Edit tour

Windows Analysis Report
http://case-id-1000228254452.counselschambers.co.uk/

Overview

General Information

Sample URL:	http://case-id-1000228254452.counselschambers.co.uk/
Analysis ID:	1638274
Infos:

Detection

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,10597314978764046875,15171506597599766589,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2140 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228254452.counselschambers.co.uk/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://case-id-1000228254452.counselschambers.co.uk/

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://case-id-1000228254452.counselschambers.co.uk/

Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is typically associated with the domain 'facebook.com'., The provided URL 'case-id-1000228254452.counselschambers.co.uk' does not match the legitimate domain for Facebook., The URL contains a subdomain and a domain name that are not related to Facebook, which is suspicious., The presence of input fields for personal information such as phone number, full name, email address, and birthday is common in phishing attempts targeting Facebook users., The domain 'counselschambers.co.uk' does not have any known association with Facebook. DOM: 2.1.pages.csv
Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The provided URL 'case-id-1000228254452.counselschambers.co.uk' does not match the legitimate domain of Facebook., The URL contains a subdomain 'case-id-1000228254452' which is unrelated to Facebook and suggests a case or ID reference, which is suspicious., The main domain 'counselschambers.co.uk' is unrelated to Facebook, indicating a potential phishing attempt., The presence of input fields for personal information such as phone number, full name, email address, and birthday is common in phishing sites attempting to harvest sensitive data. DOM: 2.2.pages.csv

AI detected suspicious Javascript

Source: 1.5..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://case-id-1000228254452.counselschambers.co.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. It appears to be collecting user IP addresses and sending encrypted data to an external server, which is highly suspicious behavior. The script also uses multiple fallback domains, further increasing the risk. While the intent is not entirely clear, the overall behavior of this script is highly concerning and warrants further investigation.

HTML page contains obfuscated javascript

Source: https://case-id-1000228254452.counselschambers.co.uk/help.html	HTTP Parser: var _0x128029=_0x3b3d;function _0x3b3d(_0x15d4a1,_0x5b219b){var _0x29e93f=_0x416c();return
Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html	HTTP Parser: var _0x58efb4=_0x136f;(function(_0x29482d,_0x453fa9){var _0x81cf80=_0x136f,_0x523557=_0x294

Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html

HTTP Parser: Number of links: 0

Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html

HTTP Parser: Title: Business Help Center | Privacy Policy does not match URL

Source: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js

HTTP Parser: ;(function (root, factory) {if (typeof exports === "object") {// commonjsmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// amddefine([], factory);}else {// global (browser)root.cryptojs = factory();}}(this, function () {/*globals window, global, require*//** * cryptojs core components. */var cryptojs = cryptojs || (function (math, undefined) { var crypto; // native crypto from window (browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // native crypto in web worker (browser) if (typeof self !== 'undefined' && self.crypto) { crypto = self.crypto; } // native crypto from worker if (typeof globalthis !== 'undefined' && globalthis.crypto) { crypto = globalthis.crypto; } // native (experimental ie 11) crypto from window (browser) if (!crypto && typeof window !== 'undefined' && window.mscrypto) { ...

Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found

Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found
Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found

Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found
Source: https://case-id-1000228254452.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.164:443 -> 192.168.2.10:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.164:443 -> 192.168.2.10:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.10:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.10:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.10:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.10:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.10:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.10:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.10:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.10:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.10:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.10:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.10:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.10:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.10:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.10:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.10:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.10:49736 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.10:65298 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: case-id-1000228254452.counselschambers.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiKo8sBCIWgzQEI/aXOAQiA1s4BCMnczgEI4ODOAQjl484BCK/kzgEIyOTOAQjf5M4BCObkzgEIi+XOAQiO5c4BSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: case-id-1000228254452.counselschambers.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help.html HTTP/1.1Host: case-id-1000228254452.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-5b6c678b.css HTTP/1.1Host: case-id-1000228254452.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://case-id-1000228254452.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228254452.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228254452.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228254452.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react/umd/react.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228254452.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228254452.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228254452.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228254452.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228254452.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /case-support.html HTTP/1.1Host: case-id-1000228254452.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://case-id-1000228254452.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228254452.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228254452.counselschambers.co.uk/index-5b6c678b.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://case-id-1000228254452.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228254452.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228254452.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_93.1.dr

String found in binary or memory: /*Dirty hack for facebook big video page e.g: https://www.facebook.com/abc/videos/...*/ equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: case-id-1000228254452.counselschambers.co.uk
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: ipapi.co
Source: global traffic	DNS traffic detected: DNS query: pickoutsourcing.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io

Source: unknown

HTTP traffic detected: POST /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveContent-Length: 55sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/json; charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://case-id-1000228254452.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228254452.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top

Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://2k.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://33across.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://360yield.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://3lift.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://a-mo.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://acxiom.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ad-score.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ad-stir.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ad.gt
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adentifi.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adform.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adingo.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://admatrix.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://admission.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://admixer.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adnami.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adnxs.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adroll.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adsafeprotected.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adscale.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adsmeasurement.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adsrvr.org
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adswizz.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adthrive.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://adtrafficquality.google
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://advividnetwork.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://aggregation-service-site-dot-clz200258-datateam-italy.ew.r.appspot.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://akpytela.cz
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://alketech.eu
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://amazon-adsystem.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://aniview.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://anonymised.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://apex-football.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://aphub.ai
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://appconsent.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://appier.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://appsflyer.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://appsflyersdk.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://aqfer.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://atirun.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://atomex.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://audience360.com.au
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://audienceproject.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://authorizedvault.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://avads.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ayads.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://azubiyo.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://beaconmax.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bidswitch.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bidtheatre.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://blendee.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bluems.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://boost-web.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bounceexchange.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://bypass.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://casalemedia.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://cazamba.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://cdn-net.com
Source: chromecache_102.1.dr, chromecache_93.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_93.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/intl-tel-input
Source: chromecache_102.1.dr, chromecache_93.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-bootstrap
Source: chromecache_102.1.dr, chromecache_93.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Source: chromecache_102.1.dr, chromecache_93.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Source: chromecache_102.1.dr, chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1e9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1eb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f1.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fa.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fc.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1eb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ef.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fc.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fe.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1eb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ed.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ee.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f1.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fa.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fc.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ef.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f0.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1e8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ef.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1eb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ed.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f5.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fa.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fc.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fe.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1fa.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1e9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f1.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f5.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ed.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ee.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f5.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1ee.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f0.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fa.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fe.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ed.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f1.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fa.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fd.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fe.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ee.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f1.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f4-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1eb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ed.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f0.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f1.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fc.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f6-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fa.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fc.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ee.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f1.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fe.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1e9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ed.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f1.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f4.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f7.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fb.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fc.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ec.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1fe.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ff.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1f3.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1fa.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fc-1f1f8.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fd-1f1f0.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fe-1f1ea.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1e6.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1f2.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1fc.svg
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://clickonometrics.pl
Source: chromecache_102.1.dr, chromecache_93.1.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://connatix.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://connected-stories.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://convertunits.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://coupang.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://cpx.to
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://crcldu.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://creative-serving.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://creativecdn.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://criteo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ctnsnet.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://d-edgeconnect.media
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dabbs.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dailymail.co.uk
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dailymotion.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://daum.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://deepintent.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://demand.supply
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://display.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://disqus.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://docomo.ne.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dotdashmeredith.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dotomi.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://doubleclick.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://doubleverify.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dreammail.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://dynalyst.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ebayadservices.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ebis.ne.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://edkt.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://elle.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://elnacional.cat
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://eloan.co.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://euleriancdn.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://explorefledge.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ezoic.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://fanbyte.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://fandom.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://finn.no
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://flashtalking.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://fout.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://fwmrm.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gama.globo
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://get3rdspace.com
Source: chromecache_79.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://getcapi.co
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://getyourguide.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ghtinc.com
Source: chromecache_87.1.dr	String found in binary or memory: https://github.com/jackocnr/intl-tel-input.git
Source: chromecache_79.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://globo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gmossp-sp.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gokwik.co
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://google-analytics.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://googleadservices.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://googlesyndication.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://grxchange.gr
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gsspat.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gumgum.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://gunosy.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://halcy.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://html-load.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://i-mobile.co.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://im-apps.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://impact-ad.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://indexww.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ingereck.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://inmobi.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://innovid.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://iobeya.com
Source: chromecache_80.1.dr, chromecache_83.1.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://jivox.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://jkforum.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://kargo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://kidoz.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://kompaspublishing.nl
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ladsp.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://linkedin.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://logly.co.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://lucead.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://lwadm.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://mail.ru
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://media.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://media6degrees.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://mediaintelligence.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://mediamath.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://mediavine.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://metro.co.uk
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://microad.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://momento.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://moshimo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://naver.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://nexxen.tech
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://nhnace.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://nodals.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://onet.pl
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://onetag-sys.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://open-bid.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://openx.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://optable.co
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://outbrain.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://paa-reporting-advertising.amazon
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://payment.goog
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://permutive.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://pinterest.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://postrelease.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://presage.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://primecaster.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ad-server.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp-a.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp-b.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp-x.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp-y.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-dsp.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp-a.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp-b.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp-x.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp-y.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-demos-ssp.dev
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandbox-test.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ad-server.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp-a1.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp-b1.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp-x.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp-y.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-dsp.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp-a.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp-b.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp-x.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp-y.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://privacy-sandcastle-dev-ssp.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://ptb-msmt-static-5jyy5ulagq-uc.a.run.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://pub.network
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://pubmatic.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://pubtm.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://quantserve.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://quora.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://r2b2.io
Source: chromecache_88.1.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://relevant-digital.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://retargetly.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://rubiconproject.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://samplicio.us
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://sascdn.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://seedtag.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://semafor.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://sephora.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shared-storage-demo-content-producer.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shared-storage-demo-publisher-a.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shared-storage-demo-publisher-b.web.app
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shinobi.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://shinystat.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://simeola.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://singular.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://sitescout.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://smadexprivacysandbox.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://snapchat.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://socdm.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://sportradarserving.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://stackadapt.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://storygize.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://superfine.org
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://t13.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://taboola.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tailtarget.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tamedia.com.tw
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tangooserver.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://teads.tv
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://theryn.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tiktok.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tncid.app
Source: chromecache_94.1.dr	String found in binary or memory: https://tools.ietf.org/html/rfc9110#section-15.5.1
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://toponad.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://torneos.gg
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tpmark.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tribalfusion.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://trip.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://triptease.io
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://trkkn.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://tya-dev.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://uinterbox.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://undertone.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://unrulymedia.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://uol.com.br
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://usemax.de
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://validate.audio
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://verve.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://vg.no
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://vidazoo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://vpadn.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://washingtonpost.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://weborama-tech.ru
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://weborama.fr
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://wepowerconnections.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://worldhistory.org
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://wp.pl
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yahoo.co.jp
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yahoo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yelp.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yieldlab.net
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://yieldmo.com
Source: privacy-sandbox-attestations.dat.0.dr	String found in binary or memory: https://youronlinechoices.eu

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65309
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65301
Source: unknown	Network traffic detected: HTTP traffic on port 65310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	HTTPS traffic detected: 142.250.186.164:443 -> 192.168.2.10:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.164:443 -> 192.168.2.10:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.10:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.10:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.10:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.10:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.10:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.10:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.13:443 -> 192.168.2.10:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.10:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.10:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.10:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.10:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.10:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.10:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.10:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.10:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.10:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.10:49736 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\scoped_dir5380_1222960967	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\privacy-sandbox-attestations.dat	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\scoped_dir5380_517135026	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5380_1222960967

Jump to behavior

Source: classification engine

Classification label: mal72.phis.win@23/48@32/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,10597314978764046875,15171506597599766589,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2140 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228254452.counselschambers.co.uk/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,10597314978764046875,15171506597599766589,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2140 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://case-id-1000228254452.counselschambers.co.uk/	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label	Link
https://case-id-1000228254452.counselschambers.co.uk/	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	high
ipapi.co	172.67.69.226	true	false	high
scontent.xx.fbcdn.net	157.240.252.13	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
case-id-1000228254452.counselschambers.co.uk	104.21.70.234	true	true	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
ipinfo.io	34.117.59.81	true	false	high
www.google.com	142.250.186.164	true	false	high
pickoutsourcing.com	104.21.48.1	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
static.xx.fbcdn.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://case-id-1000228254452.counselschambers.co.uk/	false	Avira URL Cloud: malware	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js	false		high
https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js	false		high
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	false		high
https://case-id-1000228254452.counselschambers.co.uk/case-support.html	true		unknown
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ipinfo.io/missingauth	chromecache_80.1.dr, chromecache_83.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg	chromecache_93.1.dr	false	high
https://connatix.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://mediaintelligence.de	privacy-sandbox-attestations.dat.0.dr	false	high
https://privacy-sandcastle-dev-dsp.web.app	privacy-sandbox-attestations.dat.0.dr	false	high
https://privacy-sandbox-demos-dsp-a.dev	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg	chromecache_93.1.dr	false	high
https://permutive.app	privacy-sandbox-attestations.dat.0.dr	false	high
https://privacy-sandbox-demos-dsp.dev	privacy-sandbox-attestations.dat.0.dr	false	high
https://adthrive.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://ad.gt	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg	chromecache_93.1.dr	false	high
https://trkkn.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg	chromecache_93.1.dr	false	high
https://media6degrees.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://privacy-sandcastle-dev-ssp.web.app	privacy-sandbox-attestations.dat.0.dr	false	high
https://33across.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://dreammail.jp	privacy-sandbox-attestations.dat.0.dr	false	high
https://jkforum.net	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg	chromecache_93.1.dr	false	high
https://privacy-sandbox-demos-ssp-y.dev	privacy-sandbox-attestations.dat.0.dr	false	high
https://aphub.ai	privacy-sandbox-attestations.dat.0.dr	false	high
https://gama.globo	privacy-sandbox-attestations.dat.0.dr	false	high
https://audienceproject.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://adsrvr.org	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg	chromecache_93.1.dr	false	high
https://edkt.io	privacy-sandbox-attestations.dat.0.dr	false	high
https://rubiconproject.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://sitescout.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://apex-football.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://dotomi.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg	chromecache_93.1.dr	false	high
https://ctnsnet.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://shinobi.jp	privacy-sandbox-attestations.dat.0.dr	false	high
https://superfine.org	privacy-sandbox-attestations.dat.0.dr	false	high
https://360yield.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://eloan.co.jp	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg	chromecache_93.1.dr	false	high
https://postrelease.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://aqfer.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg	chromecache_93.1.dr	false	high
https://shared-storage-demo-publisher-a.web.app	privacy-sandbox-attestations.dat.0.dr	false	high
https://weborama-tech.ru	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg	chromecache_93.1.dr	false	high
https://nexxen.tech	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg	chromecache_93.1.dr	false	high
https://advividnetwork.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://undertone.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://creative-serving.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://unrulymedia.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg	chromecache_93.1.dr	false	high
https://paa-reporting-advertising.amazon	privacy-sandbox-attestations.dat.0.dr	false	high
https://privacy-sandbox-demos-ssp-b.dev	privacy-sandbox-attestations.dat.0.dr	false	high
https://bypass.jp	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg	chromecache_93.1.dr	false	high
https://atirun.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg	chromecache_93.1.dr	false	high
https://impact-ad.jp	privacy-sandbox-attestations.dat.0.dr	false	high
https://admatrix.jp	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg	chromecache_93.1.dr	false	high
https://taboola.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://i-mobile.co.jp	privacy-sandbox-attestations.dat.0.dr	false	high
https://uinterbox.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg	chromecache_93.1.dr	false	high
https://privacy-sandcastle-dev-ssp-a.web.app	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg	chromecache_93.1.dr	false	high
https://adnxs.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg	chromecache_93.1.dr	false	high
https://seedtag.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg	chromecache_93.1.dr	false	high
https://semafor.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://lwadm.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg	chromecache_93.1.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg	chromecache_93.1.dr	false	high
https://elle.com	privacy-sandbox-attestations.dat.0.dr	false	high
https://pinterest.com	privacy-sandbox-attestations.dat.0.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.70.234	case-id-1000228254452.counselschambers.co.uk	United States	13335	CLOUDFLARENETUS	true
104.26.8.44	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.48.1	pickoutsourcing.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.67.168.191	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.112.1	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.69.226	ipapi.co	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.10

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638274
Start date and time:	2025-03-14 10:29:25 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://case-id-1000228254452.counselschambers.co.uk/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@23/48@32/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, Sgrmuserer.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 172.217.23.110, 142.250.185.99, 172.217.18.14, 74.125.133.84, 172.217.18.110, 142.250.186.78, 142.250.184.238, 142.250.181.238, 199.232.210.172, 142.250.181.234, 172.217.18.106, 172.217.23.106, 142.250.185.138, 216.58.206.74, 142.250.185.106, 142.250.74.202, 142.250.185.202, 142.250.184.202, 142.250.185.234, 172.217.18.10, 216.58.206.42, 172.217.16.138, 172.217.16.202, 142.250.185.74, 142.250.184.234, 142.250.185.142, 142.250.186.163, 142.250.184.206, 34.104.35.123, 142.250.184.227, 172.202.163.200, 23.199.214.10, 40.126.32.134, 2.19.96.74
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://case-id-1000228254452.counselschambers.co.uk/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1792
Entropy (8bit):	6.019348476983808
Encrypted:	false
SSDEEP:	48:p/hP+drAdRW37aktiyC2xCe69xqYGCRk7NOzPI4Ek:RSQw37anyC+CDGGccA4f
MD5:	0F48EA696FDF31DABB72FD4A472E4A93
SHA1:	A24862DAB4B7146073F74165D733E8EDA45C5185
SHA-256:	57645239B1AECD3BFF0EDF2C489A55221855D4DD690541F57129449D34DC2CE6
SHA-512:	1A32EE516B00800EBE49A17D0DC05A0A21589016A28A6B0CA2934A951DF0E09CDF46B75A9DE7AF62435807DF1EEB10F128284E03AD84A324F7F71EE9AD191CBF
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"D1yGWCJ13w_a4aZS-GmRy1UaSnKuPyDaexx705PHm_LYjgxXA8UjTQ9bScleEJZkORAwk9gKs65NUkOIZOPGdPUDhQg3gDWqrESXFzPZk4RzaEwwlPh-33zUE0qWXcz4FwKu1WGN_Ok4HrKRgdihn7ea4OvP8VqvfNRP56CMpOuQxMLdGtj33weeTm9wBG2D-g2De2hqPBC6G0Jr9FnJ_wLkuNsuMmotIuVgQMViTCStpvxyrUiSyBwWdJH9By924Uu66zgVGLnpcv5tMoSwVylMy3ouQ3_lj2ul-hu5YJa7RzW2gOxCwb7ZtnFkfFx

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9364303497856072
Encrypted:	false
SSDEEP:	3:SQ/SHHHWbcM8VH5DM/4+MlRddVGWSDn:SQ/+HNMEZR+MlPdVGWSD
MD5:	ABB7EA6FFEFB13622CB47C36A07B9175
SHA1:	E593E3B6161F9DF88BACBEF7987BF76F3A886FD5
SHA-256:	6AC28AE1C8DFDE9830AC0B6C6DF657731FB2C895701AFE13F5682F82C5C69137
SHA-512:	5F514012BDD35FB413288E161BD0277EB89AC8B0204C1D63603DDEF119946E77D71DCBFD5D2A7694D945595029538F43D0C00DABC2CE2820528EFAEBB121018B
Malicious:	false
Reputation:	low
Preview:	1.5c635bbbb3bfc63910e29a0be9ff5ee0990cca2d3aaa56e4f4cd2c480c81b7df

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.60145350054745
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifF1mYTdFKS1oMUm:F6VlMXdTHKS1oVm
MD5:	A6B4EE3137180CAD95E7BEFB62CBF122
SHA1:	FA26A56140944B21D6A1ECC7FB3EFC0D97D3EF23
SHA-256:	A1742392406FF6DD5BFD1B2C080EB66BBD7474561A62FD8AB3CCD8300597135D
SHA-512:	35AE8B940797600B727DACED0ACF856263D219697DB923747D745D990C8798ADA5159AC36544A6EC5952F74809D5489A371C6BB44325DEE7BBE52965240188E0
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "Privacy Sandbox Attestations",. "version": "2025.3.12.0".}

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\privacy-sandbox-attestations.dat

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	7422
Entropy (8bit):	5.070572988249595
Encrypted:	false
SSDEEP:	192:I+0f6TueVE9GihNKybjrbgfJsSCiJig+pBWh3zJmOlwy1T:R0f6TudccKybbghsSCeig+vW31m7YT
MD5:	BA9EB9F524A133FEB268463CE7BE918D
SHA1:	B91835A18402B8652939B5A25F8DDF1DBD0418A0
SHA-256:	5103766F23C8FE7FD12DC97F4B8671BC954943BCECFCA4842346E9F2F5FB27AD
SHA-512:	8FC4B4C4EDDC5EF2ADDAD4FBC52A289C5F59018AAD09A8891AE0F4457908153632B6575155A2256EA13754C1EB329AC9F93050316A3F27429B9CFAC06D9725A0
Malicious:	false
Reputation:	low
Preview:	.........https://2k.com..https://33across.com..https://360yield.com..https://3lift.com..https://ad-score.com..https://ad.gt..https://adentifi.com..https://adform.net..https://adingo.jp..https://admatrix.jp..https://admixer.net..https://adnami.io..https://adnxs.com..https://adsafeprotected.com..https://adsrvr.org..https://adthrive.com..https://advividnetwork.com.Nhttps://aggregation-service-site-dot-clz200258-datateam-italy.ew.r.appspot.com..https://anonymised.io..https://aphub.ai..https://appier.net..https://avads.net..https://ayads.io..https://bidswitch.net..https://bidtheatre.net..https://bing.com..https://blendee.com..https://bounceexchange.com..https://bypass.jp..https://casalemedia.com..https://cdn-net.com..https://clickonometrics.pl..https://connected-stories.com..https://crcldu.com..https://creativecdn.com..https://criteo.com..https://ctnsnet.com..https://dabbs.net..https://daum.net..https://display.io..https://dotdashmeredith.com..https://dotomi.com..https://doubleclick.net..ht

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.431705709467301
Encrypted:	false
SSDEEP:	3:O9GonPL5Yn:OAMPL5Yn
MD5:	EDFAF206F17E8D7E4D6F27F33C96B48E
SHA1:	C297DB3C574D5B04330A0038F5D06F033D63731A
SHA-256:	734FD4FF7A23372A1C4B3EB543166B23A9ACFCE0A726E35E62F9466F4966355C
SHA-512:	01420F966754A6AEA6EE15BA3AFF1F72F64B26102B72FD083BC73380B5FD80D223AFB89CA935E779C0B4DA9DBE726594C40DD0ED5178CD10D899DD1EC8D2C15E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIuCRWBsiRD_dv3EgUNEg_8ahIFDdYE7rESBQ2DqFs9EgUNAwLfGSE6wx1PmTTyOQ==?alt=proto
Preview:	CiQKBw0SD/xqGgAKBw3WBO6xGgAKBw2DqFs9GgAKBw0DAt8ZGgA=

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (887)
Category:	downloaded
Size (bytes):	892
Entropy (8bit):	5.175416940043872
Encrypted:	false
SSDEEP:	24:Gjkqb4eyUJQXPHBHslgT1d1uawBATImuoBN2t2t2t2t2t2t2tomffffffo:KkQIUmXPHKlgJXwBAUmuSNYYYYYYYom4
MD5:	1A521F52D2381C4DAE17F405078A1157
SHA1:	62C0BF4D8001658B7EA9CAF64B1E5CA120112D84
SHA-256:	8F7D3D49F2B333EAC80FEBBCB73EE5EF61DF291855DB78018CF93AFBB5A89603
SHA-512:	202DDF6BC66FA04073DDA0212273984CC27A900685B986857E4C3C767D0189318A4AC20016C753DC15DF2716DE62359D46AD7FD811D8B6C1F2F89C2B86E96BBE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["are egg prices going down","xbox game pass mlb the show 25","wwe 2k25 locker codes","irs unclaimed tax refunds","monster hunter wilds crashing","weather storms and tornadoes","make excited nyt crossword clue","atlantic 10 basketball tournament"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"4858024401905285613","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	25882
Entropy (8bit):	5.029415269944235
Encrypted:	false
SSDEEP:	384:4A2qOzG+FP/KD4KdcEO22gF+Ln1S4Fd5IcL/Ly3LFwtRFZQ7YK0su:7OG+PUOI+Ln1S4FYcL/Ly3RwtRFZQGsu
MD5:	E95835699306BA82C03CD5E63A08CCE7
SHA1:	40392030E706DFA942A34728F75953BD47FFE685
SHA-256:	0228800DE3CA222597EA71E5B2BF719441F2441EC2266A17787739A87919C138
SHA-512:	A2478675B14DD3555A579FC172A5B053F5C43E3DF7917524F8F517646DD7355BD83DEF86D4DFD903BA69B35F50A8EC5C095BBFC833CF22CF5E64F9BC20B91F97
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228254452.counselschambers.co.uk/help.html
Preview:	<html lang="en">.<head>. <meta charset="UTF-8">. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,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

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	4.802436867696083
Encrypted:	false
SSDEEP:	3:PouVKQzhq4oEEtGFivYMNbPdNAOkADFoHSb5Rhy/3GXIMBWhtoAcMBcacWWGu:h4Qzhq4HEtSKYk7fWmmHS7QlMch0MWXJ
MD5:	B8F462CEDB09DF5643A7276846674FE4
SHA1:	82DDCECD5ED9A9BBBCCC19858FE9CF52C4EC3FC4
SHA-256:	6E1018597010AA20DDD8B219D623807C0BBC6A2BD4E8A916E748A3EAC0DB2A6E
SHA-512:	864B2B3F271F265CE452A00E093DFB456FF16E1F5834A830BE011FBFCE3C447EB234C7FF753BE16EF4A1B57AD17C70BC524FAAA6A8D46B782ECE5AEB4112BAC9
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228254452.counselschambers.co.uk/
Preview:	<!DOCTYPE html>..<html lang="vi">..<head>.. <meta charset="UTF-8">.. <script>.. window.location.href = "help.html";.. </script>..</head>..<body>..</body>..</html>..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io//json?
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	119175
Entropy (8bit):	5.312931607745592
Encrypted:	false
SSDEEP:	3072:rOoUFMlBxwlHb1Vjcpnd8US74ZnhA1IvUbidhmje7rP5yx60sC:ZZhAqvUbghUe7rPkkc
MD5:	365E05DCCD2211EEABA31DEFF514F5FA
SHA1:	A36F8E61ECCC12C333A44713DC4FAE6EC1548FC4
SHA-256:	150523E0558852A799AAE470EE18FDB61F89CF260EE6DA8EFD8687621156AE33
SHA-512:	F63CEC52665F84B468648C1C21AA4367724925E38C92E460851E0BCEAA9A6AAF215BBBCAD63945C7AF4A58368400F86035275E5D1C5AA308A856E79ED1B71534
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js
Preview:	/! For license information please see react-bootstrap.min.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","react-dom"],t):"object"==typeof exports?exports.ReactBootstrap=t(require("react"),require("react-dom")):e.ReactBootstrap=t(e.React,e.ReactDOM)}(self,((e,t)=>(()=>{var n={814:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function o(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var a=typeof n;if("string"===a\|\|"number"===a)e.push(n);else if(Array.isArray(n)){if(n.length){var s=o.apply(null,n);s&&e.push(s)}}else if("object"===a){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var i in n)r.call(n,i)&&n[i]&&e.push(i)}}}return e.join(" ")}e.exports?(o.default=o,e.exports=o):void 0===(n=function(){return o}.apply(t,[]))\|\|(e.expor

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
URL:	https://ipapi.co/ip
Preview:	8.46.123.189

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19157), with no line terminators
Category:	downloaded
Size (bytes):	19157
Entropy (8bit):	4.937770512209066
Encrypted:	false
SSDEEP:	192:6wR+nXh/TVc6jU+4v7fix43obCfCfIlSc:6wRWXhK6jU+4vTixaACaglSc
MD5:	6B7FB2EE130535419A67AFB198F41C2B
SHA1:	FFB8A25633C4DDEAB81D1B1742AC2FD0B442A4C6
SHA-256:	C6956E8710CF477F7014440385AE16EE4B8CC7ECFD02FDDD4D2F0C6C7FD15845
SHA-512:	CB27BFBB47A142CAD5ADF49DE9B893D7BB77F5183D90D73EBC435C09766E333D9AF8B5851AF5D49D8B96516EA96DF623D637016FF0B7F54670D9C890BF00C3BE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css
Preview:	.iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0!important;margin-bottom:0!important;padding-right:36px;margin-right:0}.iti__flag-container{position:absolute;top:0;bottom:0;right:0;padding:1px}.iti__selected-flag{z-index:1;position:relative;display:flex;align-items:center;height:100%;padding:0 6px 0 8px}.iti__arrow{margin-left:6px;width:0;height:0;border-left:3px solid transparent;border-right:3px solid transparent;border-top:4px solid #555}.iti__arrow--up{border-top:none;border-bottom:4px solid #555}.iti__country-list{position:absolute;z-index:2;list-style:none;text-align:left;padding:0;margin:0 0 0 -1px;box-shadow:1px 1px 4px rgba(0,0,0,.2);background-color:#fff;border:1px solid #ccc;white-space:nowrap;max-height:200px;overflow-y:scroll;-webkit-overflow-scrolling:touch}.iti__country-lis

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26993)
Category:	downloaded
Size (bytes):	29519
Entropy (8bit):	5.620109327436002
Encrypted:	false
SSDEEP:	768:ewqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCY9R:4fUQWodCjgtmKgNzazCw
MD5:	F75E31308C096A103A106C4F5A5D9A66
SHA1:	B6F78285064ECDF283081606D37B643C05D58B61
SHA-256:	FD20B6E4BB5AF8690406A2DE275141EA221822BA78A99261B5412D2BA9CA217C
SHA-512:	FA04A1C81F065A83A25CDC0E9416985DD2D3899B75D08CBAC6300219A769A8CB36D1A24EA21F8F26DDDBC14540E8279F7BBC85EEF6E55FA430C976625704D61A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js
Preview:	/. International Telephone Input v17.0.19. * https://github.com/jackocnr/intl-tel-input.git. * Licensed under the MIT license. */..!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use strict";return function(){function b(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function c(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object.defineProperty(a,d.key,d)}}function d(a,b,d){return b&&c(a.prototype,b),d&&c(a,d),a}for(var e=[["Afghanistan (............)","af","93"],["Albania (Shqip.ri)","al","355"],["Algeria (..........)","dz","213"],["American Samoa","as","1",5,["684"]],["Andorra","ad","376"],["Angola","ao","244"],["Anguilla","ai","1",6,["264"]],["Antigua and Barbuda","ag","1",7,["268"]],["Argentina","ar","54"],["Armenia (........)","am","374"],["Aruba","aw","297"],["Ascension I

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131835
Entropy (8bit):	5.376665898737896
Encrypted:	false
SSDEEP:	1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm
MD5:	7D4842A904E5D5D1B19240075998B111
SHA1:	FEB8DDC9D0566A4FA0971A6E1138658618CDACFE
SHA-256:	35F4F974F4B2BCD44DA73963347F8952E341F83909E4498227D4E26B98F66F0D
SHA-512:	E9AD75D3BAD3940E2062980702A6F02C0B719968A905D24572AF32E52FDA4E07B7069F95024940066D8B3BE2A0E75BCE591F49319AB53AF8E5E6DA65B8DA5379
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,zb){"object"===typeof exports&&"undefined"!==typeof module?zb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],zb):(Q=Q\|\|self,zb(Q.ReactDOM={},Q.React))})(this,function(Q,zb){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function mb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function bj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228254452.counselschambers.co.uk/banner-b1482d4c.webp
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
Preview:	8.46.123.189

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	dropped
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	198114
Entropy (8bit):	4.547483897370231
Encrypted:	false
SSDEEP:	6144:nBx4x8tgo06sGxw8nE94ltDxa6REI/eYcicDmcKCU4MJ9x8BRnE6qSVYbc4sx6t+:nBx4x8tgo06sGxw8nE94ltDxa6REI/eB
MD5:	F716A02969E459FDFC8F37DEE235E925
SHA1:	6F2BB245FEAA0997FA30B085AF0E8990D21395CC
SHA-256:	F0BDF25FDA8F9AF5920C82070775864C7E1166EB31540D030E6B80A382E39CE1
SHA-512:	3505662F3372E0BAF9413AE65EFABF5B34CC5274479AFEE7C884FF33A2F218F052F9321E47167E6106AA5B18E9469BD13104AE60F414459CFFFA92E2F35C5778
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Preview:	;(function (root, factory) {..if (typeof exports === "object") {...// CommonJS...module.exports = exports = factory();..}..else if (typeof define === "function" && define.amd) {...// AMD...define([], factory);..}..else {...// Global (browser)...root.CryptoJS = factory();..}.}(this, function () {.../globals window, global, require/.../*.. CryptoJS core components... */..var CryptoJS = CryptoJS \|\| (function (Math, undefined) {... var crypto;... // Native crypto from window (Browser).. if (typeof window !== 'undefined' && window.crypto) {.. crypto = window.crypto;.. }... // Native crypto in web worker (Browser).. if (typeof self !== 'undefined' && self.crypto) {.. crypto = self.crypto;.. }... // Native crypto from worker.. if (typeof globalThis !== 'undefined' && globalThis.crypto) {.. crypto = globalThis.crypto;.. }... // Native (experimental IE 11) crypto from window (Browser).. if (!crypto && typeof window !== 'undefined' &&

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2208), with CRLF line terminators
Category:	downloaded
Size (bytes):	227261
Entropy (8bit):	5.016535362134103
Encrypted:	false
SSDEEP:	1536:aZcgFTzlCTvPbT+QiT9YWBTV9hT7OcTTKbTdwCTGA6TCVOTvE/Te2nTtmBUTvGhM:9kY8W
MD5:	33DE88FD93505A3C17A0088597503FF1
SHA1:	6003D4597724708F72D0231A42A957833EF23AE1
SHA-256:	81AE6D3FCDED62CECEA0D0F94EA27C5C1AD7EAAC23F6FB61C6AF93634B359060
SHA-512:	98A49CF4124FFD074282FECACDE6FBA2E88FE591B579C9FC4D511E0017D616446D7D0BC26925D1615380618274F9AA37B16C8C82F3D11464E3E8BA86481F74AD
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228254452.counselschambers.co.uk/case-support.html
Preview:	<html lang="en">..<head>.. <meta charset="UTF-8">.. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCFqIkJhHRiyQxysK18pGhhdUSgUGSursz7mP24b5nxpnd9fT9zd3j3E53du4dDYLmBx/O3Plj7vdz5nfOuZfSlSZNmjRp/h+saroXlIP94LQrp2UItGnZzcfAcscCdRENPAa2g0PgO/A52AIWAe1GBZ8DGoAwAwGVHogssxc++gAEfgViAs6CJdcb/kUQBMKGgNBWtwjKaf5kQoH6aA4Y4ZA2uArZeqClEr4AiARYhmc8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMylJAVRF9VGGhQBZrulAIJnQMDPAsAsEAELKUlB4h4IRM3hJRlFHQKhBf4JQTXDts8MiM6ASB8LYJQCYYhNJ7XQx6+CWHhFopZsFhbuMxC4yqFV3GXdgqoH3yOHBYkyDq/w2j8F8vyNlOsTZiDRAalJ5KDcxYHdqkBmvtFK2rrOZ1MQmAS6FIEAcMcF8vzzqKBVUP6lmABkYiPCe8l5sYTfHB5IiR5KpbyhHXITMPE0yUL4OiAYzRBhIhCb7nzGrkzBzTqzCi8ZwRUy1lzak4LA

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	248
Entropy (8bit):	4.998097587527924
Encrypted:	false
SSDEEP:	6:Yj9K46ATx1ixqCj9pWReLVTAAEXtCDXM5MUkiGIg:Ys/Ex1E9pWeGADD8WUg
MD5:	463B3934BCA52395B6D2506F8CBC6EE3
SHA1:	2EB0E8783F4C1DE70613FA0C81E290187C6C897C
SHA-256:	606D9C3455094F5EE3D898AF9C9F4ED679A9E6030BEF1DC821620FC28E69CBF8
SHA-512:	D3C3519C8E80479870FD76F85B77593044180440B0E2B4C2706A38A5A54E991E5D1FBD82004A54389E309788044D8C5BE376B815C575B1B9216E4E7E2BCBF9D8
Malicious:	false
Reputation:	low
Preview:	{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-257827d9b48fa80d8e070ea76c83aefe-f7178f3f4fed530c-00"}

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	10751
Entropy (8bit):	5.3269914599293475
Encrypted:	false
SSDEEP:	192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G
MD5:	E91B2616629791B375867C298DC846CC
SHA1:	AA77AE4C49F525BC21DE1D04F08A5D73962C7CCE
SHA-256:	D949F1C3687AEDADCEDAC85261865F29B17CD273997E7F6B2BFC53B2F9D4C4DD
SHA-512:	415B3C2E8E3717D952B81CA469D0DBD284970CBFC16D9E7CF2EAD6542470488A1EC10BFF1308357FCE262B753BF746D9D057E115AD584905262211BEA4844A7A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	downloaded
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228254452.counselschambers.co.uk/190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13509), with CRLF line terminators
Category:	downloaded
Size (bytes):	13511
Entropy (8bit):	4.942883944272427
Encrypted:	false
SSDEEP:	192:4MmQ24+k5axPxEXaC0YMUcD5vqSWgjMXoe6MUoSk:SNk5axPxEXaC/cD5S5gjMXoe6MUA
MD5:	96ECDF4FA06E0AFBDA7E293121EEECFA
SHA1:	6BAE397B359FBF59FADB416F293ED7F25679C4C7
SHA-256:	343F3A116F0963DE569D4623FDED0ED8C7F5C44D5498B1F5AFC25B2571027E96
SHA-512:	6A42A153B3B3E7159FC59518ECD72A4D0204971C954011B91549F2DFA55D4B23961FA851A48945246B0AE46D7AF236BB6B7AA260647DD1DD4F7FEE529481F0B4
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228254452.counselschambers.co.uk/index-5b6c678b.css
Preview:	.logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-reduced-motion: no-preference){a:nth-of-type(2) .logo{animation:logo-spin infinite 20s linear}}.card{padding:2em}.read-the-docs{color:#888}.banner{position:relative;padding:50px 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;height:100%;width:100%}.banner-content{top:0;right:0;bottom:0;left:0;z-index:100;display:flex;position:relative;justify-content:center;align-items:center;flex-direction:column;color:#fff!important}.banner-content h5{font-size:14px;font-family:Freight Sans LF Pro Semibold,Helvetica,Arial,sans-serif;text-rendering:optimize

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:30:19.811033010 CET	49677	443	192.168.2.10	2.23.227.208
Mar 14, 2025 10:30:19.826627970 CET	49676	443	192.168.2.10	2.23.227.208
Mar 14, 2025 10:30:19.826704979 CET	49675	443	192.168.2.10	2.23.227.208
Mar 14, 2025 10:30:25.754776001 CET	49691	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:30:25.754817963 CET	443	49691	142.250.186.164	192.168.2.10
Mar 14, 2025 10:30:25.754910946 CET	49691	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:30:25.755086899 CET	49691	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:30:25.755099058 CET	443	49691	142.250.186.164	192.168.2.10
Mar 14, 2025 10:30:26.418431997 CET	443	49691	142.250.186.164	192.168.2.10
Mar 14, 2025 10:30:26.418540001 CET	49691	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:30:26.419768095 CET	49691	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:30:26.419789076 CET	443	49691	142.250.186.164	192.168.2.10
Mar 14, 2025 10:30:26.420073986 CET	443	49691	142.250.186.164	192.168.2.10
Mar 14, 2025 10:30:26.464090109 CET	49691	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:30:27.124335051 CET	49692	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:27.124393940 CET	443	49692	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:27.124608994 CET	49692	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:27.124674082 CET	49692	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:27.124681950 CET	443	49692	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:27.587028027 CET	443	49692	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:27.587188959 CET	49692	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:27.588380098 CET	49692	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:27.588397980 CET	443	49692	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:27.588725090 CET	443	49692	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:27.589024067 CET	49692	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:27.636327028 CET	443	49692	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:28.175190926 CET	49691	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:30:28.220329046 CET	443	49691	142.250.186.164	192.168.2.10
Mar 14, 2025 10:30:28.386691093 CET	443	49691	142.250.186.164	192.168.2.10
Mar 14, 2025 10:30:28.390351057 CET	443	49691	142.250.186.164	192.168.2.10
Mar 14, 2025 10:30:28.390414000 CET	49691	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:30:28.392996073 CET	49691	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:30:28.393028021 CET	443	49691	142.250.186.164	192.168.2.10
Mar 14, 2025 10:30:29.412889004 CET	49677	443	192.168.2.10	2.23.227.208
Mar 14, 2025 10:30:29.428442955 CET	49676	443	192.168.2.10	2.23.227.208
Mar 14, 2025 10:30:29.428658009 CET	49675	443	192.168.2.10	2.23.227.208
Mar 14, 2025 10:30:30.075855970 CET	49692	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:30.075992107 CET	443	49692	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:30.076106071 CET	49692	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:30.080833912 CET	49693	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:30.080893040 CET	443	49693	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:30.081123114 CET	49693	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:30.081291914 CET	49693	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:30.081310034 CET	443	49693	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:30.536140919 CET	443	49693	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:30.536221981 CET	49693	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:30.537333012 CET	49693	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:30.537347078 CET	443	49693	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:30.537580013 CET	443	49693	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:30.538141966 CET	49693	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:30.584319115 CET	443	49693	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:34.657655954 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 10:30:34.968206882 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 10:30:35.144471884 CET	443	49693	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.144587994 CET	443	49693	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.144772053 CET	49693	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.146226883 CET	49693	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.146256924 CET	443	49693	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.208252907 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.208329916 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.208441019 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.208512068 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.208558083 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.208616018 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.208725929 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.208765984 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.208853960 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.208875895 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.576576948 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 10:30:35.660196066 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.660646915 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.660691977 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.661052942 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.661062002 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.664371014 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:35.664624929 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:35.664658070 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.071630955 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.071696997 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.071734905 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.071773052 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.071918964 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.071918964 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.071940899 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.074364901 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.074408054 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.074425936 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.074434042 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.074471951 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.074477911 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.074515104 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.074558973 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.074565887 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.076170921 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.076231956 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.076242924 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.131082058 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.210901976 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211004972 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211055040 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211087942 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211209059 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.211209059 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.211236954 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211328983 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211380005 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211395025 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.211400986 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211437941 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.211443901 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211532116 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.211576939 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.236113071 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.236146927 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.240132093 CET	49694	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.240155935 CET	443	49694	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.242947102 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.242997885 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.243063927 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.243645906 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.243674994 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.243729115 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.243860006 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.243876934 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.244119883 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.244169950 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.244226933 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.244246960 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.244256973 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.244340897 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.244359016 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.621200085 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.621259928 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.621294022 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.621315002 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.621329069 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.621342897 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.621373892 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.621525049 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.621565104 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.621606112 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.621624947 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.621666908 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.621916056 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.625776052 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.625827074 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.625838995 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.625869036 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.625900984 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.625912905 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.625942945 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.631107092 CET	49695	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.631135941 CET	443	49695	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.700062990 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.700139999 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.702085972 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.702106953 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.702369928 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.702454090 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.702521086 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.702918053 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.703579903 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.703592062 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.703881979 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.704174995 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.705840111 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.705904007 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.706792116 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.706801891 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.707035065 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.707314968 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.744327068 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.744332075 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.748336077 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.779623032 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 10:30:36.796339035 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.796412945 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.796448946 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.796458006 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.796489954 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.796530008 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.796536922 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.796799898 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.796832085 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.796907902 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.796915054 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.796974897 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.797595978 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.797668934 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.797724009 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.797741890 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.800973892 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.801074028 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.801101923 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.801631927 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.801696062 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.801726103 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.801743984 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.801754951 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.801769018 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.801794052 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.802340984 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.802369118 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.802386999 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.802406073 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.802443027 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.802449942 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.803168058 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.803219080 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.803231001 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.809225082 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.809273005 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.809294939 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.842408895 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.842796087 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.842849970 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.842890978 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.842894077 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.842925072 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.842963934 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.842983961 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.842992067 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.843027115 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.843029976 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.843044996 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.843100071 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.843106985 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.847203970 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.847235918 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.847258091 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.847265959 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.847311020 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.847547054 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.858197927 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.882637024 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.882711887 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.882745028 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.882762909 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.882781982 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.882824898 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.882832050 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.882960081 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.882996082 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.883002996 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.883009911 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.883050919 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.883058071 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.883090019 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.883127928 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.883135080 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.883810997 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.883842945 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.883865118 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.883872986 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.883919954 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.884275913 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.884366035 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.884397984 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.884407043 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.884413004 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.884454012 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.884455919 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.884470940 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.884521961 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.885202885 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.885257006 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.885313988 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.885322094 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.887638092 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.890583992 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.890599966 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.890616894 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.890625000 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.890645981 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.890659094 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.890692949 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.890723944 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.890744925 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.892451048 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.892478943 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.892548084 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.892556906 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.892617941 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.928862095 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.928920984 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.928951025 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.928970098 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.929002047 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929055929 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.929065943 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929193020 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929227114 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929234028 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.929244995 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929281950 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929287910 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.929296970 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929342985 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.929899931 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929958105 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929995060 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.929996967 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.930006027 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.930038929 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.930046082 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.930089951 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.930130005 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.930138111 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.930963993 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.930996895 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.931022882 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.931030035 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.931060076 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.931071043 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.931077957 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.931121111 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:36.933932066 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.933959961 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.969152927 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.969172955 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.969192028 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.969198942 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.969206095 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.969233990 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.969269991 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.969296932 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.969305038 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.969319105 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.969599009 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:36.970514059 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.970549107 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.970567942 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.970580101 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.970618010 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.970638990 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.970685959 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.971398115 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.971415043 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.971472979 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.971487045 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.977189064 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.977209091 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.977266073 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.977308035 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.977329969 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.977344990 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.978976011 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.978992939 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.979032040 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.979044914 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.979059935 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.979089022 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.979098082 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.979129076 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.979156971 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.979602098 CET	49699	443	192.168.2.10	151.101.130.137
Mar 14, 2025 10:30:36.979619026 CET	443	49699	151.101.130.137	192.168.2.10
Mar 14, 2025 10:30:36.988312960 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.988360882 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.988430023 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.988720894 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.988765955 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:36.988815069 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.988871098 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:36.988883972 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:36.988953114 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:36.988966942 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.009480000 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.009522915 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.009551048 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.009584904 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.009614944 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.009639978 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.014564991 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.014590979 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.015130043 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.015180111 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.015181065 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.015193939 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.015244007 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.015250921 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.015321016 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.015357971 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.015369892 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.015377045 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.015400887 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.015414953 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.015428066 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.016216993 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.016263962 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.016268969 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.016284943 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.016320944 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.016329050 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.016377926 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.016385078 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.016423941 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.017066956 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.017122984 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.017189026 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.017239094 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.017906904 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.017946959 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.017957926 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.017963886 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.017991066 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.017997026 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.018011093 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.018017054 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.018042088 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.018681049 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.018728971 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.018733025 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.018740892 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.018775940 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.018781900 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.018825054 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.018831968 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.018867970 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.057734013 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.057815075 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.057862997 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.057868958 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.057895899 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.057913065 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.057919025 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.057934046 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.057970047 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.057976007 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.058022976 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.059156895 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.059175968 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.059231997 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.059240103 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.059289932 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.059838057 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.059864998 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.059900999 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.059910059 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.059973001 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.060123920 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.060497999 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.060523987 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.060575008 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.060583115 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.060631037 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.060646057 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.061950922 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.061970949 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.062020063 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.062030077 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.062064886 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.062084913 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.103502035 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.103566885 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.103579044 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.103607893 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.103626013 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.103631973 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.103655100 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.103660107 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.103672981 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.103696108 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.103704929 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.103714943 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.103739023 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.103759050 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.103765011 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.104260921 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.104301929 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.104319096 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.104325056 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.104348898 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.105421066 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.105458975 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.105469942 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.105475903 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.105494022 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.105505943 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.105545044 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.105550051 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.105595112 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.105952978 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.106003046 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.106322050 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.106359959 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.106378078 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.106384993 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.106409073 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.107270002 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.107311010 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.107311010 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.107321978 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.107348919 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.107367992 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.107404947 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.107413054 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.107454062 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.108016014 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.108076096 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.108236074 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.108325958 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.108581066 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.108639002 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.109035969 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.109086037 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.109246969 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.109278917 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.109297991 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.109306097 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.109327078 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.109399080 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.109440088 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.115468025 CET	49698	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:37.115492105 CET	443	49698	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:37.143281937 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.143336058 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.143368006 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.143398046 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.143410921 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.143421888 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.143441916 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.143452883 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.143470049 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.143496037 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.143501043 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.143580914 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.143621922 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.143879890 CET	49697	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.143899918 CET	443	49697	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.206872940 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.206929922 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.207020044 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.207240105 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.207317114 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.207380056 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.208457947 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.208476067 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.208545923 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.208573103 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.219209909 CET	49704	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.219260931 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.219439030 CET	49704	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.219564915 CET	49705	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.219595909 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.219651937 CET	49705	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.219863892 CET	49704	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.219878912 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.219923019 CET	49705	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.219933987 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.448960066 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.449371099 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.449409962 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.449760914 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.449767113 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.462595940 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.462995052 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.463028908 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.463171959 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.463177919 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.478569031 CET	49706	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.478611946 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.478689909 CET	49706	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.478982925 CET	49706	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.478992939 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.564569950 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.564757109 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.564793110 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.564819098 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.564830065 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.564841032 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.564883947 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.564897060 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.564939022 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.564944029 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.565567970 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.565785885 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.565792084 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.565973997 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.566009045 CET	443	49701	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.566066980 CET	49701	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.681576967 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.681659937 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.681802034 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.681869984 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.682269096 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.682281017 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.682526112 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.682585001 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.682596922 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.682775974 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.682840109 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.683027029 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.724325895 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.724337101 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.784751892 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.785509109 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.785551071 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.785568953 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.785598040 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.785649061 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.785674095 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.785681963 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.785723925 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.786390066 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.786684990 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.786741018 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.786747932 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.790288925 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.790327072 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.790359974 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.790365934 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.790555000 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.800940037 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.856661081 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.861959934 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.862016916 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.862063885 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.862119913 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.862137079 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.862169027 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.862181902 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.862368107 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.862416029 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.862426996 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.862891912 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.863075972 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.863082886 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.872431040 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.872481108 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.872495890 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.872505903 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.872541904 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.872548103 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.873909950 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.873969078 CET	49705	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.874994993 CET	49705	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.875006914 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.875253916 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.875560999 CET	49705	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.876154900 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876224995 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876264095 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876269102 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.876286030 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876329899 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876358032 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876368046 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.876375914 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876390934 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.876504898 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.876562119 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876583099 CET	49704	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.876833916 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.876842022 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876898050 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876928091 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876945019 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.876950979 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.876986027 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.876991034 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.877182007 CET	49704	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.877192020 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.877382040 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.877418041 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.877419949 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.877433062 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.877470016 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.877477884 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.877502918 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.877511978 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.877541065 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.877551079 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.877557039 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.877794981 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.878021002 CET	49704	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:37.878303051 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.878357887 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.878395081 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.878429890 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.878439903 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.878484011 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.920322895 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.922935963 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.924328089 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:37.937891960 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.949342966 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.949439049 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.949470997 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.949496031 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.949505091 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.949548960 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.949855089 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.949922085 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.949953079 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.949964046 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.949970961 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.950248003 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.950706959 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.950769901 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.950808048 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.950820923 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.950826883 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.950920105 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.950934887 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.950949907 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.951003075 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.951231956 CET	49700	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:37.951246023 CET	443	49700	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:37.966846943 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.966895103 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.966922998 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.966950893 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.966976881 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.966995001 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.966998100 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.967010975 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.967040062 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.967051029 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.967071056 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.967137098 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.967175007 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.967214108 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.967221975 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.968302011 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.968326092 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.968389988 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.968401909 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.969322920 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.969343901 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.969517946 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.969525099 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:37.969543934 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.969578981 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:37.971812010 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:37.971864939 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:37.971940994 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:37.972095013 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:37.972110033 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.009948969 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.009974003 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.010082960 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.010108948 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.010694027 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.043282032 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.043520927 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.043874979 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.043908119 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.043962955 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.043998003 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.044015884 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.044096947 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.044142962 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.044152021 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.044687033 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.045007944 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.045016050 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.048770905 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.048809052 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.048878908 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.048887968 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.048928976 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.057796955 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.057820082 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.057864904 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.057912111 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.057940960 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.057960033 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.057980061 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.058007002 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.060749054 CET	49703	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.060772896 CET	443	49703	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.114932060 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.115008116 CET	49706	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.115463018 CET	49706	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.115473986 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.115712881 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.116007090 CET	49706	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.134844065 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.134912968 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.134944916 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.134977102 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135004997 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.135015965 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135046959 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.135054111 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135083914 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135113955 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135159969 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.135164976 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135176897 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135179996 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.135221958 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.135226965 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135495901 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135540009 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135540962 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.135549068 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135586977 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.135591984 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135622978 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135658979 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135668993 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.135674953 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.135718107 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.135723114 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.136404991 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.136435032 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.136464119 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.136490107 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.136496067 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.136527061 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.160326004 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.177870035 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.178702116 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.178710938 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.225235939 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.225249052 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.225265980 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.225342989 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.225354910 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.225363016 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.225369930 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.225408077 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.225996971 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.226005077 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.226042032 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.226058006 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.226064920 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.226095915 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.227588892 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.227612019 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.227688074 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.227688074 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.227694988 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.265804052 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.265959978 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.266040087 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.266088009 CET	49705	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.266143084 CET	49705	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.268783092 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.268965006 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.269037962 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.269046068 CET	49704	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.269514084 CET	49704	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.273838043 CET	49704	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.273861885 CET	443	49704	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.274452925 CET	49705	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.274470091 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.274472952 CET	443	49705	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.313999891 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.314016104 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.314049959 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.314088106 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.314119101 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.314147949 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.314163923 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.315212011 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.315258980 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.315272093 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.315293074 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.315330982 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.369087934 CET	49702	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:38.369119883 CET	443	49702	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:38.400707006 CET	49710	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:38.400749922 CET	443	49710	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:38.400906086 CET	49710	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:38.401108980 CET	49710	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:38.401124001 CET	443	49710	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:38.428771019 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.428884983 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.429301023 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.429313898 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.429572105 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.429843903 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.476321936 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.514117002 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.514255047 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.514328957 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.514427900 CET	49706	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.514472961 CET	49706	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.554265976 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554323912 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554378033 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554395914 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.554411888 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554451942 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554486036 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554492950 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.554498911 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554522038 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.554650068 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554677963 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554721117 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.554724932 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.554763079 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.558660984 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.558725119 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.558783054 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.558794022 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.613573074 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.640816927 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.640917063 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.640960932 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.641035080 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.641047001 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.641057968 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.641092062 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.641325951 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.641366959 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.641370058 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.641375065 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.641415119 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.641426086 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.641479969 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.641969919 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.642034054 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.642038107 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.642045975 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.642081022 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.642086029 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.642127037 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.642129898 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.642174959 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.741357088 CET	49706	443	192.168.2.10	157.240.252.13
Mar 14, 2025 10:30:38.741394043 CET	443	49706	157.240.252.13	192.168.2.10
Mar 14, 2025 10:30:38.809756041 CET	49709	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:38.809787035 CET	443	49709	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:38.963706970 CET	443	49710	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:38.963814974 CET	49710	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:38.965384007 CET	49710	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:38.965399981 CET	443	49710	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:38.965646029 CET	443	49710	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:38.966474056 CET	49710	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.008331060 CET	443	49710	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.161705017 CET	443	49710	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.161792994 CET	443	49710	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.161858082 CET	49710	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.162513018 CET	49710	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.162534952 CET	443	49710	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.163940907 CET	49712	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.163990021 CET	443	49712	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.164067984 CET	49712	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.164249897 CET	49712	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.164261103 CET	443	49712	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.185002089 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 10:30:39.724011898 CET	443	49712	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.724381924 CET	49712	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.724411011 CET	443	49712	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.724529028 CET	49712	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.724534035 CET	443	49712	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.806005955 CET	49714	80	192.168.2.10	216.58.206.67
Mar 14, 2025 10:30:39.810672998 CET	80	49714	216.58.206.67	192.168.2.10
Mar 14, 2025 10:30:39.810754061 CET	49714	80	192.168.2.10	216.58.206.67
Mar 14, 2025 10:30:39.810894012 CET	49714	80	192.168.2.10	216.58.206.67
Mar 14, 2025 10:30:39.815512896 CET	80	49714	216.58.206.67	192.168.2.10
Mar 14, 2025 10:30:39.988116026 CET	443	49712	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.988197088 CET	443	49712	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:39.988390923 CET	49712	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.990128040 CET	49712	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:39.990156889 CET	443	49712	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:40.006067038 CET	49717	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:40.006097078 CET	443	49717	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:40.006203890 CET	49717	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:40.006320953 CET	49717	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:40.006334066 CET	443	49717	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:40.429014921 CET	80	49714	216.58.206.67	192.168.2.10
Mar 14, 2025 10:30:40.437422991 CET	49714	80	192.168.2.10	216.58.206.67
Mar 14, 2025 10:30:40.442209959 CET	80	49714	216.58.206.67	192.168.2.10
Mar 14, 2025 10:30:40.598036051 CET	443	49717	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:40.598103046 CET	49717	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:40.599889994 CET	49717	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:40.599900961 CET	443	49717	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:40.600145102 CET	443	49717	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:40.606530905 CET	49717	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:40.620608091 CET	80	49714	216.58.206.67	192.168.2.10
Mar 14, 2025 10:30:40.652322054 CET	443	49717	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:40.666965961 CET	49714	80	192.168.2.10	216.58.206.67
Mar 14, 2025 10:30:40.793154955 CET	443	49717	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:40.793246984 CET	443	49717	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:40.793296099 CET	49717	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:40.795694113 CET	49717	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:40.795712948 CET	443	49717	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:42.419550896 CET	49720	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:42.419603109 CET	443	49720	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:42.419670105 CET	49720	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:42.419852018 CET	49720	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:42.419866085 CET	443	49720	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:42.881095886 CET	443	49720	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:42.881176949 CET	49720	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:42.887861967 CET	49720	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:42.887883902 CET	443	49720	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:42.888276100 CET	443	49720	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:42.888997078 CET	49720	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:42.932331085 CET	443	49720	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:43.184025049 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 10:30:43.274743080 CET	443	49720	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:43.274816990 CET	443	49720	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:43.274871111 CET	49720	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:43.275646925 CET	49720	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:43.275671005 CET	443	49720	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:43.276514053 CET	49722	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:43.276561022 CET	443	49722	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:43.276671886 CET	49722	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:43.277060032 CET	49722	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:43.277076006 CET	443	49722	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:43.495656967 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 10:30:43.751200914 CET	443	49722	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:43.751456976 CET	49722	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:43.751476049 CET	443	49722	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:43.751612902 CET	49722	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:43.751620054 CET	443	49722	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:43.995661020 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 10:30:44.105009079 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 10:30:44.175709009 CET	443	49722	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:44.175865889 CET	443	49722	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:44.175932884 CET	49722	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:44.176384926 CET	49722	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:44.176404953 CET	443	49722	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:44.204699993 CET	49723	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:44.204744101 CET	443	49723	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:44.204930067 CET	49723	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:44.205079079 CET	49723	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:44.205087900 CET	443	49723	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:44.661957979 CET	443	49723	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:44.662050009 CET	49723	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:44.662983894 CET	49723	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:44.662997007 CET	443	49723	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:44.663239956 CET	443	49723	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:44.663578987 CET	49723	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:44.704339981 CET	443	49723	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:45.098810911 CET	443	49723	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:45.098925114 CET	443	49723	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:45.099076986 CET	49723	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:45.101509094 CET	49723	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:45.101526976 CET	443	49723	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:45.108247042 CET	49724	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.108284950 CET	443	49724	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.108350992 CET	49724	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.108511925 CET	49724	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.108524084 CET	443	49724	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.308845043 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 10:30:45.572156906 CET	443	49724	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.572241068 CET	49724	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.573673010 CET	49724	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.573688984 CET	443	49724	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.573956966 CET	443	49724	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.574354887 CET	49724	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.620326996 CET	443	49724	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.695755959 CET	443	49724	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.695830107 CET	443	49724	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.695894003 CET	49724	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.696187019 CET	49724	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.696208000 CET	443	49724	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.697026968 CET	49725	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.697072029 CET	443	49725	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:45.697290897 CET	49725	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.697388887 CET	49725	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:45.697401047 CET	443	49725	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:46.150985003 CET	443	49725	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:46.151366949 CET	49725	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:46.151381969 CET	443	49725	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:46.151614904 CET	49725	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:46.151619911 CET	443	49725	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:46.278595924 CET	443	49725	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:46.278675079 CET	443	49725	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:46.278769016 CET	49725	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:46.279150963 CET	49725	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:30:46.279174089 CET	443	49725	35.190.80.1	192.168.2.10
Mar 14, 2025 10:30:47.714148998 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 10:30:49.143502951 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:49.143554926 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:49.143722057 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:49.143980980 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:49.143996000 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:49.148511887 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:49.148564100 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:49.148678064 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:49.148863077 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:49.148871899 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:49.609873056 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:49.610171080 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:49.610824108 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:49.610852957 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:49.611088037 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:49.611108065 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:49.611304998 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:49.611311913 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.032641888 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.032695055 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.032742023 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.032743931 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.032758951 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.032804966 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.032813072 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.032896042 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.032936096 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.032946110 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.032959938 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.033153057 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.033195019 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.033488035 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.033531904 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.033540964 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.037215948 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.037334919 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.037343025 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.076849937 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.095813036 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.095860004 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.096263885 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.097523928 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.097568989 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.097754002 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.098017931 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.098037958 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.098131895 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.098145962 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.167224884 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.167299986 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.167360067 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.167401075 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.167407036 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.167423964 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.167434931 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.168297052 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.168334007 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.168338060 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.168345928 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.168379068 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.168389082 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.168397903 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.168421984 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.169214010 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.169250965 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.169272900 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.169275999 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.169286966 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.169322014 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.169949055 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.169997931 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.170000076 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.170007944 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.170052052 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.170088053 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.170099020 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.170135975 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.170711994 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.219664097 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.303313017 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.303392887 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.303425074 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.303458929 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.303463936 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.303483009 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.303498983 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.303529024 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.303572893 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.303608894 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.303617001 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.303653955 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.303714991 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.303782940 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.304410934 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.304450989 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.304478884 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.304486990 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.304500103 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.305444956 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.305484056 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.305507898 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.305516958 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.305543900 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.306267977 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.306318045 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.306320906 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.306330919 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.306371927 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.307110071 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.307189941 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.389499903 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.389600992 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.440162897 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.440237045 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.440654039 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.440697908 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.440737009 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.440748930 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.440772057 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.440882921 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.440922022 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.440942049 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.440951109 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.440985918 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.441011906 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.441034079 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.441039085 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.441086054 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.441802025 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.441854954 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.441858053 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.441874027 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.441898108 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.441901922 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.441917896 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.441926956 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.441965103 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.441992044 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.442475080 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.442527056 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.442642927 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.442679882 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.442699909 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.442709923 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.442733049 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.443417072 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.443463087 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.443466902 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.443478107 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.443519115 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.443525076 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.443535089 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.443566084 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.443568945 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.443576097 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.443624973 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.518037081 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.518114090 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.518132925 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.518173933 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.550334930 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.550405979 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.550947905 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.550964117 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.551626921 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.551909924 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.557204008 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.557322979 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.557670116 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.557682037 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.557924986 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.559797049 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.575329065 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.575386047 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.576939106 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577063084 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577104092 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.577115059 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577127934 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577151060 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.577157974 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577174902 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577182055 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.577214956 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.577222109 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577250957 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577259064 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.577270985 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577292919 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.577303886 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577342987 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.577349901 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.577388048 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.577969074 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.578018904 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.578088999 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.578145027 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.578274965 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.578310966 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.578399897 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.578444958 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.578454018 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.578500032 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.579075098 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.579096079 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.579166889 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.579174995 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.579237938 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.579243898 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.579256058 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.579286098 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.579313993 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.581789970 CET	49727	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.581806898 CET	443	49727	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.592341900 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.604331970 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.647759914 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648077011 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648123980 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648132086 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.648148060 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648180962 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648195982 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.648202896 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648246050 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.648250103 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648263931 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648315907 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648324013 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.648329973 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.648397923 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.648951054 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.655283928 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.655797005 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.655837059 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.655855894 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.655870914 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.655913115 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.655914068 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.655927896 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.655977964 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.655985117 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.656402111 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.656439066 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.656451941 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.660861969 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.660903931 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.660928011 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.660937071 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.660984039 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.663197041 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.663247108 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.663255930 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.670968056 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.714459896 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.714529037 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.734672070 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.734879971 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.734934092 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.734947920 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.734998941 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.735079050 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.735670090 CET	49729	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.735688925 CET	443	49729	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.743834019 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.743911982 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.743941069 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.743968964 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.743969917 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.743994951 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.744029045 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.744415045 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.744469881 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.744481087 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.744513988 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.744544983 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.744561911 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.744570971 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.744635105 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.744656086 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.744683027 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.745150089 CET	49728	443	192.168.2.10	151.101.129.229
Mar 14, 2025 10:30:50.745162010 CET	443	49728	151.101.129.229	192.168.2.10
Mar 14, 2025 10:30:50.823533058 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:50.823556900 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:50.907049894 CET	49730	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:50.907099962 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:50.907174110 CET	49730	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:50.907303095 CET	49730	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:50.907311916 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:50.909610987 CET	49731	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:50.909651995 CET	443	49731	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:50.909703016 CET	49731	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:50.909861088 CET	49731	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:50.909876108 CET	443	49731	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:50.916652918 CET	49733	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:50.916672945 CET	443	49733	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:50.916738033 CET	49733	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:50.916841030 CET	49733	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:50.916853905 CET	443	49733	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.328090906 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328146935 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328178883 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328193903 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.328205109 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328238010 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328262091 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.328272104 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328315973 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.328320980 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328495979 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328527927 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328541994 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.328551054 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.328598022 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.328603029 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.368856907 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.368866920 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.378256083 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:51.378534079 CET	49730	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:51.378554106 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:51.378714085 CET	49730	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:51.378719091 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:51.387221098 CET	443	49733	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.387293100 CET	49733	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:51.388343096 CET	49733	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:51.388350964 CET	443	49733	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.388598919 CET	443	49733	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.388845921 CET	49733	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:51.414160967 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.414206028 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.414222002 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.414237976 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.414278030 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.414283037 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.414315939 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.414355040 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.414758921 CET	49726	443	192.168.2.10	104.21.70.234
Mar 14, 2025 10:30:51.414783001 CET	443	49726	104.21.70.234	192.168.2.10
Mar 14, 2025 10:30:51.435720921 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:51.435764074 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:51.435820103 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:51.436101913 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:51.436117887 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:51.436312914 CET	443	49733	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.493700027 CET	443	49731	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:51.494091034 CET	49731	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:51.494110107 CET	443	49731	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:51.494245052 CET	49731	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:51.494250059 CET	443	49731	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:51.507766008 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:51.507843971 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:51.507921934 CET	49730	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:51.507936954 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:51.507951975 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:51.507993937 CET	49730	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:51.509351015 CET	49730	443	192.168.2.10	104.17.25.14
Mar 14, 2025 10:30:51.509367943 CET	443	49730	104.17.25.14	192.168.2.10
Mar 14, 2025 10:30:51.511581898 CET	443	49733	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.511645079 CET	443	49733	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.511696100 CET	49733	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:51.515891075 CET	49733	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:51.515897036 CET	443	49733	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.530472994 CET	49735	443	192.168.2.10	104.17.24.14
Mar 14, 2025 10:30:51.530523062 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:51.530601978 CET	49735	443	192.168.2.10	104.17.24.14
Mar 14, 2025 10:30:51.530766010 CET	49735	443	192.168.2.10	104.17.24.14
Mar 14, 2025 10:30:51.530776024 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:51.532434940 CET	49736	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:51.532471895 CET	443	49736	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.532541990 CET	49736	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:51.532705069 CET	49736	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:51.532721996 CET	443	49736	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:51.790728092 CET	443	49731	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:51.790802956 CET	443	49731	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:51.790877104 CET	49731	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:51.793009043 CET	49731	443	192.168.2.10	172.67.69.226
Mar 14, 2025 10:30:51.793024063 CET	443	49731	172.67.69.226	192.168.2.10
Mar 14, 2025 10:30:51.801234007 CET	49737	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:51.801281929 CET	443	49737	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:51.801394939 CET	49737	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:51.801528931 CET	49737	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:51.801539898 CET	443	49737	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:51.910753012 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:51.911096096 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:51.911109924 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:51.911254883 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:51.911258936 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:51.991291046 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:51.991379023 CET	49735	443	192.168.2.10	104.17.24.14
Mar 14, 2025 10:30:51.992618084 CET	49735	443	192.168.2.10	104.17.24.14
Mar 14, 2025 10:30:51.992630959 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:51.992872000 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:51.993381023 CET	49735	443	192.168.2.10	104.17.24.14
Mar 14, 2025 10:30:52.010092974 CET	443	49736	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:52.010212898 CET	49736	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:52.010750055 CET	49736	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:52.010762930 CET	443	49736	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:52.010987043 CET	443	49736	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:52.011245012 CET	49736	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:52.040318012 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:52.056330919 CET	443	49736	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:52.064666986 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.064726114 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.064758062 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.064783096 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.064790010 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.064801931 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.064846992 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.064860106 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.064873934 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.064903021 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.065077066 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.065104961 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.065129042 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.065136909 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.065181971 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.069207907 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.121073961 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.121098042 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.132441044 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:52.132488966 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:52.132550001 CET	49735	443	192.168.2.10	104.17.24.14
Mar 14, 2025 10:30:52.132564068 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:52.132595062 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:52.132721901 CET	49735	443	192.168.2.10	104.17.24.14
Mar 14, 2025 10:30:52.144241095 CET	443	49736	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:52.144330025 CET	443	49736	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:52.144464016 CET	49736	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:52.155045986 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.155080080 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.155117035 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.155145884 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.155160904 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.155183077 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.155213118 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.155241966 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.248330116 CET	49734	443	192.168.2.10	172.67.168.191
Mar 14, 2025 10:30:52.248358011 CET	443	49734	172.67.168.191	192.168.2.10
Mar 14, 2025 10:30:52.378046036 CET	443	49737	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:52.431639910 CET	49737	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:52.431665897 CET	443	49737	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:52.431797028 CET	49737	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:52.431802034 CET	443	49737	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:52.528462887 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 10:30:52.628612995 CET	49735	443	192.168.2.10	104.17.24.14
Mar 14, 2025 10:30:52.628648996 CET	443	49735	104.17.24.14	192.168.2.10
Mar 14, 2025 10:30:52.629045010 CET	49736	443	192.168.2.10	34.117.59.81
Mar 14, 2025 10:30:52.629092932 CET	443	49736	34.117.59.81	192.168.2.10
Mar 14, 2025 10:30:52.629741907 CET	443	49737	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:52.629833937 CET	443	49737	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:52.629924059 CET	49737	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:52.703501940 CET	49737	443	192.168.2.10	104.26.8.44
Mar 14, 2025 10:30:52.703527927 CET	443	49737	104.26.8.44	192.168.2.10
Mar 14, 2025 10:30:53.605509043 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 10:30:53.906326056 CET	49739	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:53.906382084 CET	443	49739	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:53.906713963 CET	49739	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:53.906900883 CET	49739	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:53.906912088 CET	443	49739	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:54.363060951 CET	443	49739	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:54.367187023 CET	49739	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:54.367214918 CET	443	49739	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:54.367506981 CET	49739	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:54.367513895 CET	443	49739	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:54.777311087 CET	443	49739	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:54.777381897 CET	443	49739	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:54.777554989 CET	49739	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:54.778523922 CET	49739	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:54.778542995 CET	443	49739	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:54.780488014 CET	49740	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:54.780529022 CET	443	49740	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:54.780622005 CET	49740	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:54.780881882 CET	49740	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:54.780898094 CET	443	49740	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:55.243542910 CET	443	49740	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:55.243948936 CET	49740	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:55.243964911 CET	443	49740	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:55.244172096 CET	49740	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:55.244177103 CET	443	49740	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:55.682631016 CET	443	49740	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:55.682759047 CET	443	49740	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:55.682838917 CET	49740	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:55.683434963 CET	49740	443	192.168.2.10	104.21.48.1
Mar 14, 2025 10:30:55.683453083 CET	443	49740	104.21.48.1	192.168.2.10
Mar 14, 2025 10:30:55.687866926 CET	49741	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:55.687901020 CET	443	49741	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:55.687995911 CET	49741	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:55.688256025 CET	49741	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:55.688268900 CET	443	49741	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:56.161911964 CET	443	49741	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:56.162348032 CET	49741	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:56.162370920 CET	443	49741	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:56.162574053 CET	49741	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:56.162580967 CET	443	49741	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:56.574099064 CET	443	49741	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:56.574417114 CET	443	49741	104.21.112.1	192.168.2.10
Mar 14, 2025 10:30:56.574517012 CET	49741	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:56.576086044 CET	49741	443	192.168.2.10	104.21.112.1
Mar 14, 2025 10:30:56.576107979 CET	443	49741	104.21.112.1	192.168.2.10
Mar 14, 2025 10:31:02.135715961 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 10:31:23.003767014 CET	65298	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:31:23.008445978 CET	53	65298	1.1.1.1	192.168.2.10
Mar 14, 2025 10:31:23.008589029 CET	65298	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:31:23.013369083 CET	53	65298	1.1.1.1	192.168.2.10
Mar 14, 2025 10:31:23.453480959 CET	65298	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:31:23.458400965 CET	53	65298	1.1.1.1	192.168.2.10
Mar 14, 2025 10:31:23.458482027 CET	65298	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:31:25.809815884 CET	65301	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:31:25.809868097 CET	443	65301	142.250.186.164	192.168.2.10
Mar 14, 2025 10:31:25.809973001 CET	65301	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:31:25.810177088 CET	65301	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:31:25.810198069 CET	443	65301	142.250.186.164	192.168.2.10
Mar 14, 2025 10:31:26.447556019 CET	443	65301	142.250.186.164	192.168.2.10
Mar 14, 2025 10:31:26.448131084 CET	65301	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:31:26.448160887 CET	443	65301	142.250.186.164	192.168.2.10
Mar 14, 2025 10:31:36.358215094 CET	443	65301	142.250.186.164	192.168.2.10
Mar 14, 2025 10:31:36.358274937 CET	443	65301	142.250.186.164	192.168.2.10
Mar 14, 2025 10:31:36.358488083 CET	65301	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:31:37.718012094 CET	65301	443	192.168.2.10	142.250.186.164
Mar 14, 2025 10:31:37.718084097 CET	443	65301	142.250.186.164	192.168.2.10
Mar 14, 2025 10:31:41.168276072 CET	49714	80	192.168.2.10	216.58.206.67
Mar 14, 2025 10:31:41.173285007 CET	80	49714	216.58.206.67	192.168.2.10
Mar 14, 2025 10:31:41.173347950 CET	49714	80	192.168.2.10	216.58.206.67
Mar 14, 2025 10:31:45.106700897 CET	65309	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.106758118 CET	443	65309	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:45.106934071 CET	65309	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.107156992 CET	65309	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.107186079 CET	443	65309	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:45.570868969 CET	443	65309	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:45.571403027 CET	65309	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.571430922 CET	443	65309	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:45.571604013 CET	65309	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.571618080 CET	443	65309	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:45.697715998 CET	443	65309	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:45.697791100 CET	443	65309	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:45.697869062 CET	65309	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.698255062 CET	65309	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.698286057 CET	443	65309	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:45.699079037 CET	65310	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.699115038 CET	443	65310	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:45.699203968 CET	65310	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.699465990 CET	65310	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:45.699476004 CET	443	65310	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:46.152618885 CET	443	65310	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:46.153043985 CET	65310	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:46.153064966 CET	443	65310	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:46.153235912 CET	65310	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:46.153242111 CET	443	65310	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:46.282077074 CET	443	65310	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:46.282145977 CET	443	65310	35.190.80.1	192.168.2.10
Mar 14, 2025 10:31:46.282233000 CET	65310	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:46.282515049 CET	65310	443	192.168.2.10	35.190.80.1
Mar 14, 2025 10:31:46.282538891 CET	443	65310	35.190.80.1	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:30:21.301805973 CET	53	63820	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:21.673675060 CET	53	54669	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:23.554393053 CET	53	55594	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:25.746248007 CET	58956	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:25.746459961 CET	58711	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:25.752986908 CET	53	58956	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:25.753770113 CET	53	58711	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:27.055118084 CET	64207	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:27.055250883 CET	50994	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:27.064786911 CET	53	64207	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:27.067303896 CET	53	50994	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:27.092025995 CET	61615	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:27.092160940 CET	55069	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:27.101699114 CET	53	61615	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:27.142239094 CET	53	55069	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:36.234323025 CET	49951	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:36.234620094 CET	64558	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:36.235081911 CET	58936	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:36.235244036 CET	55773	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:36.235690117 CET	63446	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:36.235856056 CET	65327	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:36.242312908 CET	53	49951	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:36.242454052 CET	53	64558	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:36.242820024 CET	53	58936	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:36.242928982 CET	53	55773	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:36.243158102 CET	53	63446	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:36.243189096 CET	53	65327	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:37.207725048 CET	52789	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:37.208029985 CET	52516	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:37.216218948 CET	53	52516	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:37.217797041 CET	53	52789	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:37.959803104 CET	54271	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:37.959804058 CET	65127	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:37.969305038 CET	53	54271	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:37.971282005 CET	53	65127	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:38.392757893 CET	60442	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:38.392930984 CET	54043	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:38.399279118 CET	53	60442	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:38.399806023 CET	53	54043	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:39.996128082 CET	64075	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:39.996265888 CET	50573	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:40.002646923 CET	53	64075	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:40.005579948 CET	53	50573	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:40.693015099 CET	53	49495	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:42.406879902 CET	54197	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:42.407078981 CET	65187	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:42.416719913 CET	53	65187	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:42.418956995 CET	53	54197	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:44.180082083 CET	60555	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:44.180428028 CET	57108	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:44.200815916 CET	53	57108	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:44.204159021 CET	53	60555	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:45.100756884 CET	63661	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:45.100925922 CET	58316	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:45.107356071 CET	53	63661	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:45.107737064 CET	53	58316	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:50.908690929 CET	58611	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:50.909008980 CET	64093	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:50.914736032 CET	53	49550	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:50.915831089 CET	53	64093	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:50.916290998 CET	53	58611	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:51.519949913 CET	52575	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:51.520160913 CET	56173	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:51.521543026 CET	61389	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:51.521823883 CET	61651	53	192.168.2.10	1.1.1.1
Mar 14, 2025 10:30:51.529654026 CET	53	52575	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:51.529961109 CET	53	56173	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:51.531013012 CET	53	61389	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:51.531965017 CET	53	61651	1.1.1.1	192.168.2.10
Mar 14, 2025 10:30:59.394860029 CET	53	64056	1.1.1.1	192.168.2.10
Mar 14, 2025 10:31:21.024049997 CET	53	49402	1.1.1.1	192.168.2.10
Mar 14, 2025 10:31:22.239360094 CET	53	54475	1.1.1.1	192.168.2.10
Mar 14, 2025 10:31:23.003268957 CET	53	58546	1.1.1.1	192.168.2.10
Mar 14, 2025 10:31:24.536284924 CET	53	53392	1.1.1.1	192.168.2.10
Mar 14, 2025 10:31:41.836188078 CET	138	138	192.168.2.10	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 14, 2025 10:30:27.142424107 CET	192.168.2.10	1.1.1.1	c29c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 10:30:25.746248007 CET	192.168.2.10	1.1.1.1	0xf6a4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:25.746459961 CET	192.168.2.10	1.1.1.1	0x1472	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 10:30:27.055118084 CET	192.168.2.10	1.1.1.1	0x2142	Standard query (0)	case-id-1000228254452.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:27.055250883 CET	192.168.2.10	1.1.1.1	0x49e2	Standard query (0)	case-id-1000228254452.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:30:27.092025995 CET	192.168.2.10	1.1.1.1	0x5f56	Standard query (0)	case-id-1000228254452.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:27.092160940 CET	192.168.2.10	1.1.1.1	0x961d	Standard query (0)	case-id-1000228254452.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:30:36.234323025 CET	192.168.2.10	1.1.1.1	0x531f	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.234620094 CET	192.168.2.10	1.1.1.1	0x6167	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 14, 2025 10:30:36.235081911 CET	192.168.2.10	1.1.1.1	0x6cf3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.235244036 CET	192.168.2.10	1.1.1.1	0x4458	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 14, 2025 10:30:36.235690117 CET	192.168.2.10	1.1.1.1	0xdf4d	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.235856056 CET	192.168.2.10	1.1.1.1	0x7053	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:30:37.207725048 CET	192.168.2.10	1.1.1.1	0x45bc	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:37.208029985 CET	192.168.2.10	1.1.1.1	0xe066	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Mar 14, 2025 10:30:37.959803104 CET	192.168.2.10	1.1.1.1	0xe1bc	Standard query (0)	case-id-1000228254452.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:37.959804058 CET	192.168.2.10	1.1.1.1	0x84e9	Standard query (0)	case-id-1000228254452.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:30:38.392757893 CET	192.168.2.10	1.1.1.1	0x300a	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:38.392930984 CET	192.168.2.10	1.1.1.1	0x9c76	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:30:39.996128082 CET	192.168.2.10	1.1.1.1	0x69a3	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:39.996265888 CET	192.168.2.10	1.1.1.1	0x112e	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:30:42.406879902 CET	192.168.2.10	1.1.1.1	0x8e25	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:42.407078981 CET	192.168.2.10	1.1.1.1	0x7c91	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:30:44.180082083 CET	192.168.2.10	1.1.1.1	0x226a	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:44.180428028 CET	192.168.2.10	1.1.1.1	0xdfb3	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:30:45.100756884 CET	192.168.2.10	1.1.1.1	0x382f	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:45.100925922 CET	192.168.2.10	1.1.1.1	0x4d08	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:30:50.908690929 CET	192.168.2.10	1.1.1.1	0xe5be	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:50.909008980 CET	192.168.2.10	1.1.1.1	0x1fe4	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 14, 2025 10:30:51.519949913 CET	192.168.2.10	1.1.1.1	0xf1cf	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:51.520160913 CET	192.168.2.10	1.1.1.1	0x768	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:30:51.521543026 CET	192.168.2.10	1.1.1.1	0x4248	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:51.521823883 CET	192.168.2.10	1.1.1.1	0xa44d	Standard query (0)	ipinfo.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 10:30:25.752986908 CET	1.1.1.1	192.168.2.10	0xf6a4	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:25.753770113 CET	1.1.1.1	192.168.2.10	0x1472	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 10:30:27.064786911 CET	1.1.1.1	192.168.2.10	0x2142	No error (0)	case-id-1000228254452.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:27.064786911 CET	1.1.1.1	192.168.2.10	0x2142	No error (0)	case-id-1000228254452.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:27.067303896 CET	1.1.1.1	192.168.2.10	0x49e2	No error (0)	case-id-1000228254452.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:30:27.101699114 CET	1.1.1.1	192.168.2.10	0x5f56	No error (0)	case-id-1000228254452.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:27.101699114 CET	1.1.1.1	192.168.2.10	0x5f56	No error (0)	case-id-1000228254452.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:27.142239094 CET	1.1.1.1	192.168.2.10	0x961d	No error (0)	case-id-1000228254452.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:30:36.242312908 CET	1.1.1.1	192.168.2.10	0x531f	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:30:36.242312908 CET	1.1.1.1	192.168.2.10	0x531f	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.242312908 CET	1.1.1.1	192.168.2.10	0x531f	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.242312908 CET	1.1.1.1	192.168.2.10	0x531f	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.242312908 CET	1.1.1.1	192.168.2.10	0x531f	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.242454052 CET	1.1.1.1	192.168.2.10	0x6167	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:30:36.242820024 CET	1.1.1.1	192.168.2.10	0x6cf3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.242820024 CET	1.1.1.1	192.168.2.10	0x6cf3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.242820024 CET	1.1.1.1	192.168.2.10	0x6cf3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.242820024 CET	1.1.1.1	192.168.2.10	0x6cf3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.243158102 CET	1.1.1.1	192.168.2.10	0xdf4d	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.243158102 CET	1.1.1.1	192.168.2.10	0xdf4d	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:36.243189096 CET	1.1.1.1	192.168.2.10	0x7053	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 10:30:37.216218948 CET	1.1.1.1	192.168.2.10	0xe066	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:30:37.216218948 CET	1.1.1.1	192.168.2.10	0xe066	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:30:37.216218948 CET	1.1.1.1	192.168.2.10	0xe066	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:30:37.217797041 CET	1.1.1.1	192.168.2.10	0x45bc	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:30:37.217797041 CET	1.1.1.1	192.168.2.10	0x45bc	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:37.969305038 CET	1.1.1.1	192.168.2.10	0xe1bc	No error (0)	case-id-1000228254452.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:37.969305038 CET	1.1.1.1	192.168.2.10	0xe1bc	No error (0)	case-id-1000228254452.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:37.971282005 CET	1.1.1.1	192.168.2.10	0x84e9	No error (0)	case-id-1000228254452.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:30:38.399279118 CET	1.1.1.1	192.168.2.10	0x300a	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:38.399279118 CET	1.1.1.1	192.168.2.10	0x300a	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:38.399279118 CET	1.1.1.1	192.168.2.10	0x300a	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:38.399806023 CET	1.1.1.1	192.168.2.10	0x9c76	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:30:40.002646923 CET	1.1.1.1	192.168.2.10	0x69a3	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:40.002646923 CET	1.1.1.1	192.168.2.10	0x69a3	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:40.002646923 CET	1.1.1.1	192.168.2.10	0x69a3	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:40.005579948 CET	1.1.1.1	192.168.2.10	0x112e	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:30:42.416719913 CET	1.1.1.1	192.168.2.10	0x7c91	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:30:42.418956995 CET	1.1.1.1	192.168.2.10	0x8e25	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:42.418956995 CET	1.1.1.1	192.168.2.10	0x8e25	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:42.418956995 CET	1.1.1.1	192.168.2.10	0x8e25	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:42.418956995 CET	1.1.1.1	192.168.2.10	0x8e25	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:42.418956995 CET	1.1.1.1	192.168.2.10	0x8e25	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:42.418956995 CET	1.1.1.1	192.168.2.10	0x8e25	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:42.418956995 CET	1.1.1.1	192.168.2.10	0x8e25	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:44.200815916 CET	1.1.1.1	192.168.2.10	0xdfb3	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:30:44.204159021 CET	1.1.1.1	192.168.2.10	0x226a	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:44.204159021 CET	1.1.1.1	192.168.2.10	0x226a	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:44.204159021 CET	1.1.1.1	192.168.2.10	0x226a	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:44.204159021 CET	1.1.1.1	192.168.2.10	0x226a	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:44.204159021 CET	1.1.1.1	192.168.2.10	0x226a	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:44.204159021 CET	1.1.1.1	192.168.2.10	0x226a	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:44.204159021 CET	1.1.1.1	192.168.2.10	0x226a	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:45.107356071 CET	1.1.1.1	192.168.2.10	0x382f	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:50.916290998 CET	1.1.1.1	192.168.2.10	0xe5be	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:51.529654026 CET	1.1.1.1	192.168.2.10	0xf1cf	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:51.529654026 CET	1.1.1.1	192.168.2.10	0xf1cf	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:30:51.529961109 CET	1.1.1.1	192.168.2.10	0x768	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 10:30:51.531013012 CET	1.1.1.1	192.168.2.10	0x4248	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

case-id-1000228254452.counselschambers.co.uk

cdn.jsdelivr.net

cdnjs.cloudflare.com

code.jquery.com

static.xx.fbcdn.net

ipapi.co

pickoutsourcing.com

ipinfo.io

www.google.com

a.nel.cloudflare.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.10	49714	216.58.206.67	80

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:30:39.810894012 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 14, 2025 10:30:40.429014921 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 09:03:33 GMT Expires: Fri, 14 Mar 2025 09:53:33 GMT Age: 1627 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 14, 2025 10:30:40.437422991 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 14, 2025 10:30:40.620608091 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 09:03:52 GMT Expires: Fri, 14 Mar 2025 09:53:52 GMT Age: 1608 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49692	104.21.70.234	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:27 UTC	694	OUT	GET / HTTP/1.1 Host: case-id-1000228254452.counselschambers.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49691	142.250.186.164	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:28 UTC	599	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlqHLAQiKo8sBCIWgzQEI/aXOAQiA1s4BCMnczgEI4ODOAQjl484BCK/kzgEIyOTOAQjf5M4BCObkzgEIi+XOAQiO5c4B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:28 UTC	1348	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:28 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Gcn94TZXP4uyoCtWhP2PYg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Document-Policy: expect-no-linked-resources Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 09:30:28 UTC	42	IN	Data Raw: 33 37 63 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 61 72 65 20 65 67 67 20 70 72 69 63 65 73 20 67 6f 69 6e 67 20 64 6f 77 6e 22 Data Ascii: 37c)]}'["",["are egg prices going down"
2025-03-14 09:30:28 UTC	857	IN	Data Raw: 2c 22 78 62 6f 78 20 67 61 6d 65 20 70 61 73 73 20 6d 6c 62 20 74 68 65 20 73 68 6f 77 20 32 35 22 2c 22 77 77 65 20 32 6b 32 35 20 6c 6f 63 6b 65 72 20 63 6f 64 65 73 22 2c 22 69 72 73 20 75 6e 63 6c 61 69 6d 65 64 20 74 61 78 20 72 65 66 75 6e 64 73 22 2c 22 6d 6f 6e 73 74 65 72 20 68 75 6e 74 65 72 20 77 69 6c 64 73 20 63 72 61 73 68 69 6e 67 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 61 6e 64 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 6d 61 6b 65 20 65 78 63 69 74 65 64 20 6e 79 74 20 63 72 6f 73 73 77 6f 72 64 20 63 6c 75 65 22 2c 22 61 74 6c 61 6e 74 69 63 20 31 30 20 62 61 73 6b 65 74 62 61 6c 6c 20 74 6f 75 72 6e 61 6d 65 6e 74 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 Data Ascii: ,"xbox game pass mlb the show 25","wwe 2k25 locker codes","irs unclaimed tax refunds","monster hunter wilds crashing","weather storms and tornadoes","make excited nyt crossword clue","atlantic 10 basketball tournament"],["","","","","","","",""],[],{"goog
2025-03-14 09:30:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49693	104.21.70.234	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:30 UTC	694	OUT	GET / HTTP/1.1 Host: case-id-1000228254452.counselschambers.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:35 UTC	888	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 12 Feb 2025 14:20:05 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iisN9GMuNUpRAMGyM9U%2BYe6tR3qdyB9iNjJKwaCvYD43zWTOnkY6O518k40Iq0CB3ND9hdV2iPR6S%2BJ4jZEV2ebEP8YOpqUIbVLxKne%2B6L5RAz1fVZBejAIOpg%2FeIvbH93YzpwomIOdWKuoFMSaqR814s5hQ%2BFN5S8n1OGCSgw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c0b55fc917ad-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1501&min_rtt=1493&rtt_var=577&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1266&delivery_rate=1869398&cwnd=188&unsent_bytes=0&cid=1bc0859eced5264c&ts=4614&x=0"
2025-03-14 09:30:35 UTC	186	IN	Data Raw: 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 76 69 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 65 6c 70 2e 68 74 6d 6c 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: b4<!DOCTYPE html><html lang="vi"><head> <meta charset="UTF-8"> <script> window.location.href = "help.html"; </script></head><body></body></html>
2025-03-14 09:30:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49694	104.21.70.234	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:35 UTC	754	OUT	GET /help.html HTTP/1.1 Host: case-id-1000228254452.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:36 UTC	881	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:36 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:38:16 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2PgOhzSWBaR2GP8WB2KQfKdJMatcDvvOu5xzmMWofYTGjFksMQLJtuHuJjcAO7fJbQBcFSiIAk8VG4qZgmeXDl3FBJUZV5ryPykdXMhiYyLnr4gejtj2StvSUgzC08Xl0Iami%2Fo4oIdsTnZhYyShCxw%2BVbPMI7g1IY5oW8Wmng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c0d57ce243c9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1595&min_rtt=1594&rtt_var=601&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1326&delivery_rate=1814791&cwnd=188&unsent_bytes=0&cid=98568c6700bd6540&ts=414&x=0"
2025-03-14 09:30:36 UTC	488	IN	Data Raw: 33 37 64 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 71 49 6b Data Ascii: 37d0<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCFqIk
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 6a 38 44 33 53 4a 38 4a 52 41 53 65 78 4a 52 35 6d 32 67 4f 51 6e 2f 2f 45 54 68 30 53 6f 4a 77 30 74 63 75 62 35 66 6c 4a 37 50 35 6a 41 57 41 74 2b 43 4b 6c 41 42 39 6f 4f 77 45 6c 35 53 35 36 54 6e 67 78 4d 49 6e 41 45 66 51 2b 49 63 51 6b 65 73 77 78 74 51 59 65 74 6e 78 4c 55 35 76 49 52 71 72 30 53 56 51 48 35 65 72 42 61 4c 2b 77 37 77 70 59 55 41 69 43 79 64 55 45 44 4c 62 74 49 68 38 47 4f 43 34 47 33 67 63 64 58 58 6c 64 4f 38 46 61 46 48 5a 58 41 56 64 32 6e 58 56 76 4b 47 32 69 45 68 49 4d 46 77 6b 41 74 67 5a 70 49 64 61 70 38 70 75 4b 51 4e 33 44 4b 42 51 50 4d 72 57 49 51 43 49 6f 78 5a 77 41 63 53 33 68 41 53 43 79 41 51 56 67 55 38 65 54 37 68 4b 66 41 4c 32 68 54 6b 34 4a 4a 65 79 4d 79 6c 4a 41 56 52 46 39 56 47 47 68 51 42 5a 72 75 6c Data Ascii: j8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMylJAVRF9VGGhQBZrul
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 67 4c 65 42 4f 45 50 77 4e 63 35 4b 44 51 50 71 2b 72 41 6e 68 66 45 50 72 36 6e 6a 47 39 34 6e 49 32 6d 61 74 36 36 47 36 30 65 70 64 4a 41 45 53 59 68 59 51 50 47 6b 77 75 4a 67 6a 57 43 76 61 43 58 65 43 50 42 4f 47 44 34 44 35 79 57 41 69 66 69 66 43 2f 6a 62 63 4f 4d 79 37 51 4c 53 43 41 4d 36 6e 76 6c 4c 36 78 2f 77 32 71 47 76 77 51 41 73 4e 6f 49 61 45 49 2b 49 45 6d 5a 7a 63 50 69 42 52 35 69 56 49 73 68 4a 2b 44 32 52 2f 51 6a 4e 6e 6e 39 68 46 55 33 69 4d 46 51 4c 2f 67 4d 77 6f 43 78 67 34 4a 39 4c 68 45 6a 62 6d 76 33 65 43 6e 46 41 52 32 30 6e 55 57 5a 76 34 70 68 49 2b 4f 74 34 39 42 52 57 39 63 6f 47 6f 77 4c 75 41 4e 67 54 44 54 41 6f 6e 4a 36 75 4b 63 42 5a 6f 64 43 4f 77 42 47 71 47 75 58 36 4c 7a 4f 62 52 4f 46 41 67 71 4e 77 54 63 47 Data Ascii: gLeBOEPwNc5KDQPq+rAnhfEPr6njG94nI2mat66G60epdJAESYhYQPGkwuJgjWCvaCXeCPBOGD4D5yWAififC/jbcOMy7QLSCAM6nvlL6x/w2qGvwQAsNoIaEI+IEmZzcPiBR5iVIshJ+D2R/QjNnn9hFU3iMFQL/gMwoCxg4J9LhEjbmv3eCnFAR20nUWZv4phI+Ot49BRW9coGowLuANgTDTAonJ6uKcBZodCOwBGqGuX6LzObROFAgqNwTcG
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 73 6f 72 3a 20 77 61 69 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 Data Ascii: sor: wait; overflow: hidden; border-radius: inherit; opacity: 0; z-index: 999; } .ns-block-ui .ns-block-ui-container .ns-block-ui-overlay { wi
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 42 33 42 33 42 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 63 6f 6e 74 61 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 73 74 72 65 74 63 68 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: color: #3B3B3B; } .ns-block-ui.contain { width: fit-content; height: fit-content; } .ns-block-ui.stretch { width: 100%;
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 32 61 31 37 63 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 20 43 53 53 20 41 6e 69 6d 61 74 69 6f Data Ascii: } .loading-indicator { text-align: center; } .loading-bullet { display: inline-block; opacity: 0; font-size: 2em; color: #02a17c; } /* CSS Animatio
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 32 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 Data Ascii: ; transform: translateX(0px); } 60% { opacity: 1; } 80% { opacity: 0; } } @-webkit-keyframes fadeInRTL2 { 0% {
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 32 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 Data Ascii: } 20% { opacity: 0; -webkit-transform: translateX(20px); transform: translateX(20px); } 50% { opacity: 1; -webkit-transform: tra
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 2b 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 2b 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 52 54 4c 33 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 52 54 4c 33 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 74 72 61 6e Data Ascii: } .loading-bullet + .loading-bullet + .loading-bullet { -webkit-animation-name: fadeInRTL3; animation-name: fadeInRTL3; } </style> <style> .--savior-overlay-tran
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 4f 76 65 72 72 69 64 65 20 63 73 73 20 73 74 79 6c 65 73 20 66 6f 72 20 54 77 69 74 63 68 2e 74 76 2a 2f 0a 20 20 20 20 20 20 20 20 6d 61 69 6e 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 72 65 73 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6d 6f 64 61 6c 5f 5f 62 61 63 6b 64 72 6f 70 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 72 65 73 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 Data Ascii: : absolute; top: 0; } /Override css styles for Twitch.tv/ main.--savior-overlay-z-index-reset { z-index: auto !important; } .modal__backdrop.--savior-overlay-z-index-reset { p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49695	104.21.70.234	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:36 UTC	621	OUT	GET /index-5b6c678b.css HTTP/1.1 Host: case-id-1000228254452.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://case-id-1000228254452.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:36 UTC	936	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:36 GMT Content-Type: text/css Content-Length: 13511 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:46 GMT etag: "34c7-62ddf0fd25ec2" Accept-Ranges: bytes Cache-Control: max-age=14400 cf-cache-status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ew%2BhYxjn9hL4bEjRptHRuGzBIDbZYoDJxAWPvKpJhMVY8twmyYbGVWd6hwLMZpR4o8gc0VAJKlFGaCN11b9m46qNUdWKF%2Fruh7KVep2GHASOSfkIDUyopDZgdPfRRq0v2AlGhRkiOPwvt16BLVjvaKEetwYKQRrIR0mMupJzcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c0d8ceef7b0b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2479&min_rtt=2474&rtt_var=939&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1193&delivery_rate=1159190&cwnd=68&unsent_bytes=0&cid=15e80a0c19d15bb7&ts=960&x=0"
2025-03-14 09:30:36 UTC	433	IN	Data Raw: 2e 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 65 6d 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 66 69 6c 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 7d 2e 6c 6f 67 6f 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 34 36 63 66 66 61 61 29 7d 2e 6c 6f 67 6f 2e 72 65 61 63 74 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 31 64 61 66 62 61 61 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 67 6f 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 Data Ascii: .logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-re
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 62 61 6e 6e 65 72 2d 62 31 34 38 32 64 34 63 2e 77 65 62 70 29 7d 2e 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 34 33 37 36 30 62 33 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 35 30 70 78 20 30 3b 68 65 69 67 68 74 3a 31 30 30 Data Ascii: background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;height:100
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 69 64 74 68 3a 34 30 76 77 7d 2e 70 72 6f 67 72 65 73 73 7b 68 65 69 67 68 74 3a 35 70 78 7d 2e 72 65 71 75 69 65 64 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 34 38 34 38 34 38 61 62 7d 2e 62 6f 64 79 20 2e 77 72 61 70 2d 74 69 74 6c 65 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 31 63 31 62 31 62 64 39 7d 69 6e 70 75 74 23 74 78 74 5f 74 65 6c 6c 2c 69 6e 70 75 74 23 74 78 74 5f 69 73 73 75 65 2c 69 6e 70 75 74 23 65 6d 61 69 6c 2c 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 35 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 3a 36 70 78 Data Ascii: idth:40vw}.progress{height:5px}.requied-text{font-size:16px;color:#484848ab}.body .wrap-title p{font-size:14px;color:#1c1b1bd9}input#txt_tell,input#txt_issue,input#email,input.form-control{height:50px!important}.react-international-phone-input{padding:6px
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 68 33 2e 68 33 2d 63 6f 6e 66 69 67 7b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 62 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 69 63 6f 6e 46 62 2d 6b 65 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 Data Ascii: tant;font-size:16px!important;line-height:19px;color:#000!important;font-weight:500!important;margin-bottom:8px!important}h3.h3-config{color:#000000bf;font-size:16px;font-weight:700;margin-bottom:10px;margin-top:20px}.iconFb-key{background-image:url(https
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 69 6e 76 65 72 74 28 35 39 25 29 20 73 65 70 69 61 28 31 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 33 35 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 36 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 36 25 29 20 63 6f 6e 74 72 61 73 74 28 39 34 25 29 7d 2e 74 65 78 74 2d 63 61 72 64 2d 63 75 73 74 6f 6d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 30 36 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e Data Ascii: peat:no-repeat;display:inline-block;-webkit-filter:invert(59%) sepia(11%) saturate(200%) saturate(135%) hue-rotate(176deg) brightness(96%) contrast(94%)}.text-card-custom{font-family:inherit!important;font-weight:400!important;font-size:1.0625rem!importan
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 7b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 5f 5f 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e Data Ascii: ternational-phone-country-selector-button--hide-dropdown{cursor:auto}.react-international-phone-country-selector-button--hide-dropdown:hover{background-color:transparent}.react-international-phone-country-selector-button__button-content{display:flex;align
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 73 61 62 6c 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 77 68 69 74 65 73 6d 6f 6b 65 29 29 3b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 62 61 63 6b Data Ascii: sabled-background-color, whitesmoke));cursor:auto}.react-international-phone-country-selector-button--disabled:hover{background-color:var(--react-international-phone-disabled-country-selector-background-color, var(--react-international-phone-disabled-back
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 66 6c 61 67 2d 65 6d 6f 6a 69 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 31 34 70 78 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 Data Ascii: pdown__list-item-flag-emoji{margin-right:8px}.react-international-phone-country-selector-dropdown__list-item-country-name{margin-right:8px;font-size:var(--react-international-phone-dropdown-item-font-size, 14px)}.react-international-phone-country-selector
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 73 65 6c 65 63 74 65 64 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 67 72 61 79 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 66 6f 63 75 73 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e Data Ascii: var(--react-international-phone-selected-dropdown-item-dial-code-color, var(--react-international-phone-dropdown-item-dial-code-color, gray))}.react-international-phone-country-selector-dropdown__list-item--focused{background-color:var(--react-internation
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 23 36 36 36 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 20 34 70 78 29 3b 6d 61 72 67 69 Data Ascii: phone-disabled-text-color, #666))}.react-international-phone-input-container{display:flex}.react-international-phone-input-container .react-international-phone-country-selector-button{border-radius:var(--react-international-phone-border-radius, 4px);margi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49697	151.101.129.229	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:36 UTC	670	OUT	GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228254452.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:36 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 232914 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.3.0 X-JSD-Version-Type: version ETag: W/"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y" Accept-Ranges: bytes Age: 2704864 Date: Fri, 14 Mar 2025 09:30:36 GMT X-Served-By: cache-fra-eddf8230088-FRA, cache-ewr-kewr1740071-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.0 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 73 75 62 74 6c 65 3a 23 65 32 65 33 65 35 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 67 2d 73 75 62 74 6c 65 3a 23 64 31 65 37 64 64 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 3a 23 63 66 66 34 66 63 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 66 66 33 63 64 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 38 64 37 64 61 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 63 66 63 66 64 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 67 2d 73 75 62 74 6c 65 3a 23 63 65 64 34 64 61 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 39 65 63 35 66 65 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 Data Ascii: subtle:#e2e3e5;--bs-success-bg-subtle:#d1e7dd;--bs-info-bg-subtle:#cff4fc;--bs-warning-bg-subtle:#fff3cd;--bs-danger-bg-subtle:#f8d7da;--bs-light-bg-subtle:#fcfcfd;--bs-dark-bg-subtle:#ced4da;--bs-primary-border-subtle:#9ec5fe;--bs-secondary-border-subtle
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 6c 6f 72 2d 72 67 62 3a 33 33 2c 33 37 2c 34 31 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 32 34 38 2c 32 34 39 2c 32 35 30 3b 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 33 2c 31 31 30 2c 32 35 33 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 30 61 35 38 63 61 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 30 2c 38 38 2c 32 30 32 3b 2d Data Ascii: lor-rgb:33,37,41;--bs-tertiary-bg:#f8f9fa;--bs-tertiary-bg-rgb:248,249,250;--bs-heading-color:inherit;--bs-link-color:#0d6efd;--bs-link-color-rgb:13,110,253;--bs-link-decoration:underline;--bs-link-hover-color:#0a58ca;--bs-link-hover-color-rgb:10,88,202;-
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 37 33 2c 31 38 31 2c 31 38 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 72 67 62 3a 35 32 2c 35 38 2c 36 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 37 33 2c 20 31 38 31 2c 20 31 38 39 2c 20 30 2e 35 29 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 37 33 2c 31 38 31 2c 31 38 39 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 23 32 62 33 30 33 35 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 34 33 2c 34 38 2c 35 33 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 36 65 61 38 66 65 3b 2d 2d 62 73 Data Ascii: -color-rgb:173,181,189;--bs-secondary-bg:#343a40;--bs-secondary-bg-rgb:52,58,64;--bs-tertiary-color:rgba(173, 181, 189, 0.5);--bs-tertiary-color-rgb:173,181,189;--bs-tertiary-bg:#2b3035;--bs-tertiary-bg-rgb:43,48,53;--bs-primary-text-emphasis:#6ea8fe;--bs
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 61 38 36 38 66 7d 2a 2c 3a 3a 61 66 74 65 72 2c 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 3a 72 6f 6f 74 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 Data Ascii: order-color:#ea868f}*,::after,::before{box-sizing:border-box}@media (prefers-reduced-motion:no-preference){:root{scroll-behavior:smooth}}body{margin:0;font-family:var(--bs-body-font-family);font-size:var(--bs-body-font-size);font-weight:var(--bs-body-font
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 72 65 6d 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 2e 73 6d 61 6c 6c 2c 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 6d 61 72 6b 2c 6d 61 72 6b 7b 70 61 64 64 69 Data Ascii: adding-left:2rem}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}.small,small{font-size:.875em}.mark,mark{paddi
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 68 2c 74 68 65 61 64 2c 74 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 Data Ascii: ody,td,tfoot,th,thead,tr{border-color:inherit;border-style:solid;border-width:0}label{display:inline-block}button{border-radius:0}button:focus:not(:focus-visible){outline:0}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inher
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 63 6f 6c 6f 72 2d 73 77 61 74 63 68 2d 77 72 61 70 70 65 72 7b 70 61 64 64 69 6e 67 3a 30 7d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 6f 75 74 70 75 74 Data Ascii: bkit-appearance:textfield}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-color-swatch-wrapper{padding:0}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}::file-selector-button{font:inherit;-webkit-appearance:button}output
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 69 6e 69 74 69 61 6c 69 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 Data Ascii: ild){margin-right:.5rem}.initialism{font-size:.875em;text-transform:uppercase}.blockquote{margin-bottom:1rem;font-size:1.25rem}.blockquote>:last-child{margin-bottom:0}.blockquote-footer{margin-top:-1rem;margin-bottom:1rem;font-size:.875em;color:#6c757d}.b
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 78 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 33 32 30 70 78 7d 7d 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 78 6c 3a 31 34 30 30 70 78 7d 2e 72 6f 77 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 3b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 Data Ascii: ,.container-xxl{max-width:1320px}}:root{--bs-breakpoint-xs:0;--bs-breakpoint-sm:576px;--bs-breakpoint-md:768px;--bs-breakpoint-lg:992px;--bs-breakpoint-xl:1200px;--bs-breakpoint-xxl:1400px}.row{--bs-gutter-x:1.5rem;--bs-gutter-y:0;display:flex;flex-wrap:w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49698	104.17.25.14	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:36 UTC	627	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:36 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-7b00" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2179 Expires: Wed, 04 Mar 2026 09:30:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ClfKeVLPIyFUnSxiTVL55ilhrIAiGqXZtd2e2M3V1tEZrW3vqBjuL9mGPd6s7GMZx6u3llKxQPhXBSuBFFWj%2Fn3MxfNPRJyudRn2oyU8zW882PS2RvsZjXjNr7oO7WU7VG0O58UX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202c0dbffb0423e-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:30:36 UTC	417	IN	Data Raw: 37 62 66 31 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 20 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 09 09 2f 2f 20 43 6f 6d 6d 6f 6e 4a 53 0a 09 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 09 09 2f 2f 20 41 4d 44 0a 09 09 64 65 66 69 6e 65 28 5b 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 7b 0a 09 09 2f 2f 20 47 6c 6f 62 61 6c 20 28 62 72 6f 77 73 65 72 29 0a 09 09 72 6f 6f 74 Data Ascii: 7bf1;(function (root, factory) {if (typeof exports === "object") {// CommonJSmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// AMDdefine([], factory);}else {// Global (browser)root
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 6f 6e 20 28 4d 61 74 68 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 20 20 20 20 76 61 72 20 63 72 79 70 74 6f 3b 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 66 72 6f 6d 20 77 69 6e 64 6f 77 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 20 7b 0a 09 20 20 20 20 20 20 20 20 63 72 79 70 74 6f 20 3d 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 3b 0a 09 20 20 20 20 7d 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 69 6e 20 77 65 62 20 77 6f 72 6b 65 72 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 65 6c 66 20 21 3d Data Ascii: on (Math, undefined) { var crypto; // Native crypto from window (Browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // Native crypto in web worker (Browser) if (typeof self !=
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 55 73 65 20 72 61 6e 64 6f 6d 42 79 74 65 73 20 6d 65 74 68 6f 64 20 28 4e 6f 64 65 4a 53 29 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 42 79 74 65 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 09 20 20 20 20 20 20 Data Ascii: return crypto.getRandomValues(new Uint32Array(1))[0]; } catch (err) {} } // Use randomBytes method (NodeJS) if (typeof crypto.randomBytes === 'function') { try {
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 2a 20 40 73 74 61 74 69 63 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 4d 79 54 79 70 65 20 3d 20 43 72 79 70 74 6f 4a 53 2e 6c 69 62 2e 42 61 73 65 2e 65 78 74 65 6e 64 28 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 66 69 65 6c 64 3a 20 27 76 61 6c 75 65 27 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 Data Ascii: * @static * * @example * * var MyType = CryptoJS.lib.Base.extend({ * field: 'value', * * method: function () { *
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 4d 79 54 79 70 65 2e 63 72 65 61 74 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 63 72 65 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 74 68 69 73 2e 65 78 74 65 6e 64 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 69 6e 69 74 2e 61 70 70 6c 79 28 69 6e 73 74 61 6e 63 65 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: * @example * * var instance = MyType.create(); */ create: function () { var instance = this.extend(); instance.init.apply(instance, arguments);
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 45 20 77 6f 6e 27 74 20 63 6f 70 79 20 74 6f 53 74 72 69 6e 67 20 75 73 69 6e 67 20 74 68 65 20 6c 6f 6f 70 20 61 62 6f 76 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 72 6f 70 65 72 74 69 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 27 74 6f 53 74 72 69 6e 67 27 29 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 20 3d 20 70 72 6f 70 65 72 74 69 65 73 2e 74 6f 53 74 72 69 6e 67 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 43 72 65 61 Data Ascii: // IE won't copy toString using the loop above if (properties.hasOwnProperty('toString')) { this.toString = properties.toString; } }, /** * Crea
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 33 2c 20 30 78 30 34 30 35 30 36 30 37 5d 2c 20 36 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 73 2c 20 73 69 67 42 79 74 65 73 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 73 20 3d 20 74 68 69 73 2e 77 6f 72 64 73 20 3d 20 77 6f 72 64 73 20 7c 7c 20 5b 5d 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 69 67 42 79 74 65 73 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 20 3d 20 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 Data Ascii: 3, 0x04050607], 6); */ init: function (words, sigBytes) { words = this.words = words \|\| []; if (sigBytes != undefined) { this.sigBytes = sigBytes; } else { this.s
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 76 61 72 20 74 68 69 73 53 69 67 42 79 74 65 73 20 3d 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 68 61 74 53 69 67 42 79 74 65 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 73 69 67 42 79 74 65 73 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 61 6d 70 20 65 78 63 65 73 73 20 62 69 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 6c 61 6d 70 28 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 6e 63 61 74 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 53 69 67 42 79 74 65 73 20 25 20 34 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 70 79 20 6f 6e 65 20 62 79 74 65 20 61 74 20 61 20 74 69 6d 65 0a 09 Data Ascii: var thisSigBytes = this.sigBytes; var thatSigBytes = wordArray.sigBytes; // Clamp excess bits this.clamp(); // Concat if (thisSigBytes % 4) { // Copy one byte at a time
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 66 20 74 68 69 73 20 77 6f 72 64 20 61 72 72 61 79 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 57 6f 72 64 41 72 72 61 79 7d 20 54 68 65 20 63 6c 6f 6e 65 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 63 6c 6f 6e 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 63 6c 6f 6e 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 42 61 73 65 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 Data Ascii: f this word array. * * @return {WordArray} The clone. * * @example * * var clone = wordArray.clone(); */ clone: function () { var clone = Base.clone.call(this)
2025-03-14 09:30:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 68 65 78 53 74 72 69 6e 67 20 3d 20 43 72 79 70 74 6f 4a 53 2e 65 6e 63 2e 48 65 78 2e 73 74 72 69 6e 67 69 66 79 28 77 6f 72 64 41 72 72 61 79 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 73 74 72 69 6e 67 69 66 79 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 41 72 72 61 79 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 68 6f 72 74 63 75 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 6f 72 64 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 77 6f 72 64 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 Data Ascii: * * @example * * var hexString = CryptoJS.enc.Hex.stringify(wordArray); */ stringify: function (wordArray) { // Shortcuts var words = wordArray.words; var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49699	151.101.130.137	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:36 UTC	603	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:36 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 14 Mar 2025 09:30:36 GMT Age: 613619 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 11 X-Timer: S1741944637.759168,VS0,VE0 Vary: Accept-Encoding
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-14 09:30:36 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49700	104.21.70.234	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:37 UTC	710	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228254452.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228254452.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:37 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:37 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYFa5YArbv%2Bwq2539aUpR1MoLMLne7sWf2Wd7%2Fr4XT76sn4OhK52mHIy0tQH%2BEekcNdF6nEW%2FtNJeySQbW%2FpnakLEbI5%2FMQI1rPvKmJLshAXldjcOi013Uh7vcfH%2FkEbldVt4jxkXUF8x89h60RgofkBIxVb5ONFLXCOdSKJPA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c0e099727d11-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1956&min_rtt=1931&rtt_var=774&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1282&delivery_rate=1370248&cwnd=186&unsent_bytes=0&cid=be1eee4642736278&ts=418&x=0"
2025-03-14 09:30:37 UTC	420	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:30:37 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 36 81 09 74 Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs6t
2025-03-14 09:30:37 UTC	1369	IN	Data Raw: d6 6b 01 09 bc f7 c3 ed 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 bd f2 24 a2 Data Ascii: k:WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8$
2025-03-14 09:30:37 UTC	1369	IN	Data Raw: d0 00 00 e8 79 ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 51 ef 99 4f Data Ascii: y^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2QO
2025-03-14 09:30:37 UTC	1369	IN	Data Raw: ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 4f 2c 77 32 Data Ascii: >4T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!O,w2
2025-03-14 09:30:37 UTC	1369	IN	Data Raw: de 31 fe d6 48 45 61 61 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd Data Ascii: 1HEaatOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwFti
2025-03-14 09:30:37 UTC	1369	IN	Data Raw: 6d 83 90 33 96 19 5e 1b b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 92 69 35 3b Data Ascii: m3^<i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%i5;
2025-03-14 09:30:37 UTC	1369	IN	Data Raw: e3 4b 65 5b ec 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 34 66 8c d3 Data Ascii: Ke[Cqf-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV4f
2025-03-14 09:30:37 UTC	1369	IN	Data Raw: f8 9d 5c 4e 88 be 87 dc 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 ba f4 aa 60 Data Ascii: \NuM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C`
2025-03-14 09:30:37 UTC	1369	IN	Data Raw: 7c ae 56 33 ec 40 8a 2b c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 d7 a3 07 15 Data Ascii: \|V3@+^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49701	151.101.129.229	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:37 UTC	647	OUT	GET /npm/react/umd/react.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228254452.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:37 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10751 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 18.3.1 X-JSD-Version-Type: version ETag: W/"29ff-qneuTEn1Jbwh3h0E8Ipdc5YsfM4" Accept-Ranges: bytes Age: 8654 Date: Fri, 14 Mar 2025 09:30:37 GMT X-Served-By: cache-fra-eddf8230081-FRA, cache-nyc-kteb1890041-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 Data Ascii: /** * @license React * react.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */(function(){'use s
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 24 22 2b 61 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 6e 75 6c 6c 21 3d 3d 61 26 26 6e 75 6c 6c 21 3d 61 2e 6b 65 79 3f 70 61 28 22 22 2b 61 2e 6b 65 79 29 3a 62 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 2c 65 2c 6d 2c 64 29 7b 76 61 72 20 63 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 63 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 63 29 61 3d 6e 75 6c 6c 3b 76 61 72 20 68 3d 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 29 68 3d 21 30 3b 65 6c 73 65 20 73 77 69 74 63 68 Data Ascii: $"+a.replace(/[=:]/g,function(a){return b[a]})}function N(a,b){return"object"===typeof a&&null!==a&&null!=a.key?pa(""+a.key):b.toString(36)}function B(a,b,e,m,d){var c=typeof a;if("undefined"===c\|\|"boolean"===c)a=null;var h=!1;if(null===a)h=!0;else switch
2025-03-14 09:30:37 UTC	1357	IN	Data Raw: 3d 61 2e 5f 73 74 61 74 75 73 26 26 28 61 2e 5f 73 74 61 74 75 73 3d 0a 30 2c 61 2e 5f 72 65 73 75 6c 74 3d 62 29 7d 69 66 28 31 3d 3d 3d 61 2e 5f 73 74 61 74 75 73 29 72 65 74 75 72 6e 20 61 2e 5f 72 65 73 75 6c 74 2e 64 65 66 61 75 6c 74 3b 74 68 72 6f 77 20 61 2e 5f 72 65 73 75 6c 74 3b 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 61 2c 62 29 7b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 3b 61 2e 70 75 73 68 28 62 29 3b 61 3a 66 6f 72 28 3b 30 3c 65 3b 29 7b 76 61 72 20 63 3d 65 2d 31 3e 3e 3e 31 2c 64 3d 61 5b 63 5d 3b 69 66 28 30 3c 44 28 64 2c 62 29 29 61 5b 63 5d 3d 62 2c 61 5b 65 5d 3d 64 2c 65 3d 63 3b 65 6c 73 65 20 62 72 65 61 6b 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c Data Ascii: =a._status&&(a._status=0,a._result=b)}if(1===a._status)return a._result.default;throw a._result;}function O(a,b){var e=a.length;a.push(b);a:for(;0<e;){var c=e-1>>>1,d=a[c];if(0<D(d,b))a[c]=b,a[e]=d,e=c;else break a}}function p(a){return 0===a.length?null
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 28 61 2c 62 29 7b 41 3d 6a 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 76 28 29 29 7d 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 63 74 28 2e 2e 2e 29 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 20 62 75 69 6c 64 73 20 6f 66 20 52 65 61 63 74 2e 22 29 3b 7d 76 61 72 20 79 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 71 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 6f 72 74 61 6c 22 29 2c 73 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 2c 0a 74 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 74 72 69 63 74 5f 6d 6f 64 65 22 29 2c 75 61 Data Ascii: (a,b){A=ja(function(){a(v())},b)}function ka(a){throw Error("act(...) is not supported in production builds of React.");}var y=Symbol.for("react.element"),qa=Symbol.for("react.portal"),sa=Symbol.for("react.fragment"),ta=Symbol.for("react.strict_mode"),ua
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 29 7b 76 61 72 20 42 61 3d 70 65 72 66 6f 72 6d 61 6e 63 65 3b 76 61 72 20 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 61 2e 6e 6f 77 28 29 7d 7d 65 6c 73 65 7b 76 61 72 20 6d 61 3d 44 61 74 65 2c 43 61 3d 6d 61 2e 6e 6f 77 28 29 3b 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 61 2e 6e 6f 77 28 29 2d 43 61 7d 7d 76 61 72 20 71 3d 5b 5d 2c 72 3d 5b 5d 2c 44 61 3d 31 2c 6e 3d 6e 75 6c 6c 2c 6b 3d 33 2c 46 3d 21 31 2c 75 3d 21 31 2c 7a 3d 21 31 2c 6a 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 73 65 74 54 69 6d 65 6f 75 74 3a 6e 75 6c 6c 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 Data Ascii: eof performance.now){var Ba=performance;var v=function(){return Ba.now()}}else{var ma=Date,Ca=ma.now();v=function(){return ma.now()-Ca}}var q=[],r=[],Da=1,n=null,k=3,F=!1,u=!1,z=!1,ja="function"===typeof setTimeout?setTimeout:null,ea="function"===typeof c
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 75 6c 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 2c 63 29 7b 76 61 72 20 65 3d 76 28 29 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 63 26 26 6e 75 6c 6c 21 3d 3d 63 3f 28 63 3d 63 2e 64 65 6c 61 79 2c 63 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 63 26 26 30 3c 63 3f 65 2b 63 3a 65 29 3a 63 3d 65 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 76 61 72 20 64 3d 2d 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 64 3d 32 35 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 64 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 64 3d 31 45 34 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 64 3d 35 45 33 7d 64 3d 63 2b 64 3b 61 3d 7b 69 64 3a 44 61 2b 2b 2c 63 61 6c 6c 62 61 63 6b 3a 62 Data Ascii: uleCallback:function(a,b,c){var e=v();"object"===typeof c&&null!==c?(c=c.delay,c="number"===typeof c&&0<c?e+c:e):c=e;switch(a){case 1:var d=-1;break;case 2:d=250;break;case 5:d=1073741823;break;case 4:d=1E4;break;default:d=5E3}d=c+d;a={id:Da++,callback:b
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 45 72 72 6f 72 28 22 52 65 61 63 74 2e 43 68 69 6c 64 72 65 6e 2e 6f 6e 6c 79 20 65 78 70 65 63 74 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 61 20 73 69 6e 67 6c 65 20 52 65 61 63 74 20 65 6c 65 6d 65 6e 74 20 63 68 69 6c 64 2e 22 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 63 2e 43 6f 6d 70 6f 6e 65 6e 74 3d 77 3b 63 2e 46 72 61 67 6d 65 6e 74 3d 73 61 3b 63 2e 50 72 6f 66 69 6c 65 72 3d 75 61 3b 63 2e 50 75 72 65 43 6f 6d 70 6f 6e 65 6e 74 3d 4b 3b 63 2e 53 74 72 69 63 74 4d 6f 64 65 3d 74 61 3b 63 2e 53 75 73 70 65 6e 73 65 3d 79 61 3b 63 2e 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 3d 0a 74 3b 63 2e 61 63 74 3d 6b 61 3b 63 2e 63 6c 6f 6e 65 45 6c 65 Data Ascii: Error("React.Children.only expected to receive a single React element child.");return a}};c.Component=w;c.Fragment=sa;c.Profiler=ua;c.PureComponent=K;c.StrictMode=ta;c.Suspense=ya;c.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=t;c.act=ka;c.cloneEle
2025-03-14 09:30:37 UTC	1126	IN	Data Raw: 2c 62 29 7b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 7a 61 2c 74 79 70 65 3a 61 2c 63 6f 6d 70 61 72 65 3a 76 6f 69 64 20 30 3d 3d 3d 62 3f 6e 75 6c 6c 3a 62 7d 7d 3b 63 2e 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 4a 2e 74 72 61 6e 73 69 74 69 6f 6e 3b 4a 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 7b 7d 3b 74 72 79 7b 61 28 29 7d 66 69 6e 61 6c 6c 79 7b 4a 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 62 7d 7d 3b 63 2e 75 6e 73 74 61 62 6c 65 5f 61 63 74 3d 6b 61 3b 63 2e 75 73 65 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 61 2c 62 29 7d 3b 63 2e 75 73 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f Data Ascii: ,b){return{$$typeof:za,type:a,compare:void 0===b?null:b}};c.startTransition=function(a,b){b=J.transition;J.transition={};try{a()}finally{J.transition=b}};c.unstable_act=ka;c.useCallback=function(a,b){return g.current.useCallback(a,b)};c.useContext=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49703	151.101.129.229	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:37 UTC	655	OUT	GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228254452.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:37 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 131835 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 18.3.1 X-JSD-Version-Type: version ETag: W/"202fb-/rjdydBWak+glxpuEThlhhjNrP4" Accept-Ranges: bytes Age: 22156 Date: Fri, 14 Mar 2025 09:30:37 GMT X-Served-By: cache-fra-eddf8230141-FRA, cache-ewr-kewr1740066-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a Data Ascii: /** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. /(function(){/
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 22 3d 3d 3d 74 79 70 65 6f 66 20 62 7c 7c 64 6a 28 61 2c 62 2c 63 2c 64 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 64 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 63 29 73 77 69 74 63 68 28 63 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 62 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 62 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 62 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 62 29 7c 7c 31 3e 62 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 59 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 74 68 69 73 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3d 32 3d 3d 3d 62 7c 7c 33 3d 3d 3d 62 7c 7c 34 3d 3d 3d 62 3b 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 4e 61 Data Ascii: "===typeof b\|\|dj(a,b,c,d))return!0;if(d)return!1;if(null!==c)switch(c.type){case 3:return!b;case 4:return!1===b;case 5:return isNaN(b);case 6:return isNaN(b)\|\|1>b}return!1}function Y(a,b,c,d,e,f,g){this.acceptsBooleans=2===b\|\|3===b\|\|4===b;this.attributeNa
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 7b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 62 2c 5b 5d 29 7d 63 61 74 63 68 28 6e 29 7b 76 61 72 20 64 3d 6e 7d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 61 2c 5b 5d 2c 62 29 7d 65 6c 73 65 7b 74 72 79 7b 62 2e 63 61 6c 6c 28 29 7d 63 61 74 63 68 28 6e 29 7b 64 3d 6e 7d 61 2e 63 61 6c 6c 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 7d 65 6c 73 65 7b 74 72 79 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 0a 7d 63 61 74 63 68 28 6e 29 7b 64 3d 6e 7d 61 28 29 7d 7d 63 61 74 63 68 28 6e 29 7b 69 66 28 6e 26 26 64 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 2e 73 74 61 63 6b 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 66 3d 64 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c Data Ascii: {Reflect.construct(b,[])}catch(n){var d=n}Reflect.construct(a,[],b)}else{try{b.call()}catch(n){d=n}a.call(b.prototype)}else{try{throw Error();}catch(n){d=n}a()}}catch(n){if(n&&d&&"string"===typeof n.stack){for(var e=n.stack.split("\n"),f=d.stack.split("\
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 6f 76 69 64 65 72 22 3b 63 61 73 65 20 69 65 3a 76 61 72 20 62 3d 61 2e 72 65 6e 64 65 72 3b 61 3d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3b 61 7c 7c 28 61 3d 62 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 62 2e 6e 61 6d 65 7c 7c 22 22 2c 61 3d 22 22 21 3d 3d 61 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 61 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 72 65 74 75 72 6e 20 61 3b 63 61 73 65 20 6a 65 3a 72 65 74 75 72 6e 20 62 3d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 6e 75 6c 6c 2c 6e 75 6c 6c 21 3d 3d 62 3f 62 3a 64 65 28 61 2e 74 79 70 65 29 7c 7c 22 4d 65 6d 6f 22 3b 63 61 73 65 20 54 61 3a 62 3d 61 2e 5f 70 61 79 6c 6f 61 64 3b 61 3d 61 2e 5f 69 6e 69 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 28 61 28 62 29 29 7d 63 61 74 63 68 28 Data Ascii: ovider";case ie:var b=a.render;a=a.displayName;a\|\|(a=b.displayName\|\|b.name\|\|"",a=""!==a?"ForwardRef("+a+")":"ForwardRef");return a;case je:return b=a.displayName\|\|null,null!==b?b:de(a.type)\|\|"Memo";case Ta:b=a._payload;a=a._init;try{return de(a(b))}catch(
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 62 29 2c 64 3d 22 22 2b 61 5b 62 5d 3b 69 66 28 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 2e 67 65 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 2e 73 65 74 29 7b 76 61 72 20 65 3d 63 2e 67 65 74 2c 66 3d 63 2e 73 65 74 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 Data Ascii: PropertyDescriptor(a.constructor.prototype,b),d=""+a[b];if(!a.hasOwnProperty(b)&&"undefined"!==typeof c&&"function"===typeof c.get&&"function"===typeof c.set){var e=c.get,f=c.set;Object.defineProperty(a,b,{configurable:!0,get:function(){return e.call(this
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 67 28 61 2c 62 29 3b 76 61 72 20 63 3d 55 61 28 62 2e 76 61 6c 75 65 29 2c 64 3d 62 2e 74 79 70 65 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 64 29 7b 69 66 28 30 3d 3d 3d 63 26 26 22 22 3d 3d 3d 61 2e 76 61 6c 75 65 7c 7c 61 2e 76 61 6c 75 65 21 3d 0a 63 29 61 2e 76 61 6c 75 65 3d 22 22 2b 63 7d 65 6c 73 65 20 61 2e 76 61 6c 75 65 21 3d 3d 22 22 2b 63 26 26 28 61 2e 76 61 6c 75 65 3d 22 22 2b 63 29 3b 65 6c 73 65 20 69 66 28 22 73 75 62 6d 69 74 22 3d 3d 3d 64 7c 7c 22 72 65 73 65 74 22 3d 3d 3d 64 29 7b 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 3b 72 65 74 75 72 6e 7d 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 76 61 6c 75 65 22 29 3f 6d 65 28 61 2c 62 2e 74 79 70 65 2c 63 Data Ascii: g(a,b);var c=Ua(b.value),d=b.type;if(null!=c)if("number"===d){if(0===c&&""===a.value\|\|a.value!=c)a.value=""+c}else a.value!==""+c&&(a.value=""+c);else if("submit"===d\|\|"reset"===d){a.removeAttribute("value");return}b.hasOwnProperty("value")?me(a,b.type,c
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 72 6e 20 45 28 7b 7d 2c 62 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 22 22 2b 61 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 67 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2e 76 61 6c 75 65 3b 69 66 28 6e 75 6c 6c 3d 3d 63 29 7b 63 3d 62 2e 63 68 69 6c 64 72 65 6e 3b 62 3d 62 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 39 32 29 29 3b 69 66 28 63 63 28 63 29 29 7b 69 66 28 31 3c 63 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 39 33 29 29 3b 0a 63 3d 63 5b 30 5d 7d 62 3d Data Ascii: rn E({},b,{value:void 0,defaultValue:void 0,children:""+a._wrapperState.initialValue})}function ng(a,b){var c=b.value;if(null==c){c=b.children;b=b.defaultValue;if(null!=c){if(null!=b)throw Error(m(92));if(cc(c)){if(1<c.length)throw Error(m(93));c=c[0]}b=
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 65 74 49 6e 6e 65 72 48 54 4d 4c 29 7b 69 66 28 6e 75 6c 6c 21 3d 62 2e 63 68 69 6c 64 72 65 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 30 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 7c 7c 21 28 22 5f 5f 68 74 6d 6c 22 69 6e 20 62 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 31 29 29 3b 7d 69 66 28 6e 75 6c 6c 21 3d 62 2e 73 74 79 6c 65 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 62 2e 73 74 79 6c 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 32 29 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 61 2c 62 29 7b 69 66 28 2d 31 3d 3d 3d 61 2e 69 6e 64 Data Ascii: etInnerHTML){if(null!=b.children)throw Error(m(60));if("object"!==typeof b.dangerouslySetInnerHTML\|\|!("__html"in b.dangerouslySetInnerHTML))throw Error(m(61));}if(null!=b.style&&"object"!==typeof b.style)throw Error(m(62));}}function qe(a,b){if(-1===a.ind
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 64 2e 64 69 73 61 62 6c 65 64 29 7c 7c 28 61 3d 61 2e 74 79 70 65 2c 64 3d 21 28 22 62 75 74 74 6f 6e 22 3d 3d 3d 61 7c 7c 22 69 6e 70 75 74 22 3d 3d 3d 61 7c 7c 22 73 65 6c 65 63 74 22 3d 3d 3d 61 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 61 29 29 3b 61 3d 21 64 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 61 3d 21 31 7d 69 66 28 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 69 66 28 63 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 32 33 31 2c 62 2c 74 79 70 65 6f 66 20 63 29 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 6a 6a 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 6b 29 7b 67 63 3d 21 31 3b 53 63 3d 6e 75 6c 6c 3b 6b 6a 2e 61 70 70 6c 79 28 6c 6a 2c 61 Data Ascii: d.disabled)\|\|(a=a.type,d=!("button"===a\|\|"input"===a\|\|"select"===a\|\|"textarea"===a));a=!d;break a;default:a=!1}if(a)return null;if(c&&"function"!==typeof c)throw Error(m(231,b,typeof c));return c}function jj(a,b,c,d,e,f,g,h,k){gc=!1;Sc=null;kj.apply(lj,a
2025-03-14 09:30:37 UTC	1378	IN	Data Raw: 6e 61 74 65 21 3d 3d 64 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 31 39 30 29 29 3b 7d 69 66 28 33 21 3d 3d 63 2e 74 61 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 31 38 38 29 29 3b 72 65 74 75 72 6e 20 63 2e 73 74 61 74 65 4e 6f 64 65 2e 63 75 72 72 65 6e 74 3d 3d 3d 63 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 42 67 28 61 29 7b 61 3d 6e 6a 28 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 3f 43 67 28 61 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 43 67 28 61 29 7b 69 66 28 35 3d 3d 3d 61 2e 74 61 67 7c 7c 36 3d 3d 3d 61 2e 74 61 67 29 72 65 74 75 72 6e 20 61 3b 66 6f 72 28 61 3d 61 2e 63 68 69 6c 64 3b 6e 75 6c 6c 21 3d 3d 61 3b 29 7b 76 61 72 20 62 3d 43 67 28 61 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 61 Data Ascii: nate!==d)throw Error(m(190));}if(3!==c.tag)throw Error(m(188));return c.stateNode.current===c?a:b}function Bg(a){a=nj(a);return null!==a?Cg(a):null}function Cg(a){if(5===a.tag\|\|6===a.tag)return a;for(a=a.child;null!==a;){var b=Cg(a);if(null!==b)return b;a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49702	151.101.129.229	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:37 UTC	662	OUT	GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228254452.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:38 UTC	767	IN	HTTP/1.1 200 OK Connection: close Content-Length: 119175 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.9.0-beta.1 X-JSD-Version-Type: version ETag: W/"1d187-o2+OYezMEsMzpEcT3E+ubsFUj8Q" Accept-Ranges: bytes Age: 24158 Date: Fri, 14 Mar 2025 09:30:37 GMT X-Served-By: cache-fra-eddf8230077-FRA, cache-ewr-kewr1740086-EWR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 61 63 74 2d 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 72 65 61 63 74 22 29 2c 72 65 71 75 69 72 65 28 22 72 65 61 63 74 2d 64 6f 6d 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 72 65 61 63 74 22 2c 22 72 65 Data Ascii: /! For license information please see react-bootstrap.min.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","re
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 39 34 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 41 72 72 61 79 28 65 29 2c 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 72 3c 65 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 Data Ascii: 946:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){for(var e=arguments.length,t=Array(e),n=0;n<e;n++)t[n]=arguments[n];return(0,o.default)((function(){for(var e=arguments.length,n=Array(e),r=0;r<e;r++)n[r]=arg
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 3a 65 2c 61 72 72 61 79 4f 66 3a 74 2c 65 6c 65 6d 65 6e 74 3a 65 2c 65 6c 65 6d 65 6e 74 54 79 70 65 3a 65 2c 69 6e 73 74 61 6e 63 65 4f 66 3a 74 2c 6e 6f 64 65 3a 65 2c 6f 62 6a 65 63 74 4f 66 3a 74 2c 6f 6e 65 4f 66 3a 74 2c 6f 6e 65 4f 66 54 79 70 65 3a 74 2c 73 68 61 70 65 3a 74 2c 65 78 61 63 74 3a 74 2c 63 68 65 63 6b 50 72 6f 70 54 79 70 65 73 3a 61 2c 72 65 73 65 74 57 61 72 6e 69 6e 67 43 61 63 68 65 3a 6f 7d 3b 72 65 74 75 72 6e 20 6e 2e 50 72 6f 70 54 79 70 65 73 3d 6e 2c 6e 7d 7d 2c 35 32 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 32 38 29 28 29 7d 2c 31 33 34 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 22 53 45 43 52 45 54 5f 44 4f 5f 4e 4f 54 5f 50 41 53 53 5f 54 48 49 Data Ascii: :e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:a,resetWarningCache:o};return n.PropTypes=n,n}},526:(e,t,n)=>{e.exports=n(428)()},134:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THI
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 3a 21 30 2c 67 65 74 3a 74 5b 6e 5d 7d 29 7d 2c 6f 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 2c 6f 2e 6f 3d 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 2c 6f 2e 72 3d 65 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d Data Ascii: :!0,get:t[n]})},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),o.r=e=>{"undefined"!=
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 3a 28 29 3d 3e 6d 61 2c 46 6f 72 6d 47 72 6f 75 70 3a 28 29 3d 3e 68 61 2c 46 6f 72 6d 4c 61 62 65 6c 3a 28 29 3d 3e 78 61 2c 46 6f 72 6d 53 65 6c 65 63 74 3a 28 29 3d 3e 4e 61 2c 46 6f 72 6d 54 65 78 74 3a 28 29 3d 3e 6a 61 2c 49 6d 61 67 65 3a 28 29 3d 3e 47 6f 2c 49 6e 70 75 74 47 72 6f 75 70 3a 28 29 3d 3e 49 61 2c 4c 69 73 74 47 72 6f 75 70 3a 28 29 3d 3e 58 61 2c 4c 69 73 74 47 72 6f 75 70 49 74 65 6d 3a 28 29 3d 3e 71 61 2c 4d 6f 64 61 6c 3a 28 29 3d 3e 4c 73 2c 4d 6f 64 61 6c 42 6f 64 79 3a 28 29 3d 3e 77 73 2c 4d 6f 64 61 6c 44 69 61 6c 6f 67 3a 28 29 3d 3e 6a 73 2c 4d 6f 64 61 6c 46 6f 6f 74 65 72 3a 28 29 3d 3e 4f 73 2c 4d 6f 64 61 6c 48 65 61 64 65 72 3a 28 29 3d 3e 54 73 2c 4d 6f 64 61 6c 54 69 74 6c 65 3a 28 29 3d 3e 44 73 2c 4e 61 76 3a 28 Data Ascii: :()=>ma,FormGroup:()=>ha,FormLabel:()=>xa,FormSelect:()=>Na,FormText:()=>ja,Image:()=>Go,InputGroup:()=>Ia,ListGroup:()=>Xa,ListGroupItem:()=>qa,Modal:()=>Ls,ModalBody:()=>ws,ModalDialog:()=>js,ModalFooter:()=>Os,ModalHeader:()=>Ts,ModalTitle:()=>Ds,Nav:(
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 6f 3d 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 61 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 61 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 6f 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 6c 3d 6f 28 32 38 36 29 2c 63 3d 6f 2e 6e 28 6c 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 22 64 65 66 61 75 6c 74 22 2b 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 75 62 73 74 72 28 31 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c Data Ascii: turn{};var n,r,o={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}var l=o(286),c=o.n(l);function u(e){return"default"+e.charAt(0).toUpperCase()+e.substr(1)}function d(e){var t=function(e,t){if("object"!=typeof e\|\|nul
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 65 43 6f 6e 74 65 78 74 29 28 62 29 3b 72 65 74 75 72 6e 22 72 74 6c 22 3d 3d 3d 65 7d 63 6f 6e 73 74 20 6a 3d 66 75 6e 63 74 69 6f 6e 28 7b 70 72 65 66 69 78 65 73 3a 65 3d 7b 7d 2c 62 72 65 61 6b 70 6f 69 6e 74 73 3a 74 3d 76 2c 6d 69 6e 42 72 65 61 6b 70 6f 69 6e 74 3a 72 3d 68 2c 64 69 72 3a 6f 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7b 63 6f 6e 73 74 20 73 3d 28 30 2c 6e 2e 75 73 65 4d 65 6d 6f 29 28 28 28 29 3d 3e 28 7b 70 72 65 66 69 78 65 73 3a 7b 2e 2e 2e 65 7d 2c 62 72 65 61 6b 70 6f 69 6e 74 73 3a 74 2c 6d 69 6e 42 72 65 61 6b 70 6f 69 6e 74 3a 72 2c 64 69 72 3a 6f 7d 29 29 2c 5b 65 2c 74 2c 72 2c 6f 5d 29 3b 72 65 74 75 72 6e 28 30 2c 6d 2e 6a 73 78 29 28 67 2c 7b 76 61 6c 75 65 3a 73 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7d 3b 66 75 6e 63 74 Data Ascii: eContext)(b);return"rtl"===e}const j=function({prefixes:e={},breakpoints:t=v,minBreakpoint:r=h,dir:o,children:a}){const s=(0,n.useMemo)((()=>({prefixes:{...e},breakpoints:t,minBreakpoint:r,dir:o})),[e,t,r,o]);return(0,m.jsx)(g,{value:s,children:a})};funct
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 74 2e 6d 6f 75 6e 74 4f 6e 45 6e 74 65 72 3f 49 3a 41 2c 72 2e 73 74 61 74 65 3d 7b 73 74 61 74 75 73 3a 6f 7d 2c 72 2e 6e 65 78 74 43 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 2c 72 7d 6e 3d 65 2c 28 74 3d 6f 29 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 2c 53 28 74 2c 6e 29 2c 6f 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 26 26 74 2e 73 74 61 74 75 73 3d 3d 3d 49 3f 7b 73 74 61 74 75 73 3a 41 7d 3a 6e 75 6c 6c 7d 3b 76 61 72 20 61 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 61 2e 63 6f 6d 70 Data Ascii: t.mountOnEnter?I:A,r.state={status:o},r.nextCallback=null,r}n=e,(t=o).prototype=Object.create(n.prototype),t.prototype.constructor=t,S(t,n),o.getDerivedStateFromProps=function(e,t){return e.in&&t.status===I?{status:A}:null};var a=o.prototype;return a.comp
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 69 6f 6e 28 29 7b 74 2e 70 72 6f 70 73 2e 6f 6e 45 6e 74 65 72 69 6e 67 28 61 2c 73 29 2c 74 2e 6f 6e 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 61 66 65 53 65 74 53 74 61 74 65 28 7b 73 74 61 74 75 73 3a 42 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 70 72 6f 70 73 2e 6f 6e 45 6e 74 65 72 65 64 28 61 2c 73 29 7d 29 29 7d 29 29 7d 29 29 29 3a 74 68 69 73 2e 73 61 66 65 53 65 74 53 74 61 74 65 28 7b 73 74 61 74 75 73 3a 42 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 70 72 6f 70 73 2e 6f 6e 45 6e 74 65 72 65 64 28 61 29 7d 29 29 7d 2c 61 2e 70 65 72 66 6f 72 6d 45 78 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 70 72 6f 70 73 2e 65 78 69 74 2c 6e 3d Data Ascii: ion(){t.props.onEntering(a,s),t.onTransitionEnd(l,(function(){t.safeSetState({status:B},(function(){t.props.onEntered(a,s)}))}))}))):this.safeSetState({status:B},(function(){t.props.onEntered(a)}))},a.performExit=function(){var e=this,t=this.props.exit,n=
2025-03-14 09:30:38 UTC	1378	IN	Data Raw: 61 74 65 2e 73 74 61 74 75 73 3b 69 66 28 65 3d 3d 3d 49 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6e 3d 74 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 28 74 2e 69 6e 2c 74 2e 6d 6f 75 6e 74 4f 6e 45 6e 74 65 72 2c 74 2e 75 6e 6d 6f 75 6e 74 4f 6e 45 78 69 74 2c 74 2e 61 70 70 65 61 72 2c 74 2e 65 6e 74 65 72 2c 74 2e 65 78 69 74 2c 74 2e 74 69 6d 65 6f 75 74 2c 74 2e 61 64 64 45 6e 64 4c 69 73 74 65 6e 65 72 2c 74 2e 6f 6e 45 6e 74 65 72 2c 74 2e 6f 6e 45 6e 74 65 72 69 6e 67 2c 74 2e 6f 6e 45 6e 74 65 72 65 64 2c 74 2e 6f 6e 45 78 69 74 2c 74 2e 6f 6e 45 78 69 74 69 6e 67 2c 74 2e 6f 6e 45 78 69 74 65 64 2c 74 2e 6e 6f 64 65 52 65 66 2c 69 28 74 2c 5b 22 63 68 69 6c 64 72 65 6e 22 2c 22 69 6e 22 2c 22 6d 6f 75 6e Data Ascii: ate.status;if(e===I)return null;var t=this.props,n=t.children,o=(t.in,t.mountOnEnter,t.unmountOnExit,t.appear,t.enter,t.exit,t.timeout,t.addEndListener,t.onEnter,t.onEntering,t.onEntered,t.onExit,t.onExiting,t.onExited,t.nodeRef,i(t,["children","in","moun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49705	157.240.252.13	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:37 UTC	778	OUT	GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:38 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:30:38 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:30:38 UTC	3364	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4b 58 52 55 67 70 52 32 6b 7a 53 4e 33 56 52 4a 6c 2d 4a 2d 4d 79 58 67 72 63 74 35 6a 30 56 31 47 35 4e 4f 79 4a 6a 4d 67 56 2d 77 50 31 53 4f 68 71 47 48 54 47 77 77 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4b 57 77 73 4c 4a 69 64 77 34 49 4f 33 36 71 4a 65 35 57 47 39 63 58 37 77 4c 4a 45 37 68 6a 72 61 42 50 71 54 6c 71 4f 49 44 39 6c 4a 35 75 6c 6a 30 66 68 33 65 56 30 49 6d 39 6b 70 49 68 4f 6c 57 4b 75 2d 57 63 51 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4b 34 5a 56 67 41 48 50 72 56 58 34 46 6b 6e 6a 46 41 6b 52 6b 34 6d 66 39 6c 6c 62 30 44 4f 77 4d 79 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcKXRUgpR2kzSN3VRJl-J-MyXgrct5j0V1G5NOyJjMgV-wP1SOhqGHTGww"; e_fb_requesttime="AcKWwsLJidw4IO36qJe5WG9cX7wLJE7hjraBPqTlqOID9lJ5ulj0fh3eV0Im9kpIhOlWKu-WcQ"; e_proxy="AcK4ZVgAHPrVX4FknjFAkRk4mf9llb0DOwMy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49704	157.240.252.13	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:37 UTC	778	OUT	GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:38 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:30:38 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:30:38 UTC	3365	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4b 74 65 79 62 49 74 6b 67 38 59 41 64 72 67 45 4b 63 41 7a 41 41 6d 39 76 44 73 55 38 64 43 34 4e 61 4c 77 42 68 47 41 65 4d 57 74 64 57 65 78 71 79 56 7a 41 66 47 51 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 49 56 73 65 51 39 68 5f 38 45 50 41 31 45 2d 73 78 35 4c 54 75 79 43 6a 67 44 5f 63 53 61 69 2d 4a 54 63 67 78 54 48 39 74 79 34 57 68 5a 47 54 6d 54 79 36 43 42 49 45 56 4e 64 44 33 68 32 32 63 55 51 44 6c 54 42 77 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4b 46 46 41 76 53 39 63 6b 38 41 6e 74 4d 70 64 55 4d 6d 2d 36 55 44 74 6d 5a 73 64 48 4f 4d 70 70 52 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcKteybItkg8YAdrgEKcAzAAm9vDsU8dC4NaLwBhGAeMWtdWexqyVzAfGQ"; e_fb_requesttime="AcIVseQ9h_8EPA1E-sx5LTuyCjgD_cSai-JTcgxTH9ty4WhZGTmTy6CBIEVNdD3h22cUQDlTBw"; e_proxy="AcKFFAvS9ck8AntMpdUMm-6UDtmZsdHOMppR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49706	157.240.252.13	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:38 UTC	778	OUT	GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:38 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:30:38 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:30:38 UTC	3365	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 49 42 71 35 78 74 2d 6c 56 75 51 51 58 56 4f 67 49 2d 57 61 31 52 36 31 32 30 69 46 6e 36 4a 71 6d 37 51 32 74 30 31 30 59 66 31 54 52 38 6b 42 73 67 6b 74 50 50 48 51 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4a 30 43 66 52 62 48 65 46 5a 35 33 6c 4e 74 64 53 39 34 53 41 31 68 4d 4b 34 4a 59 56 64 57 39 77 64 7a 37 52 4b 37 72 78 63 38 6b 63 79 63 58 73 53 77 4e 46 67 59 6c 75 61 32 31 41 5f 78 42 36 69 63 7a 52 53 6f 77 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 49 49 65 6b 34 71 36 50 48 46 52 71 52 35 58 55 6c 4c 6e 44 66 30 70 68 4f 48 53 63 55 59 4b 63 38 71 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcIBq5xt-lVuQQXVOgI-Wa1R6120iFn6Jqm7Q2t010Yf1TR8kBsgktPPHQ"; e_fb_requesttime="AcJ0CfRbHeFZ53lNtdS94SA1hMK4JYVdW9wdz7RK7rxc8kcycXsSwNFgYlua21A_xB6iczRSow"; e_proxy="AcIIek4q6PHFRqR5XUlLnDf0phOHScUYKc8q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49709	172.67.168.191	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:38 UTC	469	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228254452.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:38 UTC	944	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:38 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F9KpuNgFYm3L3063Xv%2FrM1g%2BAyjPZD6lYq0J8kTQXNdIcpx3asW38rVd8ySHWLKir6tpeh9qIeReBlH%2BX08EZzYU282IT2ZnALYTnii%2BJeJMXv496g6eCef7LGdxzFK2EN5RN%2Fk7LPcYMdmYRz36a6LywMTLl2W2nC3R5QGoYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c0e6ad60d2b1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2053&min_rtt=2048&rtt_var=778&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1041&delivery_rate=1396461&cwnd=83&unsent_bytes=0&cid=60c88c0895edc91d&ts=131&x=0"
2025-03-14 09:30:38 UTC	425	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:30:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 36 81 09 74 0d 2d 8e 72 d9 Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs6t-r
2025-03-14 09:30:38 UTC	1369	IN	Data Raw: f7 c3 ed 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 bd f2 24 a2 24 a2 29 bc 96 Data Ascii: :WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8$$)
2025-03-14 09:30:38 UTC	1369	IN	Data Raw: ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 51 ef 99 4f 5a f4 bc a3 ec Data Ascii: ^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2QOZ
2025-03-14 09:30:38 UTC	1369	IN	Data Raw: 34 e8 00 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 4f 2c 77 32 f1 d9 c2 e7 2d Data Ascii: 4T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!O,w2-
2025-03-14 09:30:38 UTC	1369	IN	Data Raw: 45 61 61 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 Data Ascii: EaatOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwFtiwF
2025-03-14 09:30:38 UTC	1369	IN	Data Raw: 19 5e 1b b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 92 69 35 3b 72 5a 6c 8c 92 Data Ascii: ^<i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%i5;rZl
2025-03-14 09:30:38 UTC	1369	IN	Data Raw: 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 34 66 8c d3 19 8a 17 ab ae Data Ascii: Cqf-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV4f
2025-03-14 09:30:38 UTC	1369	IN	Data Raw: be 87 dc 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 ba f4 aa 60 30 76 ed 52 b7 Data Ascii: uM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C`0vR
2025-03-14 09:30:38 UTC	1369	IN	Data Raw: 40 8a 2b c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 d7 a3 07 15 af e1 38 5b 8a Data Ascii: @+^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP8[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49710	172.67.69.226	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:38 UTC	558	OUT	OPTIONS /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://case-id-1000228254452.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:39 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin access-control-allow-origin: https://case-id-1000228254452.counselschambers.co.uk access-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 86400 X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ftjm34xhqr0nUUwR71BB%2B7V0nLSplpAsBVCCAsIraRD4tukpZwIEcmYKBj0vwtHP7h%2Bz5Zf3s5PB0QXDThiRbdFIbIgSPCqLi2mdBZZ1krjRVIKEQzLJ%2F4qi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c0e9e83d8c84-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3086&min_rtt=1892&rtt_var=2916&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2789&recv_bytes=1134&delivery_rate=1489795&cwnd=156&unsent_bytes=0&cid=6c26cbb88c92057f&ts=307&x=0"
2025-03-14 09:30:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49712	172.67.69.226	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:39 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228254452.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:39 UTC	1009	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: OPTIONS, POST, OPTIONS, HEAD, GET X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228254452.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=krG6UAJkpQ%2BFuBTR3w0vHPjRkEPk2R4HQK%2FLoJY5hWV72A%2F9K5ibTQpROgWM19A1sC4G5rozdAkscZtaivBYjLYOPQ8u2IWgiLe73YRIcTFl46kUlO32kXzQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c0ee9e29381d-EWR server-timing: cfL4;desc="?proto=TCP&rtt=5439&min_rtt=2377&rtt_var=6790&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=1211&delivery_rate=1199178&cwnd=81&unsent_bytes=0&cid=ef551e308f0167f4&ts=363&x=0"
2025-03-14 09:30:39 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49717	104.26.8.44	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:40 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:40 UTC	928	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: GET, POST, HEAD, OPTIONS, OPTIONS X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HBSmELA4YKmk4klFksGZGc0AnrG5rWAOPxfIaH%2FVtTPvunNgxTA5kHyG4bNKL8x5l7UtQCFoooRbD63oPqRDFtXThz9y%2BVSstr%2FBUI4WWK3d%2BXRc7TmkNOqH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c0f41b474228-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3625&min_rtt=1625&rtt_var=4455&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=950&delivery_rate=1757977&cwnd=179&unsent_bytes=0&cid=d5a72885b3344089&ts=301&x=0"
2025-03-14 09:30:40 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.10	49720	104.21.48.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:42 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228254452.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:43 UTC	863	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:30:43 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VFkTtS5sSsIcfHCcDwWKr22ltB2MfU47FvYpTqkT7Gcbi%2BXQONFuJTockg0s9pNsOQjlznLHSsxQwKAnoYPEuIjVYeQU86BrrweXpXCo6Q1eKy%2BL5lr8R8YZcufWIE2riDpzVHbU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c102799e93b7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1977&min_rtt=1972&rtt_var=751&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1155&delivery_rate=1446260&cwnd=213&unsent_bytes=0&cid=0d34c9a707985ec0&ts=405&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.10	49722	104.21.48.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:43 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 55 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228254452.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:43 UTC	55	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 35 51 62 38 7a 52 38 6e 66 41 6e 43 4b 75 41 68 4a 6c 45 75 66 2f 6f 70 4f 7a 72 70 55 4c 44 6f 6d 2b 4f 4a 51 2f 63 70 55 73 41 3d 22 7d Data Ascii: {"data":"5Qb8zR8nfAnCKuAhJlEuf/opOzrpULDom+OJQ/cpUsA="}
2025-03-14 09:30:44 UTC	871	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:44 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LTIAp5hnDB%2B2p0KmmJnXDe68U03oLeX1GJ7GRx4cGEMHq9QsOoJf45jkDISeOBzeF6OXpnA4yzG6fEhV0qwRfgW0q08JoJmFp7W%2B%2Fiz2%2FNXFdRMA7pIRFoVGVuHral4FUMX6WLm1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c1080dca435b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1555&min_rtt=1547&rtt_var=597&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1387&delivery_rate=1806930&cwnd=201&unsent_bytes=0&cid=11fb071afad424af&ts=430&x=0"
2025-03-14 09:30:44 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:30:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.10	49723	104.21.112.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:44 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:45 UTC	836	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:30:45 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UCn%2Fl8bLlYrTsoY92dA3vvJu0V6gmpl8feHEAebeMQKvJwZ7KXGQKl898ZAoBXFb0MChzetJDSureXw%2FHEcbTUQaUzJz3VH%2F7aYuWlwDZXrvDLyFlnGu28pylyqOHgofyKECONst"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c10dbe85c3fd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1630&min_rtt=1625&rtt_var=620&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=970&delivery_rate=1749550&cwnd=161&unsent_bytes=0&cid=c26193a04c4c3e50&ts=432&x=0"
2025-03-14 09:30:45 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 64 66 63 61 64 66 62 61 34 30 38 31 61 64 30 36 65 36 37 30 62 63 61 34 30 34 35 37 30 37 64 37 2d 33 32 35 31 63 39 64 32 35 34 63 36 36 32 62 65 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-dfcadfba4081ad06e670bca4045707d7-3251c9d254c662be-00"}
2025-03-14 09:30:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.10	49724	35.190.80.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:45 UTC	548	OUT	OPTIONS /report/v4?s=UCn%2Fl8bLlYrTsoY92dA3vvJu0V6gmpl8feHEAebeMQKvJwZ7KXGQKl898ZAoBXFb0MChzetJDSureXw%2FHEcbTUQaUzJz3VH%2F7aYuWlwDZXrvDLyFlnGu28pylyqOHgofyKECONst HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:45 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 14 Mar 2025 09:30:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.10	49725	35.190.80.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:46 UTC	523	OUT	POST /report/v4?s=UCn%2Fl8bLlYrTsoY92dA3vvJu0V6gmpl8feHEAebeMQKvJwZ7KXGQKl898ZAoBXFb0MChzetJDSureXw%2FHEcbTUQaUzJz3VH%2F7aYuWlwDZXrvDLyFlnGu28pylyqOHgofyKECONst HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 403 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:46 UTC	403	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 31 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 31 32 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 6e 67 2e 63 Data Ascii: [{"age":0,"body":{"elapsed_time":919,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.112.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourcing.c
2025-03-14 09:30:46 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:30:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.10	49727	104.21.70.234	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:49 UTC	791	OUT	GET /case-support.html HTTP/1.1 Host: case-id-1000228254452.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://case-id-1000228254452.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:50 UTC	892	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:39:24 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9p8jQRNME7jJJPSX0R9jZ8M1ZFRronvH%2BeNCz%2FbrQpUz94A2U2WARZsj88UxZm3otrs4cjINJj5vh0AgnEvw9DPaA86rsjw76OZUlVPdLMXcKgW%2FmDa%2BADpaY%2BZwuiCklv1%2FRRQTVWaIJAHPywYVtYJla33V0dg81vOG%2FME%2FqA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c12cafb38c73-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2513&min_rtt=2507&rtt_var=952&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1363&delivery_rate=1142857&cwnd=91&unsent_bytes=0&cid=7fab997598aea6cc&ts=432&x=0"
2025-03-14 09:30:50 UTC	477	IN	Data Raw: 33 37 63 65 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 Data Ascii: 37ce<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCF
2025-03-14 09:30:50 UTC	1369	IN	Data Raw: 6c 45 72 34 41 69 41 52 59 68 6d 63 38 42 6a 38 44 33 53 4a 38 4a 52 41 53 65 78 4a 52 35 6d 32 67 4f 51 6e 2f 2f 45 54 68 30 53 6f 4a 77 30 74 63 75 62 35 66 6c 4a 37 50 35 6a 41 57 41 74 2b 43 4b 6c 41 42 39 6f 4f 77 45 6c 35 53 35 36 54 6e 67 78 4d 49 6e 41 45 66 51 2b 49 63 51 6b 65 73 77 78 74 51 59 65 74 6e 78 4c 55 35 76 49 52 71 72 30 53 56 51 48 35 65 72 42 61 4c 2b 77 37 77 70 59 55 41 69 43 79 64 55 45 44 4c 62 74 49 68 38 47 4f 43 34 47 33 67 63 64 58 58 6c 64 4f 38 46 61 46 48 5a 58 41 56 64 32 6e 58 56 76 4b 47 32 69 45 68 49 4d 46 77 6b 41 74 67 5a 70 49 64 61 70 38 70 75 4b 51 4e 33 44 4b 42 51 50 4d 72 57 49 51 43 49 6f 78 5a 77 41 63 53 33 68 41 53 43 79 41 51 56 67 55 38 65 54 37 68 4b 66 41 4c 32 68 54 6b 34 4a 4a 65 79 4d 79 6c 4a 41 Data Ascii: lEr4AiARYhmc8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMylJA
2025-03-14 09:30:50 UTC	1369	IN	Data Raw: 63 4c 48 41 46 4e 7a 4d 43 58 43 7a 4b 62 67 4c 65 42 4f 45 50 77 4e 63 35 4b 44 51 50 71 2b 72 41 6e 68 66 45 50 72 36 6e 6a 47 39 34 6e 49 32 6d 61 74 36 36 47 36 30 65 70 64 4a 41 45 53 59 68 59 51 50 47 6b 77 75 4a 67 6a 57 43 76 61 43 58 65 43 50 42 4f 47 44 34 44 35 79 57 41 69 66 69 66 43 2f 6a 62 63 4f 4d 79 37 51 4c 53 43 41 4d 36 6e 76 6c 4c 36 78 2f 77 32 71 47 76 77 51 41 73 4e 6f 49 61 45 49 2b 49 45 6d 5a 7a 63 50 69 42 52 35 69 56 49 73 68 4a 2b 44 32 52 2f 51 6a 4e 6e 6e 39 68 46 55 33 69 4d 46 51 4c 2f 67 4d 77 6f 43 78 67 34 4a 39 4c 68 45 6a 62 6d 76 33 65 43 6e 46 41 52 32 30 6e 55 57 5a 76 34 70 68 49 2b 4f 74 34 39 42 52 57 39 63 6f 47 6f 77 4c 75 41 4e 67 54 44 54 41 6f 6e 4a 36 75 4b 63 42 5a 6f 64 43 4f 77 42 47 71 47 75 58 36 4c Data Ascii: cLHAFNzMCXCzKbgLeBOEPwNc5KDQPq+rAnhfEPr6njG94nI2mat66G60epdJAESYhYQPGkwuJgjWCvaCXeCPBOGD4D5yWAififC/jbcOMy7QLSCAM6nvlL6x/w2qGvwQAsNoIaEI+IEmZzcPiBR5iVIshJ+D2R/QjNnn9hFU3iMFQL/gMwoCxg4J9LhEjbmv3eCnFAR20nUWZv4phI+Ot49BRW9coGowLuANgTDTAonJ6uKcBZodCOwBGqGuX6L
2025-03-14 09:30:50 UTC	1369	IN	Data Raw: 20 76 69 e1 bb 87 6e 20 43 53 53 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 63 73 73 2f 69 6e 74 6c 54 65 6c 49 6e 70 75 74 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 54 68 c6 b0 20 76 69 e1 bb 87 6e 20 4a 61 76 61 53 63 72 69 70 74 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 6a 73 2f 69 6e 74 6c Data Ascii: vin CSS --> <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css"> ... Th vin JavaScript --> <script src="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intl
2025-03-14 09:30:50 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 Data Ascii: .ns-block-ui .ns-block-ui-container .ns-block-ui-loader-container { position: absolute; top: 50%; left: 0; right: 0; text-align: center;
2025-03-14 09:30:50 UTC	1369	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 62 6c 6f 63 6b 69 6e 67 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 61 64 65 6f 75 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: osition: fixed; top: 0; right: 0; bottom: 0; left: 0; } .ns-block-ui.blocking .ns-block-ui-container:not(.fadeout) { opacity: 1;
2025-03-14 09:30:50 UTC	1369	IN	Data Raw: 20 20 66 72 6f 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 Data Ascii: from { opacity: 1; } to { opacity: 0; } } @-webkit-keyframes fadeInRTL1 { 0% { opacity: 0; -webkit-transform: t
2025-03-14 09:30:50 UTC	1369	IN	Data Raw: 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 34 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 Data Ascii: form: translateX(20px); } 40% { opacity: 1; -webkit-transform: translateX(0px); transform: translateX(0px); } 60% { opacity: 1;
2025-03-14 09:30:50 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 32 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 Data Ascii: opacity: 1; } 80% { opacity: 0; } } @keyframes fadeInRTL3 { 0% { opacity: 0; } 20% { opacit
2025-03-14 09:30:50 UTC	1369	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 74 6f 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 33 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d 73 74 61 Data Ascii: important; } .--savior-overlay-z-index-top { z-index: 2147483643 !important; } .--savior-overlay-position-relative { position: relative; } .--savior-overlay-position-sta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.10	49729	151.101.129.229	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:50 UTC	656	OUT	GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:50 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 19157 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 17.0.19 X-JSD-Version-Type: version ETag: W/"4ad5-/7iiVjPE3eq4HRsXQqwv0LRCpMY" Accept-Ranges: bytes Age: 1457675 Date: Fri, 14 Mar 2025 09:30:50 GMT X-Served-By: cache-fra-etou8220138-FRA, cache-ewr-kewr1740083-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 2e 69 74 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 69 74 69 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 69 74 69 5f 5f 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 74 69 5f 5f 76 2d 68 69 64 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 69 74 69 20 69 6e 70 75 74 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 Data Ascii: .iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0!impor
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 6d 65 2c 2e 69 74 69 5f 5f 64 69 61 6c 2d 63 6f 64 65 2c 2e 69 74 69 5f 5f 66 6c 61 67 2d 62 6f 78 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 74 69 5f 5f 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 2c 2e 69 74 69 5f 5f 66 6c 61 67 2d 62 6f 78 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 70 78 7d 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 69 6e 70 75 74 2c 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d 64 69 61 6c 2d 63 6f 64 65 20 69 6e 70 75 74 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d Data Ascii: me,.iti__dial-code,.iti__flag-box{vertical-align:middle}.iti__country-name,.iti__flag-box{margin-right:6px}.iti--allow-dropdown input,.iti--allow-dropdown input[type=tel],.iti--allow-dropdown input[type=text],.iti--separate-dial-code input,.iti--separate-
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 69 74 69 2d 6d 6f 62 69 6c 65 20 2e 69 74 69 5f 5f 63 6f 75 6e 74 72 79 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 65 6d 7d 2e 69 74 69 5f 5f 66 6c 61 67 7b 77 69 64 74 68 3a 32 30 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 65 7b 77 69 64 74 68 3a 31 38 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 68 7b 77 69 64 74 68 3a 31 35 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 63 7b 77 69 64 74 68 3a 31 39 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6e 65 7b 77 69 64 74 68 3a 31 38 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6e 70 7b 77 69 64 74 68 3a 31 33 70 78 7d 2e 69 74 69 5f 5f 66 6c Data Ascii: %;width:100%}.iti-mobile .iti__country{padding:10px 10px;line-height:1.5em}.iti__flag{width:20px}.iti__flag.iti__be{width:18px}.iti__flag.iti__ch{width:15px}.iti__flag.iti__mc{width:19px}.iti__flag.iti__ne{width:18px}.iti__flag.iti__np{width:13px}.iti__fl
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 73 69 74 69 6f 6e 3a 2d 33 35 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 61 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 37 34 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 62 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 39 36 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 64 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 31 38 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 65 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 34 30 70 78 20 30 Data Ascii: sition:-352px 0}.iti__flag.iti__ba{height:10px;background-position:-374px 0}.iti__flag.iti__bb{height:14px;background-position:-396px 0}.iti__flag.iti__bd{height:12px;background-position:-418px 0}.iti__flag.iti__be{height:15px;background-position:-440px 0
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 2d 38 35 36 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 64 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 37 38 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 66 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 30 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 67 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 32 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 68 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 34 34 70 78 Data Ascii: position:-856px 0}.iti__flag.iti__cd{height:15px;background-position:-878px 0}.iti__flag.iti__cf{height:14px;background-position:-900px 0}.iti__flag.iti__cg{height:14px;background-position:-922px 0}.iti__flag.iti__ch{height:15px;background-position:-944px
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 33 35 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 64 6f 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 33 37 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 64 7a 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 30 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 61 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 32 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 63 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b Data Ascii: t:10px;background-position:-1357px 0}.iti__flag.iti__do{height:14px;background-position:-1379px 0}.iti__flag.iti__dz{height:14px;background-position:-1401px 0}.iti__flag.iti__ea{height:14px;background-position:-1423px 0}.iti__flag.iti__ec{height:14px;back
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 67 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 38 36 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 68 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 38 38 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 69 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 30 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 6c 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 32 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 Data Ascii: }.iti__flag.iti__gg{height:14px;background-position:-1863px 0}.iti__flag.iti__gh{height:14px;background-position:-1885px 0}.iti__flag.iti__gi{height:10px;background-position:-1907px 0}.iti__flag.iti__gl{height:14px;background-position:-1929px 0}.iti__flag
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 34 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6c 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 36 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6d 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 39 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6e 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 31 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6f 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 Data Ascii: ground-position:-2347px 0}.iti__flag.iti__il{height:15px;background-position:-2369px 0}.iti__flag.iti__im{height:10px;background-position:-2391px 0}.iti__flag.iti__in{height:14px;background-position:-2413px 0}.iti__flag.iti__io{height:10px;background-posi
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 2e 69 74 69 5f 5f 6b 7a 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 35 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 61 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 37 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 62 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 39 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 63 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 31 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 69 7b 68 65 Data Ascii: .iti__kz{height:10px;background-position:-2853px 0}.iti__flag.iti__la{height:14px;background-position:-2875px 0}.iti__flag.iti__lb{height:14px;background-position:-2897px 0}.iti__flag.iti__lc{height:10px;background-position:-2919px 0}.iti__flag.iti__li{he
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 74 69 6f 6e 3a 2d 33 33 33 36 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 6f 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 33 35 38 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 70 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 33 38 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 71 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 34 30 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 72 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 34 32 34 70 Data Ascii: tion:-3336px 0}.iti__flag.iti__mo{height:14px;background-position:-3358px 0}.iti__flag.iti__mp{height:10px;background-position:-3380px 0}.iti__flag.iti__mq{height:14px;background-position:-3402px 0}.iti__flag.iti__mr{height:14px;background-position:-3424p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.10	49728	151.101.129.229	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:50 UTC	640	OUT	GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:50 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 29519 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 17.0.19 X-JSD-Version-Type: version ETag: W/"734f-tveChQZOzfKDCBYG03tkPAXVi2E" Accept-Ranges: bytes Age: 51572 Date: Fri, 14 Mar 2025 09:30:50 GMT X-Served-By: cache-fra-etou8220100-FRA, cache-ewr-kewr1740082-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 2f 2a 0a 20 2a 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 54 65 6c 65 70 68 6f 6e 65 20 49 6e 70 75 74 20 76 31 37 2e 30 2e 31 39 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 61 63 6b 6f 63 6e 72 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2e 67 69 74 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3a 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 3d 61 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: /* * International Telephone Input v17.0.19 * https://github.com/jackocnr/intl-tel-input.git * Licensed under the MIT license */!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use strict"
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 31 22 5d 2c 5b 22 42 65 6e 69 6e 20 28 42 c3 a9 6e 69 6e 29 22 2c 22 62 6a 22 2c 22 32 32 39 22 5d 2c 5b 22 42 65 72 6d 75 64 61 22 2c 22 62 6d 22 2c 22 31 22 2c 31 30 2c 5b 22 34 34 31 22 5d 5d 2c 5b 22 42 68 75 74 61 6e 20 28 e0 bd a0 e0 bd 96 e0 be b2 e0 bd b4 e0 bd 82 29 22 2c 22 62 74 22 2c 22 39 37 35 22 5d 2c 5b 22 42 6f 6c 69 76 69 61 22 2c 22 62 6f 22 2c 22 35 39 31 22 5d 2c 5b 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 20 28 d0 91 d0 be d1 81 d0 bd d0 b0 20 d0 b8 20 d0 a5 d0 b5 d1 80 d1 86 d0 b5 d0 b3 d0 be d0 b2 d0 b8 d0 bd d0 b0 29 22 2c 22 62 61 22 2c 22 33 38 37 22 5d 2c 5b 22 42 6f 74 73 77 61 6e 61 22 2c 22 62 77 22 2c 22 32 36 37 22 5d 2c 5b 22 42 72 61 7a 69 6c 20 28 42 72 61 73 69 6c 29 22 2c 22 62 72 22 2c 22 Data Ascii: 1"],["Benin (Bnin)","bj","229"],["Bermuda","bm","1",10,["441"]],["Bhutan ()","bt","975"],["Bolivia","bo","591"],["Bosnia and Herzegovina ( )","ba","387"],["Botswana","bw","267"],["Brazil (Brasil)","br","
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 76 69 6c 6c 65 29 22 2c 22 63 67 22 2c 22 32 34 32 22 5d 2c 5b 22 43 6f 6f 6b 20 49 73 6c 61 6e 64 73 22 2c 22 63 6b 22 2c 22 36 38 32 22 5d 2c 5b 22 43 6f 73 74 61 20 52 69 63 61 22 2c 22 63 72 22 2c 22 35 30 36 22 5d 2c 5b 22 43 c3 b4 74 65 20 64 e2 80 99 49 76 6f 69 72 65 22 2c 22 63 69 22 2c 22 32 32 35 22 5d 2c 5b 22 43 72 6f 61 74 69 61 20 28 48 72 76 61 74 73 6b 61 29 22 2c 22 68 72 22 2c 22 33 38 35 22 5d 2c 5b 22 43 75 62 61 22 2c 22 63 75 22 2c 22 35 33 22 5d 2c 5b 22 43 75 72 61 c3 a7 61 6f 22 2c 22 63 77 22 2c 22 35 39 39 22 2c 30 5d 2c 5b 22 43 79 70 72 75 73 20 28 ce 9a cf 8d cf 80 cf 81 ce bf cf 82 29 22 2c 22 63 79 22 2c 22 33 35 37 22 5d 2c 5b 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 20 28 c4 8c 65 73 6b c3 a1 20 72 65 70 75 62 6c 69 Data Ascii: ville)","cg","242"],["Cook Islands","ck","682"],["Costa Rica","cr","506"],["Cte dIvoire","ci","225"],["Croatia (Hrvatska)","hr","385"],["Cuba","cu","53"],["Curaao","cw","599",0],["Cyprus ()","cy","357"],["Czech Republic (esk republi
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 2c 22 37 39 31 31 22 5d 5d 2c 5b 22 47 75 69 6e 65 61 20 28 47 75 69 6e c3 a9 65 29 22 2c 22 67 6e 22 2c 22 32 32 34 22 5d 2c 5b 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 20 28 47 75 69 6e c3 a9 20 42 69 73 73 61 75 29 22 2c 22 67 77 22 2c 22 32 34 35 22 5d 2c 5b 22 47 75 79 61 6e 61 22 2c 22 67 79 22 2c 22 35 39 32 22 5d 2c 5b 22 48 61 69 74 69 22 2c 22 68 74 22 2c 22 35 30 39 22 5d 2c 5b 22 48 6f 6e 64 75 72 61 73 22 2c 22 68 6e 22 2c 22 35 30 34 22 5d 2c 5b 22 48 6f 6e 67 20 4b 6f 6e 67 20 28 e9 a6 99 e6 b8 af 29 22 2c 22 68 6b 22 2c 22 38 35 32 22 5d 2c 5b 22 48 75 6e 67 61 72 79 20 28 4d 61 67 79 61 72 6f 72 73 7a c3 a1 67 29 22 2c 22 68 75 22 2c 22 33 36 22 5d 2c 5b 22 49 63 65 6c 61 6e 64 20 28 c3 8d 73 6c 61 6e 64 29 22 2c 22 69 73 22 2c 22 33 35 Data Ascii: ,"7911"]],["Guinea (Guine)","gn","224"],["Guinea-Bissau (Guin Bissau)","gw","245"],["Guyana","gy","592"],["Haiti","ht","509"],["Honduras","hn","504"],["Hong Kong ()","hk","852"],["Hungary (Magyarorszg)","hu","36"],["Iceland (sland)","is","35
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 2c 5b 22 4d 61 6c 61 77 69 22 2c 22 6d 77 22 2c 22 32 36 35 22 5d 2c 5b 22 4d 61 6c 61 79 73 69 61 22 2c 22 6d 79 22 2c 22 36 30 22 5d 2c 5b 22 4d 61 6c 64 69 76 65 73 22 2c 22 6d 76 22 2c 22 39 36 30 22 5d 2c 5b 22 4d 61 6c 69 22 2c 22 6d 6c 22 2c 22 32 32 33 22 5d 2c 5b 22 4d 61 6c 74 61 22 2c 22 6d 74 22 2c 22 33 35 36 22 5d 2c 5b 22 4d 61 72 73 68 61 6c 6c 20 49 73 6c 61 6e 64 73 22 2c 22 6d 68 22 2c 22 36 39 32 22 5d 2c 5b 22 4d 61 72 74 69 6e 69 71 75 65 22 2c 22 6d 71 22 2c 22 35 39 36 22 5d 2c 5b 22 4d 61 75 72 69 74 61 6e 69 61 20 28 e2 80 ab d9 85 d9 88 d8 b1 d9 8a d8 aa d8 a7 d9 86 d9 8a d8 a7 e2 80 ac e2 80 8e 29 22 2c 22 6d 72 22 2c 22 32 32 32 22 5d 2c 5b 22 4d 61 75 72 69 74 69 75 73 20 28 4d 6f 72 69 73 29 22 2c 22 6d 75 22 2c 22 32 33 30 Data Ascii: ,["Malawi","mw","265"],["Malaysia","my","60"],["Maldives","mv","960"],["Mali","ml","223"],["Malta","mt","356"],["Marshall Islands","mh","692"],["Martinique","mq","596"],["Mauritania ()","mr","222"],["Mauritius (Moris)","mu","230
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 5b 22 50 61 72 61 67 75 61 79 22 2c 22 70 79 22 2c 22 35 39 35 22 5d 2c 5b 22 50 65 72 75 20 28 50 65 72 c3 ba 29 22 2c 22 70 65 22 2c 22 35 31 22 5d 2c 5b 22 50 68 69 6c 69 70 70 69 6e 65 73 22 2c 22 70 68 22 2c 22 36 33 22 5d 2c 5b 22 50 6f 6c 61 6e 64 20 28 50 6f 6c 73 6b 61 29 22 2c 22 70 6c 22 2c 22 34 38 22 5d 2c 5b 22 50 6f 72 74 75 67 61 6c 22 2c 22 70 74 22 2c 22 33 35 31 22 5d 2c 5b 22 50 75 65 72 74 6f 20 52 69 63 6f 22 2c 22 70 72 22 2c 22 31 22 2c 33 2c 5b 22 37 38 37 22 2c 22 39 33 39 22 5d 5d 2c 5b 22 51 61 74 61 72 20 28 e2 80 ab d9 82 d8 b7 d8 b1 e2 80 ac e2 80 8e 29 22 2c 22 71 61 22 2c 22 39 37 34 22 5d 2c 5b 22 52 c3 a9 75 6e 69 6f 6e 20 28 4c 61 20 52 c3 a9 75 6e 69 6f 6e 29 22 2c 22 72 65 22 2c 22 32 36 32 22 2c 30 5d 2c 5b 22 52 6f Data Ascii: ["Paraguay","py","595"],["Peru (Per)","pe","51"],["Philippines","ph","63"],["Poland (Polska)","pl","48"],["Portugal","pt","351"],["Puerto Rico","pr","1",3,["787","939"]],["Qatar ()","qa","974"],["Runion (La Runion)","re","262",0],["Ro
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: e0 b7 8a e2 80 8d e0 b6 bb e0 b7 93 20 e0 b6 bd e0 b6 82 e0 b6 9a e0 b7 8f e0 b7 80 29 22 2c 22 6c 6b 22 2c 22 39 34 22 5d 2c 5b 22 53 75 64 61 6e 20 28 e2 80 ab d8 a7 d9 84 d8 b3 d9 88 d8 af d8 a7 d9 86 e2 80 ac e2 80 8e 29 22 2c 22 73 64 22 2c 22 32 34 39 22 5d 2c 5b 22 53 75 72 69 6e 61 6d 65 22 2c 22 73 72 22 2c 22 35 39 37 22 5d 2c 5b 22 53 76 61 6c 62 61 72 64 20 61 6e 64 20 4a 61 6e 20 4d 61 79 65 6e 22 2c 22 73 6a 22 2c 22 34 37 22 2c 31 2c 5b 22 37 39 22 5d 5d 2c 5b 22 53 77 65 64 65 6e 20 28 53 76 65 72 69 67 65 29 22 2c 22 73 65 22 2c 22 34 36 22 5d 2c 5b 22 53 77 69 74 7a 65 72 6c 61 6e 64 20 28 53 63 68 77 65 69 7a 29 22 2c 22 63 68 22 2c 22 34 31 22 5d 2c 5b 22 53 79 72 69 61 20 28 e2 80 ab d8 b3 d9 88 d8 b1 d9 8a d8 a7 e2 80 ac e2 80 8e 29 Data Ascii: )","lk","94"],["Sudan ()","sd","249"],["Suriname","sr","597"],["Svalbard and Jan Mayen","sj","47",1,["79"]],["Sweden (Sverige)","se","46"],["Switzerland (Schweiz)","ch","41"],["Syria ()
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 2c 22 7a 77 22 2c 22 32 36 33 22 5d 2c 5b 22 c3 85 6c 61 6e 64 20 49 73 6c 61 6e 64 73 22 2c 22 61 78 22 2c 22 33 35 38 22 2c 31 2c 5b 22 31 38 22 5d 5d 5d 2c 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 65 5b 66 5d 3b 65 5b 66 5d 3d 7b 6e 61 6d 65 3a 67 5b 30 5d 2c 69 73 6f 32 3a 67 5b 31 5d 2c 64 69 61 6c 43 6f 64 65 3a 67 5b 32 5d 2c 70 72 69 6f 72 69 74 79 3a 67 5b 33 5d 7c 7c 30 2c 61 72 65 61 43 6f 64 65 73 3a 67 5b 34 5d 7c 7c 6e 75 6c 6c 7d 7d 76 61 72 20 68 3d 7b 67 65 74 49 6e 73 74 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2d 69 64 22 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e Data Ascii: ,"zw","263"],["land Islands","ax","358",1,["18"]]],f=0;f<e.length;f++){var g=e[f];e[f]={name:g[0],iso2:g[1],dialCode:g[2],priority:g[3]\|\|0,areaCodes:g[4]\|\|null}}var h={getInstance:function(a){var b=a.getAttribute("data-intl-tel-input-id");return window.
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 73 2e 64 2e 6e 61 74 69 6f 6e 61 6c 4d 6f 64 65 26 26 28 74 68 69 73 2e 64 2e 61 75 74 6f 48 69 64 65 44 69 61 6c 43 6f 64 65 3d 21 31 29 2c 74 68 69 73 2e 64 2e 73 65 70 61 72 61 74 65 44 69 61 6c 43 6f 64 65 26 26 28 74 68 69 73 2e 64 2e 61 75 74 6f 48 69 64 65 44 69 61 6c 43 6f 64 65 3d 74 68 69 73 2e 64 2e 6e 61 74 69 6f 6e 61 6c 4d 6f 64 65 3d 21 31 29 2c 74 68 69 73 2e 67 3d 2f 41 6e 64 72 6f 69 64 2e 2b 4d 6f 62 69 6c 65 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 74 68 69 73 2e 67 26 26 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e Data Ascii: s.d.nationalMode&&(this.d.autoHideDialCode=!1),this.d.separateDialCode&&(this.d.autoHideDialCode=this.d.nationalMode=!1),this.g=/Android.+Mobile\|webOS\|iPhone\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent),this.g&&(document.body.classList.
2025-03-14 09:30:50 UTC	1378	IN	Data Raw: 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 69 73 6f 32 29 7d 29 7d 65 6c 73 65 20 74 68 69 73 2e 70 3d 65 7d 7d 2c 7b 6b 65 79 3a 22 5f 64 30 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 74 68 69 73 2e 70 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 70 5b 61 5d 2e 69 73 6f 32 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 74 68 69 73 2e 64 2e 6c 6f 63 61 6c 69 7a 65 64 43 6f 75 6e 74 72 69 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 26 26 28 74 68 69 73 2e 70 5b 61 5d 2e 6e 61 6d 65 3d 74 68 69 73 2e 64 2e 6c 6f 63 61 6c 69 7a 65 64 43 6f 75 6e 74 72 69 65 73 5b 62 5d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 64 31 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: =b.indexOf(a.iso2)})}else this.p=e}},{key:"_d0",value:function(){for(var a=0;a<this.p.length;a++){var b=this.p[a].iso2.toLowerCase();this.d.localizedCountries.hasOwnProperty(b)&&(this.p[a].name=this.d.localizedCountries[b])}}},{key:"_d1",value:function(a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.10	49726	104.21.70.234	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:50 UTC	678	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228254452.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228254452.counselschambers.co.uk/index-5b6c678b.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:51 UTC	945	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:51 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NDk4i3tu0ku%2FowfbSmZwkBM5KcVy91for69%2BIsKvgsUwVw8QsZmwx8ZE%2BfKX0zA8hsgim72XehQGxZNaMnShB%2FbNlrwcV7dPzlqZ3npBPtUz5cmIWFRF%2FPCW6Rqu4krTFqdPH%2BJzYxbH3NwuLuxDXTnF0VmiKVQIy%2B%2BngtmZvQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c133f8eb0f68-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1621&min_rtt=1532&rtt_var=638&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1250&delivery_rate=1906005&cwnd=202&unsent_bytes=0&cid=d51467e15826439a&ts=1736&x=0"
2025-03-14 09:30:51 UTC	424	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: 7d e3 50 56 58 18 6c 6c 27 ad 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 77 0b Data Ascii: }PVXll'YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqapX8w
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: d2 4a 6a 03 c8 e6 da 7c 10 59 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa bd 6c Data Ascii: Jj\|YL^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[Fy3l
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: 49 a7 dc f2 63 b6 44 05 a3 7f 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 08 eb Data Ascii: IcD&%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H`
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: 10 0a 55 b2 c8 05 57 80 00 33 df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c 95 f1 07 88 Data Ascii: UW3%3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q,
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: 0c 36 27 49 e6 a3 b7 d0 36 0e 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c ec c6 3c 92 Data Ascii: 6'I6%~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=\<
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: 20 98 8b df dc a6 dc 31 c2 02 ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e c0 82 84 62 Data Ascii: 1{Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O.b
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: ca 65 7c 6f cf 6d 68 ae 2f ed 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 e4 38 00 3e Data Ascii: e\|omh/]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{@8>
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: 45 88 10 be 6f 6b d5 94 10 31 f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 05 59 85 04 Data Ascii: Eok1E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^Y
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: ef 46 85 6d bb 83 69 52 9d 25 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba cc 17 87 65 Data Ascii: FmiR%]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.10	49730	104.17.25.14	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:51 UTC	693	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:51 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:51 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 14865 Expires: Wed, 04 Mar 2026 09:30:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2kjgWiQigsRO1B0sVChHDxQimQdHBTbRD9OaeyiCzR8a4t31yL9MToDhJdD8OfWS6xQ0283oS%2BLFawun5jYJVO2mOlPEApzuVPAz0%2BsMOQojCvEOxP9EjFfPNZp7OrG%2B%2BJ7jFXYs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202c1379dae80d9-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:30:51 UTC	420	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:30:51 UTC	1369	IN	Data Raw: 2d 2e 34 38 33 2e 33 33 32 2d 2e 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d 2e 31 Data Ascii: -.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.1
2025-03-14 09:30:51 UTC	680	IN	Data Raw: 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 20 30 Data Ascii: 4l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4 0
2025-03-14 09:30:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.10	49733	34.117.59.81	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:51 UTC	651	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228254452.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:51 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:30:51 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:30:51 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.10	49731	172.67.69.226	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:51 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228254452.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:51 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: GET, HEAD, OPTIONS, POST, OPTIONS X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228254452.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N9S4Ps6xmVP0n089sul9r%2BOhW3dqh5ATfGCYJ0bWQF3fc%2BezHp%2FWY%2Flk1EfegJe62EBbdwlKLix9vWcyrZ4Xriy%2FDGN%2FPeYquG%2BGPVkjDy1DzP3eWlF5bdhY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c1382847c32f-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4355&min_rtt=1478&rtt_var=6309&sent=6&recv=9&lost=0&retrans=1&sent_bytes=4075&recv_bytes=1211&delivery_rate=392789&cwnd=226&unsent_bytes=0&cid=9aaf5913a01cd885&ts=405&x=0"
2025-03-14 09:30:51 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.10	49734	172.67.168.191	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:51 UTC	428	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228254452.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:52 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:52 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FYcYz1jsR9kHBvXVFN0od7JG2WZrVYns6HLSqzRL8YpMxf%2B69AQaskTacE7elHPk3Pv%2FHJWvE2C2TfUxu2GDXb%2FJemVsKykNT%2B4z%2FtNKF8npVPZF2ohKqzA%2FSH0UKsRhytr60cVQX%2ByqC4WejpTVqTscnnNI9jMnfoGXb4igKQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c13b097419bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2063&min_rtt=2030&rtt_var=785&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1000&delivery_rate=1438423&cwnd=219&unsent_bytes=0&cid=99560bdfc64e4110&ts=158&x=0"
2025-03-14 09:30:52 UTC	420	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: d5 b8 f5 be 7d e3 50 56 58 18 6c 6c 27 ad 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 Data Ascii: }PVXll'YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqap
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: ae 87 93 61 d2 4a 6a 03 c8 e6 da 7c 10 59 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 Data Ascii: aJj\|YL^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[Fy
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: 2b 58 b1 7a 49 a7 dc f2 63 b6 44 05 a3 7f 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 Data Ascii: +XzIcD&%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: bf 62 0f 68 10 0a 55 b2 c8 05 57 80 00 33 df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c Data Ascii: bhUW3%3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q,
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: 81 de e4 c7 0c 36 27 49 e6 a3 b7 d0 36 0e 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c Data Ascii: 6'I6%~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=\
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: da a7 84 24 20 98 8b df dc a6 dc 31 c2 02 ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e Data Ascii: $ 1{Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O.
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: 78 c7 8d db ca 65 7c 6f cf 6d 68 ae 2f ed 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 Data Ascii: xe\|omh/]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{@
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: 1f 10 b2 9b 45 88 10 be 6f 6b d5 94 10 31 f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 Data Ascii: Eok1E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: d8 8f b8 6e ef 46 85 6d bb 83 69 52 9d 25 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba Data Ascii: nFmiR%]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.10	49735	104.17.24.14	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:51 UTC	428	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:52 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:52 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 14866 Expires: Wed, 04 Mar 2026 09:30:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5U4fmjAyaSxU2kVnKLhVyXHjTusX7MUl27%2BqIyluIg9eOI%2F3t8IpcWx%2FhcfOxSNQOJkdwV61VjOLTm480Vg8HRSPuZmmQ2CuNAUb2Qzh3wm1mu72zuSadbXnJ63Pmx%2BZhMjIeDQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202c13b8805939a-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:30:52 UTC	420	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:30:52 UTC	1369	IN	Data Raw: 2d 2e 34 38 33 2e 33 33 32 2d 2e 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d 2e 31 Data Ascii: -.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.1
2025-03-14 09:30:52 UTC	680	IN	Data Raw: 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 20 30 Data Ascii: 4l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4 0
2025-03-14 09:30:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.10	49736	34.117.59.81	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:52 UTC	379	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:52 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:30:52 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:30:52 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.10	49737	104.26.8.44	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:52 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:52 UTC	933	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:52 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: POST, GET, HEAD, OPTIONS, OPTIONS X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0iYxubfK7BOUqDsPmZ4%2Fi60pGucsVFaM%2Bq3phhaymxUSgIOljiTPlXx1aORBJw0z%2BoAl1MQNpFGkW2o9BjcA3QwwiANWK%2BCMjQArZD%2F3sS%2F%2Bm5WAUwxE7y8x"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c13e0ff74693-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3839&min_rtt=2088&rtt_var=4047&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2788&recv_bytes=950&delivery_rate=1398467&cwnd=83&unsent_bytes=0&cid=44ed36e2177a939b&ts=356&x=0"
2025-03-14 09:30:52 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.10	49739	104.21.48.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:54 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228254452.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:54 UTC	871	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:30:54 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2BleYtC2vgqWlrfCH4FfPWuBa7sogK0CcC%2FadDd9yBZKQWSL%2Fms1%2F6yI%2BUGFi38K74cspYyLBzj32ei5fokgir76VkMPBpZ%2BsxY8wqyFjT8YOXG3TklEYcKEWhVp72gdWa8GrZoh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c14a48c98c4d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1810&min_rtt=1797&rtt_var=701&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1155&delivery_rate=1530398&cwnd=160&unsent_bytes=0&cid=03d0a09d7f4c4b20&ts=419&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.10	49740	104.21.48.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:55 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 75 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228254452.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228254452.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:55 UTC	75	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 67 6f 63 45 68 6f 2b 4c 2b 67 73 68 73 59 64 43 55 52 50 50 4f 71 4b 30 4d 38 2f 6e 56 76 6d 59 46 70 4f 53 4a 4f 36 57 58 74 44 77 74 36 49 4f 63 4d 6a 46 65 77 4a 6d 42 45 7a 47 47 4e 31 4f 22 7d Data Ascii: {"data":"gocEho+L+gshsYdCURPPOqK0M8/nVvmYFpOSJO6WXtDwt6IOcMjFewJmBEzGGN1O"}
2025-03-14 09:30:55 UTC	871	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:30:55 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FYNARyxFCiIvHG%2FeQ2yaCoBZooxaj9R1LyH8HfUZUtgx20wLBKFyhcuZwIFLIsBrkhqPWoQGieRizBMkVaXB2OTA7buf9gPOxYi%2BL4XBJA91oqripsUgN93pXpCzjvmS%2FC34o5SU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c14fdbf64b06-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2048&min_rtt=2044&rtt_var=775&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1407&delivery_rate=1403846&cwnd=109&unsent_bytes=0&cid=b323723fd2a6de37&ts=440&x=0"
2025-03-14 09:30:55 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:30:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.10	49741	104.21.112.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:30:56 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:30:56 UTC	836	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:30:56 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kvmkk8nWjS0vYtOgDCjoZ2SUj2Jgp3ruHrN1G%2Bd%2FVgZ5dd40cvp8irlpzOaK6HY4hGDFVKWXERDzol2hl2Z8zAd1ak3gEdzcZ6TXR16UVUpYciRkDom%2FK5CUhjT9IK6tPoyapMih"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202c1559a4a5e86-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1590&min_rtt=1590&rtt_var=597&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=970&delivery_rate=1829573&cwnd=242&unsent_bytes=0&cid=89b7f57ef1efbfa8&ts=416&x=0"
2025-03-14 09:30:56 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 32 35 37 38 32 37 64 39 62 34 38 66 61 38 30 64 38 65 30 37 30 65 61 37 36 63 38 33 61 65 66 65 2d 66 37 31 37 38 66 33 66 34 66 65 64 35 33 30 63 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-257827d9b48fa80d8e070ea76c83aefe-f7178f3f4fed530c-00"}
2025-03-14 09:30:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.10	65309	35.190.80.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:31:45 UTC	548	OUT	OPTIONS /report/v4?s=kvmkk8nWjS0vYtOgDCjoZ2SUj2Jgp3ruHrN1G%2Bd%2FVgZ5dd40cvp8irlpzOaK6HY4hGDFVKWXERDzol2hl2Z8zAd1ak3gEdzcZ6TXR16UVUpYciRkDom%2FK5CUhjT9IK6tPoyapMih HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:31:45 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 14 Mar 2025 09:31:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.10	65310	35.190.80.1	443	3672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:31:46 UTC	523	OUT	POST /report/v4?s=kvmkk8nWjS0vYtOgDCjoZ2SUj2Jgp3ruHrN1G%2Bd%2FVgZ5dd40cvp8irlpzOaK6HY4hGDFVKWXERDzol2hl2Z8zAd1ak3gEdzcZ6TXR16UVUpYciRkDom%2FK5CUhjT9IK6tPoyapMih HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 407 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:31:46 UTC	407	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 38 35 33 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 38 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 31 32 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 Data Ascii: [{"age":48530,"body":{"elapsed_time":887,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.112.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourci
2025-03-14 09:31:46 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:31:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	05:30:19
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	05:30:19
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,10597314978764046875,15171506597599766589,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2140 /prefetch:3
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	05:30:26
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228254452.counselschambers.co.uk/"
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://case-id-1000228254452.counselschambers.co.uk/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\manifest.fingerprint

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\manifest.json

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5380_476989347\privacy-sandbox-attestations.dat

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Windows Analysis Report
http://case-id-1000228254452.counselschambers.co.uk/