 85 d8 b5 d8 b1 e2 80 ac e2 80 8e 29 22 Data Ascii: ublic (esk republika)","cz","420"],["Denmark (Danmark)","dk","45"],["Djibouti","dj","253"],["Dominica","dm","1",13,["767"]],["Dominican Republic (Repblica Dominicana)","do","1",2,["809","829","849"]],["Ecuador","ec","593"],["Egypt ()"
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 5d 2c 5b 22 49 63 65 6c 61 6e 64 20 28 c3 8d 73 6c 61 6e 64 29 22 2c 22 69 73 22 2c 22 33 35 34 22 5d 2c 5b 22 49 6e 64 69 61 20 28 e0 a4 ad e0 a4 be e0 a4 b0 e0 a4 a4 29 22 2c 22 69 6e 22 2c 22 39 31 22 5d 2c 5b 22 49 6e 64 6f 6e 65 73 69 61 22 2c 22 69 64 22 2c 22 36 32 22 5d 2c 5b 22 49 72 61 6e 20 28 e2 80 ab d8 a7 db 8c d8 b1 d8 a7 d9 86 e2 80 ac e2 80 8e 29 22 2c 22 69 72 22 2c 22 39 38 22 5d 2c 5b 22 49 72 61 71 20 28 e2 80 ab d8 a7 d9 84 d8 b9 d8 b1 d8 a7 d9 82 e2 80 ac e2 80 8e 29 22 2c 22 69 71 22 2c 22 39 36 34 22 5d 2c 5b 22 49 72 65 6c 61 6e 64 22 2c 22 69 65 22 2c 22 33 35 33 22 5d 2c 5b 22 49 73 6c 65 20 6f 66 20 4d 61 6e 22 2c 22 69 6d 22 2c 22 34 34 22 2c 32 2c 5b 22 31 36 32 34 22 2c 22 37 34 35 37 36 22 2c 22 37 35 32 34 22 2c 22 37 39 Data Ascii: ],["Iceland (sland)","is","354"],["India ()","in","91"],["Indonesia","id","62"],["Iran ()","ir","98"],["Iraq ()","iq","964"],["Ireland","ie","353"],["Isle of Man","im","44",2,["1624","74576","7524","79
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 72 22 2c 22 32 32 32 22 5d 2c 5b 22 4d 61 75 72 69 74 69 75 73 20 28 4d 6f 72 69 73 29 22 2c 22 6d 75 22 2c 22 32 33 30 22 5d 2c 5b 22 4d 61 79 6f 74 74 65 22 2c 22 79 74 22 2c 22 32 36 32 22 2c 31 2c 5b 22 32 36 39 22 2c 22 36 33 39 22 5d 5d 2c 5b 22 4d 65 78 69 63 6f 20 28 4d c3 a9 78 69 63 6f 29 22 2c 22 6d 78 22 2c 22 35 32 22 5d 2c 5b 22 4d 69 63 72 6f 6e 65 73 69 61 22 2c 22 66 6d 22 2c 22 36 39 31 22 5d 2c 5b 22 4d 6f 6c 64 6f 76 61 20 28 52 65 70 75 62 6c 69 63 61 20 4d 6f 6c 64 6f 76 61 29 22 2c 22 6d 64 22 2c 22 33 37 33 22 5d 2c 5b 22 4d 6f 6e 61 63 6f 22 2c 22 6d 63 22 2c 22 33 37 37 22 5d 2c 5b 22 4d 6f 6e 67 6f 6c 69 61 20 28 d0 9c d0 be d0 bd d0 b3 d0 be d0 bb 29 22 2c 22 6d 6e 22 2c 22 39 37 36 22 5d 2c 5b 22 4d 6f 6e 74 65 6e 65 67 72 6f Data Ascii: r","222"],["Mauritius (Moris)","mu","230"],["Mayotte","yt","262",1,["269","639"]],["Mexico (Mxico)","mx","52"],["Micronesia","fm","691"],["Moldova (Republica Moldova)","md","373"],["Monaco","mc","377"],["Mongolia ()","mn","976"],["Montenegro
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 37 34 22 5d 2c 5b 22 52 c3 a9 75 6e 69 6f 6e 20 28 4c 61 20 52 c3 a9 75 6e 69 6f 6e 29 22 2c 22 72 65 22 2c 22 32 36 32 22 2c 30 5d 2c 5b 22 52 6f 6d 61 6e 69 61 20 28 52 6f 6d c3 a2 6e 69 61 29 22 2c 22 72 6f 22 2c 22 34 30 22 5d 2c 5b 22 52 75 73 73 69 61 20 28 d0 a0 d0 be d1 81 d1 81 d0 b8 d1 8f 29 22 2c 22 72 75 22 2c 22 37 22 2c 30 5d 2c 5b 22 52 77 61 6e 64 61 22 2c 22 72 77 22 2c 22 32 35 30 22 5d 2c 5b 22 53 61 69 6e 74 20 42 61 72 74 68 c3 a9 6c 65 6d 79 22 2c 22 62 6c 22 2c 22 35 39 30 22 2c 31 5d 2c 5b 22 53 61 69 6e 74 20 48 65 6c 65 6e 61 22 2c 22 73 68 22 2c 22 32 39 30 22 5d 2c 5b 22 53 61 69 6e 74 20 4b 69 74 74 73 20 61 6e 64 20 4e 65 76 69 73 22 2c 22 6b 6e 22 2c 22 31 22 2c 31 38 2c 5b 22 38 36 39 22 5d 5d 2c 5b 22 53 61 69 6e 74 20 4c Data Ascii: 74"],["Runion (La Runion)","re","262",0],["Romania (Romnia)","ro","40"],["Russia ()","ru","7",0],["Rwanda","rw","250"],["Saint Barthlemy","bl","590",1],["Saint Helena","sh","290"],["Saint Kitts and Nevis","kn","1",18,["869"]],["Saint L
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 65 72 6c 61 6e 64 20 28 53 63 68 77 65 69 7a 29 22 2c 22 63 68 22 2c 22 34 31 22 5d 2c 5b 22 53 79 72 69 61 20 28 e2 80 ab d8 b3 d9 88 d8 b1 d9 8a d8 a7 e2 80 ac e2 80 8e 29 22 2c 22 73 79 22 2c 22 39 36 33 22 5d 2c 5b 22 54 61 69 77 61 6e 20 28 e5 8f b0 e7 81 a3 29 22 2c 22 74 77 22 2c 22 38 38 36 22 5d 2c 5b 22 54 61 6a 69 6b 69 73 74 61 6e 22 2c 22 74 6a 22 2c 22 39 39 32 22 5d 2c 5b 22 54 61 6e 7a 61 6e 69 61 22 2c 22 74 7a 22 2c 22 32 35 35 22 5d 2c 5b 22 54 68 61 69 6c 61 6e 64 20 28 e0 b9 84 e0 b8 97 e0 b8 a2 29 22 2c 22 74 68 22 2c 22 36 36 22 5d 2c 5b 22 54 69 6d 6f 72 2d 4c 65 73 74 65 22 2c 22 74 6c 22 2c 22 36 37 30 22 5d 2c 5b 22 54 6f 67 6f 22 2c 22 74 67 22 2c 22 32 32 38 22 5d 2c 5b 22 54 6f 6b 65 6c 61 75 22 2c 22 74 6b 22 2c 22 36 39 30 Data Ascii: erland (Schweiz)","ch","41"],["Syria ()","sy","963"],["Taiwan ()","tw","886"],["Tajikistan","tj","992"],["Tanzania","tz","255"],["Thailand ()","th","66"],["Timor-Leste","tl","670"],["Togo","tg","228"],["Tokelau","tk","690
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2d 69 64 22 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 47 6c 6f 62 61 6c 73 2e 69 6e 73 74 61 6e 63 65 73 5b 62 5d 7d 2c 69 6e 73 74 61 6e 63 65 73 3a 7b 7d 2c 64 6f 63 75 6d 65 6e 74 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 7d 7d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 47 6c 6f 62 61 6c 73 3d 68 29 3b 76 61 72 20 69 3d 30 2c 6a 3d 7b 61 6c 6c 6f 77 44 72 6f Data Ascii: on(a){var b=a.getAttribute("data-intl-tel-input-id");return window.intlTelInputGlobals.instances[b]},instances:{},documentReady:function(){return"complete"===document.readyState}};"object"==typeof window&&(window.intlTelInputGlobals=h);var i=0,j={allowDro
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 69 6c 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 74 68 69 73 2e 67 26 26 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 74 69 2d 6d 6f 62 69 6c 65 22 29 2c 74 68 69 73 2e 64 2e 64 72 6f 70 64 6f 77 6e 43 6f 6e 74 61 69 6e 65 72 7c 7c 28 74 68 69 73 2e 64 2e 64 72 6f 70 64 6f 77 6e 43 6f 6e 74 61 69 6e 65 72 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 29 7b 76 61 72 20 62 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 68 3d 62 2c 61 2e 69 3d 63 7d 29 2c 63 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 Data Ascii: ile\|Opera Mini/i.test(navigator.userAgent),this.g&&(document.body.classList.add("iti-mobile"),this.d.dropdownContainer\|\|(this.d.dropdownContainer=document.body)),"undefined"!=typeof Promise){var b=new Promise(function(b,c){a.h=b,a.i=c}),c=new Promise(func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49750	104.18.187.31	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:29 UTC	656	OUT	GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:29 UTC	1098	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:29 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 17.0.19 x-jsd-version-type: version etag: W/"4ad5-/7iiVjPE3eq4HRsXQqwv0LRCpMY" Age: 4236937 x-served-by: cache-fra-etou8220138-FRA, cache-lga21954-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2BPRfpr5igadv6dNrNSVEJtIVj2UNc0aR51axkC%2BYYyLtsUbT6MPmEpowSRY4jx2YksCZ4lwGkuSQn6N%2FdHtAUNeldQ9JxbRA1ZF2TEsGrYb9xDZPWhj6%2BFSzjAwRV0ZMxk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b209f84932c7-EWR
2025-03-14 09:20:29 UTC	271	IN	Data Raw: 34 61 64 35 0d 0a 2e 69 74 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 69 74 69 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 69 74 69 5f 5f 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 74 69 5f 5f 76 2d 68 69 64 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 69 74 69 20 69 6e 70 75 74 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 Data Ascii: 4ad5.iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 6e 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 36 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 3a 31 70 78 7d 2e 69 74 69 5f 5f 73 65 6c 65 63 74 65 64 2d 66 6c 61 67 7b 7a 2d 69 6e 64 65 78 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 20 36 70 78 20 30 20 38 70 78 7d 2e 69 74 69 5f 5f 61 72 72 6f 77 7b 6d 61 Data Ascii: n-bottom:0!important;padding-right:36px;margin-right:0}.iti__flag-container{position:absolute;top:0;bottom:0;right:0;padding:1px}.iti__selected-flag{z-index:1;position:relative;display:flex;align-items:center;height:100%;padding:0 6px 0 8px}.iti__arrow{ma
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 69 61 6c 2d 63 6f 64 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d 64 69 61 6c 2d 63 6f 64 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 32 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 2e 69 74 69 5f 5f 66 6c 61 67 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d 64 69 61 6c 2d 63 6f 64 65 20 2e 69 74 69 5f 5f 66 6c 61 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 30 7d 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 2e 69 74 69 5f 5f 66 6c 61 67 2d Data Ascii: ial-code input[type=tel],.iti--separate-dial-code input[type=text]{padding-right:6px;padding-left:52px;margin-left:0}.iti--allow-dropdown .iti__flag-container,.iti--separate-dial-code .iti__flag-container{right:auto;left:0}.iti--allow-dropdown .iti__flag-
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 76 61 7b 77 69 64 74 68 3a 31 35 70 78 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 2e 69 74 69 5f 5f 66 6c 61 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 36 35 32 70 78 20 31 35 70 78 7d 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 61 63 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 61 64 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 32 70 78 20 30 7d 2e 69 74 69 5f Data Ascii: .iti__flag.iti__va{width:15px}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:192dpi){.iti__flag{background-size:5652px 15px}}.iti__flag.iti__ac{height:10px;background-position:0 0}.iti__flag.iti__ad{height:14px;background-position:-22px 0}.iti_
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 2d 34 34 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 66 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 36 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 67 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 38 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 68 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 35 30 34 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 69 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 35 32 36 70 78 Data Ascii: position:-440px 0}.iti__flag.iti__bf{height:14px;background-position:-460px 0}.iti__flag.iti__bg{height:12px;background-position:-482px 0}.iti__flag.iti__bh{height:12px;background-position:-504px 0}.iti__flag.iti__bi{height:12px;background-position:-526px
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 34 34 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 69 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 36 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 6b 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 38 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 6c 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 30 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 6d 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 Data Ascii: background-position:-944px 0}.iti__flag.iti__ci{height:14px;background-position:-961px 0}.iti__flag.iti__ck{height:10px;background-position:-983px 0}.iti__flag.iti__cl{height:14px;background-position:-1005px 0}.iti__flag.iti__cm{height:14px;background-pos
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 63 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 34 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 65 7b 68 65 69 67 68 74 3a 31 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 36 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 67 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 38 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 68 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 35 31 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e Data Ascii: .iti__flag.iti__ec{height:14px;background-position:-1445px 0}.iti__flag.iti__ee{height:13px;background-position:-1467px 0}.iti__flag.iti__eg{height:14px;background-position:-1489px 0}.iti__flag.iti__eh{height:10px;background-position:-1511px 0}.iti__flag.
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 32 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 6d 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 35 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 6e 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 37 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 70 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 39 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 71 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f Data Ascii: 4px;background-position:-1929px 0}.iti__flag.iti__gm{height:14px;background-position:-1951px 0}.iti__flag.iti__gn{height:14px;background-position:-1973px 0}.iti__flag.iti__gp{height:14px;background-position:-1995px 0}.iti__flag.iti__gq{height:14px;backgro
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 31 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6f 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 33 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 71 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 35 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 72 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 37 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 73 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 35 30 31 70 78 20 30 7d 2e 69 74 69 Data Ascii: 13px 0}.iti__flag.iti__io{height:10px;background-position:-2435px 0}.iti__flag.iti__iq{height:14px;background-position:-2457px 0}.iti__flag.iti__ir{height:12px;background-position:-2479px 0}.iti__flag.iti__is{height:15px;background-position:-2501px 0}.iti
2025-03-14 09:20:29 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 31 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 69 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 34 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 6b 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 36 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 72 7b 68 65 69 67 68 74 3a 31 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 38 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 73 7b 68 65 69 67 68 74 3a 31 34 70 78 3b Data Ascii: eight:10px;background-position:-2919px 0}.iti__flag.iti__li{height:12px;background-position:-2941px 0}.iti__flag.iti__lk{height:10px;background-position:-2963px 0}.iti__flag.iti__lr{height:11px;background-position:-2985px 0}.iti__flag.iti__ls{height:14px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49748	104.21.70.234	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:29 UTC	678	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228259397.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228259397.counselschambers.co.uk/index-5b6c678b.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:30 UTC	937	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:30 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cb8wvzWvmBZXZVrLZbfyhobFRlv6YSnVC25WFcv%2FSFgKY3ulk65BdhCaQ0GvP31NaEXpECMDQvbM7pixjwRpIApqQpYYWpVcpA4Zrv8M2Rkm%2BNDJJmOUcEiow%2B%2FFK3UpagNpFEG1KR0wgNpWKN7w3A6f3RRddpGjEaf5l8Bkng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b20b7bd480d0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1523&min_rtt=1494&rtt_var=581&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1250&delivery_rate=1954484&cwnd=213&unsent_bytes=0&cid=b73e0ff668a5e0b8&ts=1728&x=0"
2025-03-14 09:20:30 UTC	432	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: 27 ad 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 77 0b f5 18 2d 62 80 0c 88 79 Data Ascii: 'YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqapX8w-by
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: 10 59 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa bd 6c 88 04 11 9d 16 5e 0c 17 Data Ascii: YL^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[Fy3l^
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: a3 7f 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 08 eb 61 a8 2c 51 24 62 ea 87 Data Ascii: &%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H`a,Q$b
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: 00 33 df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c 95 f1 07 88 71 c0 fb e2 f0 f1 fe e5 Data Ascii: 3%3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q,q
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: 36 0e 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c ec c6 3c 92 43 97 76 d4 a0 52 b9 0b Data Ascii: 6%~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=\<CvR
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: c2 02 ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e c0 82 84 62 b3 91 05 db 77 e4 5b 88 Data Ascii: {Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O.bw[
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: 2f ed 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 e4 38 00 3e e8 08 90 b7 04 53 d8 da Data Ascii: /]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{@8>S
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: 10 31 f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 05 59 85 04 8d 14 db ff 4f 2e b2 14 Data Ascii: 1E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^YO.
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: 9d 25 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba cc 17 87 65 fb 84 03 b8 8b 39 88 3d Data Ascii: %]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43e9=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49752	104.17.25.14	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:30 UTC	693	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:30 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:30 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 14244 Expires: Wed, 04 Mar 2026 09:20:30 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LmsWbWtZszFXHRK%2Bb15Mtis6AK7pTH88kDgI43W9lGgpPaheBdM4Ba580WcHbAuStsWaDPqICbIK2GEpc2rgeP08gt84bRM%2FET4OgrPv7Ppgtt8BDAZhN1vudfM%2FVHMUNOopmglL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202b20f8da7421d-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:20:30 UTC	422	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:20:30 UTC	1369	IN	Data Raw: 34 38 33 2e 33 33 32 2d 2e 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d 2e 31 32 38 Data Ascii: 483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128
2025-03-14 09:20:30 UTC	678	IN	Data Raw: 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 20 30 6c 2e Data Ascii: .618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4 0l.
2025-03-14 09:20:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49755	34.117.59.81	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:30 UTC	651	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259397.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:30 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:20:30 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:20:30 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49753	104.26.8.44	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:30 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259397.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:30 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: OPTIONS, OPTIONS, GET, POST, HEAD X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228259397.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mL8YwdmyENnlbAAIMB%2FBu0waqlBlKnlmTsOS%2FUR3ezGkFG1qwH8ZNRRxBET6%2F40qyRj0AsaFWjQusKikgS5jAHaTtakAOCEcgdSiyeew4vuI%2FE03RupLX7CK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b20feecfd911-EWR server-timing: cfL4;desc="?proto=TCP&rtt=8993&min_rtt=1686&rtt_var=6954&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=1211&delivery_rate=1731909&cwnd=79&unsent_bytes=0&cid=39efcf27457a6b93&ts=310&x=0"
2025-03-14 09:20:30 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49756	172.67.168.191	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:31 UTC	428	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228259397.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:31 UTC	938	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:31 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bgk2NbsBRL0WjkMJDj3XHfEM0bjn5fg3M1nNZbkqRdI7o9jWLkqEDuEyFJHwfG6fRViS%2FUbp3YqCcOvC7ySBtBema43JRxbEERDWPWKQwKBJiVs18uhAoYw9ll5%2B8FBQW3VbsDbdi6MC2MYXA1tx5FXbkj4tL38lt%2FP%2F%2FgEEEg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b212793149c1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2921&min_rtt=2921&rtt_var=1095&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1000&delivery_rate=999657&cwnd=233&unsent_bytes=0&cid=61bbf78da0367e05&ts=568&x=0"
2025-03-14 09:20:31 UTC	431	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: 6c 27 ad 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 77 0b f5 18 2d 62 80 0c 88 Data Ascii: l'YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqapX8w-b
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: 7c 10 59 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa bd 6c 88 04 11 9d 16 5e 0c Data Ascii: \|YL^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[Fy3l^
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: 05 a3 7f 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 08 eb 61 a8 2c 51 24 62 ea Data Ascii: &%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H`a,Q$b
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: 80 00 33 df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c 95 f1 07 88 71 c0 fb e2 f0 f1 fe Data Ascii: 3%3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q,q
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: d0 36 0e 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c ec c6 3c 92 43 97 76 d4 a0 52 b9 Data Ascii: 6%~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=\<CvR
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: 31 c2 02 ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e c0 82 84 62 b3 91 05 db 77 e4 5b Data Ascii: 1{Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O.bw[
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: ae 2f ed 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 e4 38 00 3e e8 08 90 b7 04 53 d8 Data Ascii: /]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{@8>S
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: 94 10 31 f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 05 59 85 04 8d 14 db ff 4f 2e b2 Data Ascii: 1E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^YO.
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: 52 9d 25 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba cc 17 87 65 fb 84 03 b8 8b 39 88 Data Ascii: R%]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43e9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49758	104.17.24.14	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:31 UTC	428	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:31 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:31 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 14245 Expires: Wed, 04 Mar 2026 09:20:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ttu%2B2utNxSk5lTsgwy69PRM03AB%2FnFwpEd2gKVwS%2B3HbQJcNaj2vkCb1zx2czm7wsY2PNt2WwsCknPahnREhM3zzunbKdt9YmzQC2g5YXKyaulm5EHYkViPDOXczRR%2FuQAdvfnY0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202b21358d9424f-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:20:31 UTC	420	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:20:31 UTC	1369	IN	Data Raw: 2d 2e 34 38 33 2e 33 33 32 2d 2e 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d 2e 31 Data Ascii: -.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.1
2025-03-14 09:20:31 UTC	680	IN	Data Raw: 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 20 30 Data Ascii: 4l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4 0
2025-03-14 09:20:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49757	34.117.59.81	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:31 UTC	379	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:31 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:20:31 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:20:31 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49759	172.67.69.226	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:31 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:31 UTC	924	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: GET, OPTIONS, OPTIONS, POST, HEAD X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m3TMiwlgxzDw%2FFWZFngPWUdnfBnbLKwSwvjzko2H0FVaY5TAJq0YMxzle4nt0w0tYmAluM0WHpwT3lOS3ORFxM6NCBvrJKN%2B5wCsr1YhwnorRRm8CWY71KNw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b214bae9c3fd-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3738&min_rtt=1469&rtt_var=4950&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=950&delivery_rate=1927392&cwnd=162&unsent_bytes=0&cid=89ebf913e3cd2943&ts=394&x=0"
2025-03-14 09:20:31 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49761	104.21.16.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:33 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228259397.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:33 UTC	867	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:20:33 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yFoEa74JzR55n3V70CZI2A4NeISv21kr4M2T%2BTVrWZob%2BoHDDVWSyNl%2B5NB9pVCsravfIha0mpWGwY%2FyBnVXSvs64qPSfw2kPakHU1hN0czASRIPxYm4LNRu9is975fHgcjxzzjc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b222387418bc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1695&min_rtt=1683&rtt_var=656&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1155&delivery_rate=1636771&cwnd=232&unsent_bytes=0&cid=8b07b668cc720563&ts=418&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49762	104.21.16.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:34 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 75 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259397.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259397.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:34 UTC	75	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 67 6f 63 45 68 6f 2b 4c 2b 67 73 68 73 59 64 43 55 52 50 50 4f 71 4b 30 4d 38 2f 6e 56 76 6d 59 46 70 4f 53 4a 4f 36 57 58 74 44 77 74 36 49 4f 63 4d 6a 46 65 77 4a 6d 42 45 7a 47 47 4e 31 4f 22 7d Data Ascii: {"data":"gocEho+L+gshsYdCURPPOqK0M8/nVvmYFpOSJO6WXtDwt6IOcMjFewJmBEzGGN1O"}
2025-03-14 09:20:34 UTC	867	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:20:34 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zyANfUJnp02qwz7Qd0ueJx4IHlnIXEXx4wbwWCbLNvSUXq9cT801lGHmGYGwkbagItAfV8U6J3u44lG9D6c2yU%2FKHD9tnYDVfcPmeAf7euvbo6bvS4TMRHr%2FHnumCDiTwwvkYcJ1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b2279b4e438d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1601&min_rtt=1601&rtt_var=600&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1407&delivery_rate=1823860&cwnd=227&unsent_bytes=0&cid=4f56bd8b1dc6f475&ts=416&x=0"
2025-03-14 09:20:34 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:20:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49763	104.21.80.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:20:35 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:20:35 UTC	840	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:20:35 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0AzJ2qmjn8fqAGHOBxscnyidqnPR65KC%2Bw%2FIbP1IXfWs%2Bw3Rc1lk4NCbmfjsbnWGgd6u7ovvKySBXPqM15PtNVrzoz%2FoaqLgE0dTtnMWlDlwcr0WjdYhi1N30o3vZg%2BYLCBAvKdk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202b22d0cc842ad-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2001&min_rtt=1993&rtt_var=764&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=970&delivery_rate=1416100&cwnd=196&unsent_bytes=0&cid=d471fcd8938c7d07&ts=409&x=0"
2025-03-14 09:20:35 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 32 30 66 38 64 38 65 66 35 66 31 66 62 63 63 36 38 32 39 30 66 65 64 65 33 66 61 30 64 66 31 66 2d 31 63 63 32 66 33 63 34 35 32 32 39 35 65 63 38 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-20f8d8ef5f1fbcc68290fede3fa0df1f-1cc2f3c452295ec8-00"}
2025-03-14 09:20:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	54467	35.190.80.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:21:20 UTC	552	OUT	OPTIONS /report/v4?s=0AzJ2qmjn8fqAGHOBxscnyidqnPR65KC%2Bw%2FIbP1IXfWs%2Bw3Rc1lk4NCbmfjsbnWGgd6u7ovvKySBXPqM15PtNVrzoz%2FoaqLgE0dTtnMWlDlwcr0WjdYhi1N30o3vZg%2BYLCBAvKdk HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:21:21 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 14 Mar 2025 09:21:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	54468	35.190.80.1	443	2900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:21:21 UTC	527	OUT	POST /report/v4?s=0AzJ2qmjn8fqAGHOBxscnyidqnPR65KC%2Bw%2FIbP1IXfWs%2Bw3Rc1lk4NCbmfjsbnWGgd6u7ovvKySBXPqM15PtNVrzoz%2FoaqLgE0dTtnMWlDlwcr0WjdYhi1N30o3vZg%2BYLCBAvKdk HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 406 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:21:21 UTC	406	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 34 38 30 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 36 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 38 30 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 6e Data Ascii: [{"age":44804,"body":{"elapsed_time":868,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.80.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourcin
2025-03-14 09:21:21 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:21:21 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	05:20:00
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7008d0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	05:20:03
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,14392242175342624952,12325471337729548151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3
Imagebase:	0x7ff7008d0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:20:05
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,14392242175342624952,12325471337729548151,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4940 /prefetch:8
Imagebase:	0x7ff7008d0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	05:20:09
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228259397.counselschambers.co.uk/"
Imagebase:	0x7ff7008d0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://case-id-1000228259397.counselschambers.co.uk/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
http://case-id-1000228259397.counselschambers.co.uk/