Edit tour

Windows Analysis Report
http://case-id-1000228246008.counselschambers.co.uk/

Overview

General Information

Sample URL:	http://case-id-1000228246008.counselschambers.co.uk/
Analysis ID:	1638326
Infos:

Detection

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,13452090225541810052,11060446469918622517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1980 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,13452090225541810052,11060446469918622517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3260 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228246008.counselschambers.co.uk/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://case-id-1000228246008.counselschambers.co.uk/

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://case-id-1000228246008.counselschambers.co.uk/index-5b6c678b.css

Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The provided URL 'case-id-1000228246008.counselschambers.co.uk' does not match the legitimate domain of Facebook., The URL contains a subdomain 'case-id-1000228246008' which is not associated with Facebook and is suspicious., The main domain 'counselschambers.co.uk' is unrelated to Facebook, indicating a potential phishing attempt., The presence of input fields for personal information such as phone number, full name, email address, and birthday is common in phishing sites attempting to collect sensitive data. DOM: 2.1.pages.csv
Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The provided URL 'case-id-1000228246008.counselschambers.co.uk' does not match the legitimate domain of Facebook., The URL contains a subdomain 'case-id-1000228246008' which is not associated with Facebook and is suspicious., The main domain 'counselschambers.co.uk' is unrelated to Facebook, indicating a potential phishing attempt., The presence of input fields for personal information such as phone number, full name, email address, and birthday is common in phishing sites attempting to harvest sensitive data. DOM: 2.2.pages.csv

AI detected suspicious Javascript

Source: 1.5..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://case-id-1000228246008.counselschambers.co.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. It appears to be collecting user IP addresses and sending encrypted data to an external server, which is highly suspicious and indicative of potential malicious intent.

HTML page contains obfuscated javascript

Source: https://case-id-1000228246008.counselschambers.co.uk/help.html	HTTP Parser: var _0x128029=_0x3b3d;function _0x3b3d(_0x15d4a1,_0x5b219b){var _0x29e93f=_0x416c();return
Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html	HTTP Parser: var _0x58efb4=_0x136f;(function(_0x29482d,_0x453fa9){var _0x81cf80=_0x136f,_0x523557=_0x294

Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html

HTTP Parser: Number of links: 0

Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html

HTTP Parser: Title: Business Help Center | Privacy Policy does not match URL

Source: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js

HTTP Parser: ;(function (root, factory) {if (typeof exports === "object") {// commonjsmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// amddefine([], factory);}else {// global (browser)root.cryptojs = factory();}}(this, function () {/*globals window, global, require*//** * cryptojs core components. */var cryptojs = cryptojs || (function (math, undefined) { var crypto; // native crypto from window (browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // native crypto in web worker (browser) if (typeof self !== 'undefined' && self.crypto) { crypto = self.crypto; } // native crypto from worker if (typeof globalthis !== 'undefined' && globalthis.crypto) { crypto = globalthis.crypto; } // native (experimental ie 11) crypto from window (browser) if (!crypto && typeof window !== 'undefined' && window.mscrypto) { ...

Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found

Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found
Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found

Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found
Source: https://case-id-1000228246008.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.228:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.228:443 -> 192.168.2.5:49762 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: case-id-1000228246008.counselschambers.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiJo8sBCIWgzQEI9s/OAQjI0c4BCIDWzgEI0uDOAQiv5M4BCOLkzgEIi+XOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help.html HTTP/1.1Host: case-id-1000228246008.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-5b6c678b.css HTTP/1.1Host: case-id-1000228246008.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://case-id-1000228246008.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228246008.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react/umd/react.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228246008.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228246008.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228246008.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228246008.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228246008.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228246008.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228246008.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /case-support.html HTTP/1.1Host: case-id-1000228246008.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://case-id-1000228246008.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228246008.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228246008.counselschambers.co.uk/index-5b6c678b.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://case-id-1000228246008.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228246008.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228246008.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_122.2.dr

String found in binary or memory: /*Dirty hack for facebook big video page e.g: https://www.facebook.com/abc/videos/...*/ equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: case-id-1000228246008.counselschambers.co.uk
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: ipapi.co
Source: global traffic	DNS traffic detected: DNS query: pickoutsourcing.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com

Source: unknown

HTTP traffic detected: POST /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveContent-Length: 55sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/json; charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://case-id-1000228246008.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228246008.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top

Source: chromecache_109.2.dr, chromecache_122.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_109.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/intl-tel-input
Source: chromecache_109.2.dr, chromecache_122.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-bootstrap
Source: chromecache_109.2.dr, chromecache_122.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Source: chromecache_109.2.dr, chromecache_122.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Source: chromecache_109.2.dr, chromecache_122.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1e9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1eb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f1.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fa.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fc.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1eb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ef.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fc.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fe.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1eb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ed.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ee.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f1.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fa.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fc.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ef.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f0.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1e8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ef.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1eb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ed.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f5.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fa.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fc.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fe.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1fa.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1e9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f1.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f5.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ed.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ee.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f5.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1ee.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f0.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fa.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fe.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ed.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f1.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fa.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fd.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fe.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ee.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f1.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f4-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1eb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ed.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f0.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f1.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fc.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f6-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fa.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fc.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ee.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f1.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fe.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1e9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ed.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f1.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f4.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f7.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fb.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fc.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ec.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1fe.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ff.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1f3.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1fa.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fc-1f1f8.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fd-1f1f0.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fe-1f1ea.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1e6.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1f2.svg
Source: chromecache_109.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1fc.svg
Source: chromecache_109.2.dr, chromecache_122.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: chromecache_100.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_110.2.dr	String found in binary or memory: https://github.com/jackocnr/intl-tel-input.git
Source: chromecache_100.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_105.2.dr, chromecache_101.2.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_113.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_117.2.dr	String found in binary or memory: https://tools.ietf.org/html/rfc9110#section-15.5.1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.185.228:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.228:443 -> 192.168.2.5:49762 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1224_1189164390

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1224_1189164390

Jump to behavior

Source: classification engine

Classification label: mal72.phis.win@24/42@49/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,13452090225541810052,11060446469918622517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1980 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,13452090225541810052,11060446469918622517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3260 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228246008.counselschambers.co.uk/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,13452090225541810052,11060446469918622517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1980 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,13452090225541810052,11060446469918622517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3260 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://case-id-1000228246008.counselschambers.co.uk/	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label	Link
https://case-id-1000228246008.counselschambers.co.uk/index-5b6c678b.css	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
ipapi.co	104.26.8.44	true	false	high
scontent.xx.fbcdn.net	157.240.251.9	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
case-id-1000228246008.counselschambers.co.uk	104.21.70.234	true	true	unknown
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
ipinfo.io	34.117.59.81	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.180.99	true	false	high
www.google.com	142.250.185.228	true	false	high
pickoutsourcing.com	104.21.48.1	true	false	high
beacons.gvt2.com	142.250.180.67	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
static.xx.fbcdn.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js	false		high
https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js	false		high
https://case-id-1000228246008.counselschambers.co.uk/index-5b6c678b.css	false	Avira URL Cloud: malware	unknown
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=%2BRFxOmZ%2FdEBpf0FmCb6SRQqpkjLhHfhW1ZhfjwdSaFNd2Hr7F%2FA6KARBqpcY5pYRZuRdezxzxe9%2FJtusFht5FqhGiTLbnm8Y641J3b69YnDg5B%2Bsn5efT87ETGYhmBgG%2FHnHkcaY	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW	false		high
https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ipinfo.io/missingauth	chromecache_105.2.dr, chromecache_101.2.dr	false	high
https://tools.ietf.org/html/rfc9110#section-15.5.1	chromecache_117.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ff.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f4.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e6.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f7.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ed.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f8.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f6.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fe.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f3.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ed.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f7.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f3.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f7.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ee.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ea.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f2.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f0.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e9.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f0.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fc.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ed.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ea.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fc.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1e9.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e8.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e6.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ff.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f1.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1fa.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f7.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f9.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f7.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f2.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fe.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ff.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1fe.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f9.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fb.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ec.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ec.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ea.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f4.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f8.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg	chromecache_109.2.dr	false	high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_113.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fb.svg	chromecache_109.2.dr	false	high
https://getbootstrap.com/)	chromecache_100.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e8.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fc.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f1.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f8.svg	chromecache_109.2.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f2.svg	chromecache_109.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.70.234	case-id-1000228246008.counselschambers.co.uk	United States	13335	CLOUDFLARENETUS	true
104.26.8.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
104.21.48.1	pickoutsourcing.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.67.168.191	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.69.226	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638326
Start date and time:	2025-03-14 10:41:46 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://case-id-1000228246008.counselschambers.co.uk/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@24/42@49/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 216.58.206.46, 108.177.15.84, 142.250.185.206, 172.217.18.110, 142.250.186.110, 142.250.186.46, 172.217.18.14, 142.250.185.202, 172.217.16.138, 142.250.181.234, 172.217.18.106, 172.217.23.106, 142.250.185.74, 142.250.185.106, 142.250.185.138, 172.217.16.202, 216.58.206.74, 172.217.18.10, 216.58.206.42, 142.250.186.74, 142.250.185.234, 216.58.212.170, 142.250.186.42, 142.250.181.238, 142.250.185.67, 142.250.186.131, 23.60.203.209, 40.126.31.73, 184.86.251.9, 20.223.36.55, 4.175.87.197, 150.171.27.10, 2.19.96.104
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, g.bing.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://case-id-1000228246008.counselschambers.co.uk/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io//json?
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228246008.counselschambers.co.uk/banner-b1482d4c.webp
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	119175
Entropy (8bit):	5.312931607745592
Encrypted:	false
SSDEEP:	3072:rOoUFMlBxwlHb1Vjcpnd8US74ZnhA1IvUbidhmje7rP5yx60sC:ZZhAqvUbghUe7rPkkc
MD5:	365E05DCCD2211EEABA31DEFF514F5FA
SHA1:	A36F8E61ECCC12C333A44713DC4FAE6EC1548FC4
SHA-256:	150523E0558852A799AAE470EE18FDB61F89CF260EE6DA8EFD8687621156AE33
SHA-512:	F63CEC52665F84B468648C1C21AA4367724925E38C92E460851E0BCEAA9A6AAF215BBBCAD63945C7AF4A58368400F86035275E5D1C5AA308A856E79ED1B71534
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js
Preview:	/! For license information please see react-bootstrap.min.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","react-dom"],t):"object"==typeof exports?exports.ReactBootstrap=t(require("react"),require("react-dom")):e.ReactBootstrap=t(e.React,e.ReactDOM)}(self,((e,t)=>(()=>{var n={814:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function o(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var a=typeof n;if("string"===a\|\|"number"===a)e.push(n);else if(Array.isArray(n)){if(n.length){var s=o.apply(null,n);s&&e.push(s)}}else if("object"===a){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var i in n)r.call(n,i)&&n[i]&&e.push(i)}}}return e.join(" ")}e.exports?(o.default=o,e.exports=o):void 0===(n=function(){return o}.apply(t,[]))\|\|(e.expor

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
URL:	https://ipapi.co/ip
Preview:	8.46.123.189

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19157), with no line terminators
Category:	downloaded
Size (bytes):	19157
Entropy (8bit):	4.937770512209066
Encrypted:	false
SSDEEP:	192:6wR+nXh/TVc6jU+4v7fix43obCfCfIlSc:6wRWXhK6jU+4vTixaACaglSc
MD5:	6B7FB2EE130535419A67AFB198F41C2B
SHA1:	FFB8A25633C4DDEAB81D1B1742AC2FD0B442A4C6
SHA-256:	C6956E8710CF477F7014440385AE16EE4B8CC7ECFD02FDDD4D2F0C6C7FD15845
SHA-512:	CB27BFBB47A142CAD5ADF49DE9B893D7BB77F5183D90D73EBC435C09766E333D9AF8B5851AF5D49D8B96516EA96DF623D637016FF0B7F54670D9C890BF00C3BE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css
Preview:	.iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0!important;margin-bottom:0!important;padding-right:36px;margin-right:0}.iti__flag-container{position:absolute;top:0;bottom:0;right:0;padding:1px}.iti__selected-flag{z-index:1;position:relative;display:flex;align-items:center;height:100%;padding:0 6px 0 8px}.iti__arrow{margin-left:6px;width:0;height:0;border-left:3px solid transparent;border-right:3px solid transparent;border-top:4px solid #555}.iti__arrow--up{border-top:none;border-bottom:4px solid #555}.iti__country-list{position:absolute;z-index:2;list-style:none;text-align:left;padding:0;margin:0 0 0 -1px;box-shadow:1px 1px 4px rgba(0,0,0,.2);background-color:#fff;border:1px solid #ccc;white-space:nowrap;max-height:200px;overflow-y:scroll;-webkit-overflow-scrolling:touch}.iti__country-lis

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2208), with CRLF line terminators
Category:	downloaded
Size (bytes):	227261
Entropy (8bit):	5.016535362134103
Encrypted:	false
SSDEEP:	1536:aZcgFTzlCTvPbT+QiT9YWBTV9hT7OcTTKbTdwCTGA6TCVOTvE/Te2nTtmBUTvGhM:9kY8W
MD5:	33DE88FD93505A3C17A0088597503FF1
SHA1:	6003D4597724708F72D0231A42A957833EF23AE1
SHA-256:	81AE6D3FCDED62CECEA0D0F94EA27C5C1AD7EAAC23F6FB61C6AF93634B359060
SHA-512:	98A49CF4124FFD074282FECACDE6FBA2E88FE591B579C9FC4D511E0017D616446D7D0BC26925D1615380618274F9AA37B16C8C82F3D11464E3E8BA86481F74AD
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228246008.counselschambers.co.uk/case-support.html
Preview:	<html lang="en">..<head>.. <meta charset="UTF-8">.. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,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

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26993)
Category:	downloaded
Size (bytes):	29519
Entropy (8bit):	5.620109327436002
Encrypted:	false
SSDEEP:	768:ewqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCY9R:4fUQWodCjgtmKgNzazCw
MD5:	F75E31308C096A103A106C4F5A5D9A66
SHA1:	B6F78285064ECDF283081606D37B643C05D58B61
SHA-256:	FD20B6E4BB5AF8690406A2DE275141EA221822BA78A99261B5412D2BA9CA217C
SHA-512:	FA04A1C81F065A83A25CDC0E9416985DD2D3899B75D08CBAC6300219A769A8CB36D1A24EA21F8F26DDDBC14540E8279F7BBC85EEF6E55FA430C976625704D61A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js
Preview:	/. International Telephone Input v17.0.19. * https://github.com/jackocnr/intl-tel-input.git. * Licensed under the MIT license. */..!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use strict";return function(){function b(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function c(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object.defineProperty(a,d.key,d)}}function d(a,b,d){return b&&c(a.prototype,b),d&&c(a,d),a}for(var e=[["Afghanistan (............)","af","93"],["Albania (Shqip.ri)","al","355"],["Algeria (..........)","dz","213"],["American Samoa","as","1",5,["684"]],["Andorra","ad","376"],["Angola","ao","244"],["Anguilla","ai","1",6,["264"]],["Antigua and Barbuda","ag","1",7,["268"]],["Argentina","ar","54"],["Armenia (........)","am","374"],["Aruba","aw","297"],["Ascension I

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.431705709467301
Encrypted:	false
SSDEEP:	3:O9GonPL5Yn:OAMPL5Yn
MD5:	EDFAF206F17E8D7E4D6F27F33C96B48E
SHA1:	C297DB3C574D5B04330A0038F5D06F033D63731A
SHA-256:	734FD4FF7A23372A1C4B3EB543166B23A9ACFCE0A726E35E62F9466F4966355C
SHA-512:	01420F966754A6AEA6EE15BA3AFF1F72F64B26102B72FD083BC73380B5FD80D223AFB89CA935E779C0B4DA9DBE726594C40DD0ED5178CD10D899DD1EC8D2C15E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIuCRP0SGcGaTPmEgUNEg_8ahIFDdYE7rESBQ2DqFs9EgUNAwLfGSHi-ASW8f4sKA==?alt=proto
Preview:	CiQKBw0SD/xqGgAKBw3WBO6xGgAKBw2DqFs9GgAKBw0DAt8ZGgA=

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131835
Entropy (8bit):	5.376665898737896
Encrypted:	false
SSDEEP:	1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm
MD5:	7D4842A904E5D5D1B19240075998B111
SHA1:	FEB8DDC9D0566A4FA0971A6E1138658618CDACFE
SHA-256:	35F4F974F4B2BCD44DA73963347F8952E341F83909E4498227D4E26B98F66F0D
SHA-512:	E9AD75D3BAD3940E2062980702A6F02C0B719968A905D24572AF32E52FDA4E07B7069F95024940066D8B3BE2A0E75BCE591F49319AB53AF8E5E6DA65B8DA5379
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,zb){"object"===typeof exports&&"undefined"!==typeof module?zb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],zb):(Q=Q\|\|self,zb(Q.ReactDOM={},Q.React))})(this,function(Q,zb){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function mb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function bj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	downloaded
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228246008.counselschambers.co.uk/190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
Preview:	8.46.123.189

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	198114
Entropy (8bit):	4.547483897370231
Encrypted:	false
SSDEEP:	6144:nBx4x8tgo06sGxw8nE94ltDxa6REI/eYcicDmcKCU4MJ9x8BRnE6qSVYbc4sx6t+:nBx4x8tgo06sGxw8nE94ltDxa6REI/eB
MD5:	F716A02969E459FDFC8F37DEE235E925
SHA1:	6F2BB245FEAA0997FA30B085AF0E8990D21395CC
SHA-256:	F0BDF25FDA8F9AF5920C82070775864C7E1166EB31540D030E6B80A382E39CE1
SHA-512:	3505662F3372E0BAF9413AE65EFABF5B34CC5274479AFEE7C884FF33A2F218F052F9321E47167E6106AA5B18E9469BD13104AE60F414459CFFFA92E2F35C5778
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Preview:	;(function (root, factory) {..if (typeof exports === "object") {...// CommonJS...module.exports = exports = factory();..}..else if (typeof define === "function" && define.amd) {...// AMD...define([], factory);..}..else {...// Global (browser)...root.CryptoJS = factory();..}.}(this, function () {.../globals window, global, require/.../*.. CryptoJS core components... */..var CryptoJS = CryptoJS \|\| (function (Math, undefined) {... var crypto;... // Native crypto from window (Browser).. if (typeof window !== 'undefined' && window.crypto) {.. crypto = window.crypto;.. }... // Native crypto in web worker (Browser).. if (typeof self !== 'undefined' && self.crypto) {.. crypto = self.crypto;.. }... // Native crypto from worker.. if (typeof globalThis !== 'undefined' && globalThis.crypto) {.. crypto = globalThis.crypto;.. }... // Native (experimental IE 11) crypto from window (Browser).. if (!crypto && typeof window !== 'undefined' &&

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	248
Entropy (8bit):	5.047592457338279
Encrypted:	false
SSDEEP:	6:Yj9K46ATx1ixqCj9pWReLVTAAEXtCD2hc1MG7dq0K:Ys/Ex1E9pWeGADD2kMG7dVK
MD5:	B8C014B171470E2CD991694CBA2070D1
SHA1:	3AEF2181EC2EA25EF15FAF4DF17907C8A5244394
SHA-256:	1611234ACE6D608218195BA7E512DEB42B861CA47B05072D5AB817B6EFDAC89C
SHA-512:	C027BF2DE1DEEFAA88B164057A553D9046355E892DB4A42D8573C7CD46A8A9361189E09400F3ED1A8BED0DE35BF50333C99A7C8EF465F082BA544DC9CF97674D
Malicious:	false
Reputation:	low
Preview:	{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-68c4ccb9b06034de2f84e744e293d164-210c80a7886b9636-00"}

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	10751
Entropy (8bit):	5.3269914599293475
Encrypted:	false
SSDEEP:	192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G
MD5:	E91B2616629791B375867C298DC846CC
SHA1:	AA77AE4C49F525BC21DE1D04F08A5D73962C7CCE
SHA-256:	D949F1C3687AEDADCEDAC85261865F29B17CD273997E7F6B2BFC53B2F9D4C4DD
SHA-512:	415B3C2E8E3717D952B81CA469D0DBD284970CBFC16D9E7CF2EAD6542470488A1EC10BFF1308357FCE262B753BF746D9D057E115AD584905262211BEA4844A7A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13509), with CRLF line terminators
Category:	downloaded
Size (bytes):	13511
Entropy (8bit):	4.942883944272427
Encrypted:	false
SSDEEP:	192:4MmQ24+k5axPxEXaC0YMUcD5vqSWgjMXoe6MUoSk:SNk5axPxEXaC/cD5S5gjMXoe6MUA
MD5:	96ECDF4FA06E0AFBDA7E293121EEECFA
SHA1:	6BAE397B359FBF59FADB416F293ED7F25679C4C7
SHA-256:	343F3A116F0963DE569D4623FDED0ED8C7F5C44D5498B1F5AFC25B2571027E96
SHA-512:	6A42A153B3B3E7159FC59518ECD72A4D0204971C954011B91549F2DFA55D4B23961FA851A48945246B0AE46D7AF236BB6B7AA260647DD1DD4F7FEE529481F0B4
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228246008.counselschambers.co.uk/index-5b6c678b.css
Preview:	.logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-reduced-motion: no-preference){a:nth-of-type(2) .logo{animation:logo-spin infinite 20s linear}}.card{padding:2em}.read-the-docs{color:#888}.banner{position:relative;padding:50px 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;height:100%;width:100%}.banner-content{top:0;right:0;bottom:0;left:0;z-index:100;display:flex;position:relative;justify-content:center;align-items:center;flex-direction:column;color:#fff!important}.banner-content h5{font-size:14px;font-family:Freight Sans LF Pro Semibold,Helvetica,Arial,sans-serif;text-rendering:optimize

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	dropped
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	25882
Entropy (8bit):	5.029415269944235
Encrypted:	false
SSDEEP:	384:4A2qOzG+FP/KD4KdcEO22gF+Ln1S4Fd5IcL/Ly3LFwtRFZQ7YK0su:7OG+PUOI+Ln1S4FYcL/Ly3RwtRFZQGsu
MD5:	E95835699306BA82C03CD5E63A08CCE7
SHA1:	40392030E706DFA942A34728F75953BD47FFE685
SHA-256:	0228800DE3CA222597EA71E5B2BF719441F2441EC2266A17787739A87919C138
SHA-512:	A2478675B14DD3555A579FC172A5B053F5C43E3DF7917524F8F517646DD7355BD83DEF86D4DFD903BA69B35F50A8EC5C095BBFC833CF22CF5E64F9BC20B91F97
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228246008.counselschambers.co.uk/help.html
Preview:	<html lang="en">.<head>. <meta charset="UTF-8">. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,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

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	4.802436867696083
Encrypted:	false
SSDEEP:	3:PouVKQzhq4oEEtGFivYMNbPdNAOkADFoHSb5Rhy/3GXIMBWhtoAcMBcacWWGu:h4Qzhq4HEtSKYk7fWmmHS7QlMch0MWXJ
MD5:	B8F462CEDB09DF5643A7276846674FE4
SHA1:	82DDCECD5ED9A9BBBCCC19858FE9CF52C4EC3FC4
SHA-256:	6E1018597010AA20DDD8B219D623807C0BBC6A2BD4E8A916E748A3EAC0DB2A6E
SHA-512:	864B2B3F271F265CE452A00E093DFB456FF16E1F5834A830BE011FBFCE3C447EB234C7FF753BE16EF4A1B57AD17C70BC524FAAA6A8D46B782ECE5AEB4112BAC9
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228246008.counselschambers.co.uk/
Preview:	<!DOCTYPE html>..<html lang="vi">..<head>.. <meta charset="UTF-8">.. <script>.. window.location.href = "help.html";.. </script>..</head>..<body>..</body>..</html>..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:42:38.538250923 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:42:38.848475933 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:42:39.457885027 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:42:39.504781008 CET	49672	443	192.168.2.5	204.79.197.203
Mar 14, 2025 10:42:40.660959005 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:42:43.067224979 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:42:47.879690886 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:42:49.114119053 CET	49672	443	192.168.2.5	204.79.197.203
Mar 14, 2025 10:42:53.061196089 CET	49713	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:42:53.061225891 CET	443	49713	142.250.185.228	192.168.2.5
Mar 14, 2025 10:42:53.061364889 CET	49713	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:42:53.061531067 CET	49713	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:42:53.061544895 CET	443	49713	142.250.185.228	192.168.2.5
Mar 14, 2025 10:42:53.714284897 CET	443	49713	142.250.185.228	192.168.2.5
Mar 14, 2025 10:42:53.714349031 CET	49713	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:42:53.715456009 CET	49713	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:42:53.715467930 CET	443	49713	142.250.185.228	192.168.2.5
Mar 14, 2025 10:42:53.715745926 CET	443	49713	142.250.185.228	192.168.2.5
Mar 14, 2025 10:42:53.770193100 CET	49713	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:42:55.735795021 CET	49714	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:55.735850096 CET	443	49714	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:55.735972881 CET	49714	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:55.736253977 CET	49714	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:55.736270905 CET	443	49714	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.196012974 CET	443	49714	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.196108103 CET	49714	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.197166920 CET	49714	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.197179079 CET	443	49714	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.197412968 CET	443	49714	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.197751045 CET	49714	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.240336895 CET	443	49714	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.450053930 CET	49713	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:42:56.496323109 CET	443	49713	142.250.185.228	192.168.2.5
Mar 14, 2025 10:42:56.608597994 CET	443	49714	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.608692884 CET	443	49714	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.608751059 CET	49714	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.611270905 CET	49714	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.611275911 CET	443	49714	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.641905069 CET	49713	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:42:56.642106056 CET	443	49713	142.250.185.228	192.168.2.5
Mar 14, 2025 10:42:56.642189026 CET	49713	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:42:56.679227114 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.679274082 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.679356098 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.679704905 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.679753065 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.679815054 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.681113958 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.681129932 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:56.681358099 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:56.681371927 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.137546062 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.140547037 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.140567064 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.140753984 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.140759945 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.143799067 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.144139051 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.144165039 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.483776093 CET	49676	443	192.168.2.5	20.189.173.14
Mar 14, 2025 10:42:57.561817884 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.561963081 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.562011003 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.562092066 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.562109947 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.562182903 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.562222004 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.562355042 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.562423944 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.562431097 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.566396952 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.566437960 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.566463947 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.566502094 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.566513062 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.566523075 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.566528082 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.566675901 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.585690975 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.585714102 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.592211008 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:57.592253923 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:57.592322111 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:57.592597008 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:57.592612982 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:57.593559980 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:57.593570948 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:57.593627930 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:57.596085072 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:57.596098900 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:57.597426891 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:57.597461939 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:57.597532034 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:57.597733974 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:57.597750902 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:57.699359894 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.699421883 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.699491978 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.699564934 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.699584007 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.699615955 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.699624062 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.699826002 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.699846029 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.699867010 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.699922085 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.699922085 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.699929953 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.699980021 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.700118065 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.700403929 CET	49715	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.700418949 CET	443	49715	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.961924076 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.961971045 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.962002993 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.962038040 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.962059975 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.962066889 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.962083101 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.962086916 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.962313890 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.962352991 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.962707996 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.962737083 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.962773085 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.962783098 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.962817907 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.966466904 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.966547966 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:57.966706991 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.966968060 CET	49716	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:57.966984987 CET	443	49716	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:58.077203035 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.078011036 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.078104019 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.078138113 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.078912020 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.079001904 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.079740047 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.079751968 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.079982996 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.079996109 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.080007076 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.080140114 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.080144882 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.080235958 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.080387115 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.080456972 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.080636978 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.080998898 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.128320932 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.128324032 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.128334045 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.175384045 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.176192045 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.184108973 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.184144020 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.184190035 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.184217930 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.184233904 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.184267998 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.186676025 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.186700106 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.186739922 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.186753035 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.186780930 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.186795950 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.208859921 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.208918095 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.208954096 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.208992004 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.209023952 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.209043980 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.209084034 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.209089994 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.209103107 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.209285021 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.209398031 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.209757090 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.210148096 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.210155010 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.211216927 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.213340998 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.254997969 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.255016088 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.265131950 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.265171051 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.265219927 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.265254974 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.265269995 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.265602112 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.266432047 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.266459942 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.266493082 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.266503096 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.266527891 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.266544104 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.272105932 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.272140026 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.272169113 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.272183895 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.272207975 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.272231102 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.273133039 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.273154974 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.273199081 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.273204088 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.273242950 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.295623064 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.295679092 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.295700073 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.295727968 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.295773029 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.295789003 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.295798063 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.295833111 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.296039104 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296112061 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296217918 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296256065 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.296267033 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296320915 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.296662092 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296722889 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296791077 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.296804905 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296900034 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296927929 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296963930 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.296976089 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.296982050 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.297029018 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.297482014 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.297528982 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.297534943 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.297636032 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.297677994 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.297710896 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.297719002 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.297769070 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.338174105 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.352610111 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.352639914 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.352711916 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.352741003 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.352758884 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.352891922 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.353410959 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.353439093 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.353470087 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.353487968 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.353506088 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.353526115 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.354481936 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.354501009 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.354583025 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.354583025 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.354594946 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.354670048 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.355026007 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.355042934 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.355084896 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.355093002 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.355129004 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.355261087 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.355319977 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.355329990 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.355345964 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.355465889 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.357738972 CET	49718	443	192.168.2.5	151.101.2.137
Mar 14, 2025 10:42:58.357768059 CET	443	49718	151.101.2.137	192.168.2.5
Mar 14, 2025 10:42:58.358190060 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.358207941 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.358242035 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.358252048 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.358278036 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.358290911 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.361166000 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.361185074 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.361218929 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.361232996 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.361246109 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.361291885 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.368696928 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:58.368742943 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:58.369014025 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:58.369530916 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.369579077 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.369745016 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.370011091 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:58.370023012 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:58.370110989 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.370125055 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.380744934 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.380763054 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.382208109 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.382245064 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.382291079 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.382356882 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.382356882 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.382360935 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.382376909 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.382580996 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.382725954 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.382747889 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.383101940 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.383141994 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.383193016 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.383193016 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.383193016 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.383196115 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.383212090 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.383316040 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.383352041 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.383498907 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.383505106 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.383562088 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.383992910 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.384090900 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.384242058 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.384298086 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.384298086 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.384298086 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.384313107 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.384923935 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.385123014 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.385162115 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.385178089 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.385299921 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.385525942 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.385526896 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.385539055 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.385703087 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.385914087 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.386020899 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.386087894 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.386087894 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.386097908 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.386212111 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.424843073 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.424957991 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.441153049 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.441178083 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.441251040 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.441283941 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.441303015 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.441313982 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.441793919 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.441816092 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.441845894 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.441852093 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.441886902 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.442338943 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.442353964 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.442405939 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.442410946 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.443557978 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.443583012 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.443612099 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.443618059 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.443653107 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.445710897 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.445730925 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.445784092 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.445790052 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.445811033 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.445827961 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.446666002 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.446682930 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.446753979 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.446759939 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.446791887 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.449388981 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.449409962 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.449456930 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.449481010 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.449487925 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.449523926 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.449534893 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.449625969 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.452579975 CET	49717	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.452598095 CET	443	49717	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.468926907 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469042063 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469091892 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.469091892 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.469110966 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469161987 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469352007 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469357967 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.469367981 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469403982 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.469580889 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469618082 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469638109 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.469645977 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469665051 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.469827890 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.469985008 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.469994068 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.470052004 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.470058918 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.470128059 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.470264912 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.470334053 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.470567942 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.470700026 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.470724106 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.470797062 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.470977068 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.471019030 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.471041918 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.471052885 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.471091986 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.471091986 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.471338034 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.471431971 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.471560001 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.471647024 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.471784115 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.471919060 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.471976042 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.472060919 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.472184896 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.472239971 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.472249031 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.472296000 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.472675085 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.472752094 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.472888947 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.472923994 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.472965002 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.472965956 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.472980022 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.472995996 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.473083973 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.473159075 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.575340986 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.585820913 CET	49719	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:42:58.585850000 CET	443	49719	104.17.24.14	192.168.2.5
Mar 14, 2025 10:42:58.753761053 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.753827095 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.753976107 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.754111052 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.754156113 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.754249096 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.755045891 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.755067110 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.755182028 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.755197048 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.761780024 CET	49724	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:58.761816025 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:58.761908054 CET	49725	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:58.761934042 CET	49724	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:58.761938095 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:58.762005091 CET	49725	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:58.762137890 CET	49724	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:58.762151003 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:58.762284994 CET	49725	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:58.762300014 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:58.820919037 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.821357965 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.821392059 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.821574926 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.821579933 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.824799061 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:58.825181961 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:58.825198889 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:58.825406075 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:58.825412035 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:58.922888041 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.923120975 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.923146963 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.923171997 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.923170090 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.923197985 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.923214912 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.923646927 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.923690081 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.923702955 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.923711061 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.923753023 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.923758030 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.924846888 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.924891949 CET	443	49721	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:58.925044060 CET	49721	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:58.941087961 CET	49726	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:58.941143990 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:58.941279888 CET	49726	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:58.941346884 CET	49726	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:58.941359043 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.207659006 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.207731962 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.208529949 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.208554029 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.208816051 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.209325075 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.218214989 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.218355894 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.218799114 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.218806028 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.219060898 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.219408989 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.256329060 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.260322094 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.264183998 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.264218092 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.264239073 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.264249086 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.264281988 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.264290094 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.264302969 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.264316082 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.264344931 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.264349937 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.264355898 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.264413118 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.264420033 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.270232916 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.270261049 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.270312071 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.270318031 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.270417929 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.270423889 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.306523085 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.307024002 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.307056904 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.307073116 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.307087898 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.307116032 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.307136059 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.314330101 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.314356089 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.314373016 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.314405918 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.314523935 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.314589977 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.314807892 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.314834118 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.314858913 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.314873934 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.314909935 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.322063923 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.323254108 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.331641912 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.346201897 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.346231937 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.346282005 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.346304893 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.346323013 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.346419096 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.347486973 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.348332882 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.348378897 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.348388910 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.348401070 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.348438025 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.348556995 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.348612070 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.348718882 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.348730087 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.348921061 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.348948956 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.348965883 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.348972082 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.349020958 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.349064112 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.349070072 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.349137068 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.349189043 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.352406979 CET	49720	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:42:59.352423906 CET	443	49720	104.21.70.234	192.168.2.5
Mar 14, 2025 10:42:59.374272108 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.392421007 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.392476082 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.392513990 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.392522097 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.392549038 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.392677069 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.392714024 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.392723083 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.392750025 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.392759085 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.392765999 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.392803907 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.392816067 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.393497944 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.393523932 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.393551111 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.393551111 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.393564939 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.393584967 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.396620035 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:42:59.396651983 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:42:59.396879911 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:42:59.397032022 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:42:59.397064924 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:42:59.399578094 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.399601936 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.399621010 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.399640083 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.399677038 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.399683952 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.400166035 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.400209904 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.400276899 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.400278091 CET	49724	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.400285959 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.400295019 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.400330067 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.400336027 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.400345087 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.400377989 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.401015997 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.402054071 CET	49724	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.402061939 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.402349949 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.402611971 CET	49724	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.420593977 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.420623064 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.420697927 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.420717955 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.420813084 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.422339916 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.422362089 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.422424078 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.422434092 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.422450066 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.422605991 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.424838066 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.424890995 CET	49725	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.425442934 CET	49725	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.425451040 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.425694942 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.425947905 CET	49725	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.444370985 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.444396973 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.448317051 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.468323946 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.479757071 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.479768991 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.479785919 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.479793072 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.479799986 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.479851007 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.479883909 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.479903936 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.479955912 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.482232094 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.482239962 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.482264996 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.482302904 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.482325077 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.482340097 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.482359886 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.486717939 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.486737013 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.486788988 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.486805916 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.486844063 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.508239985 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.508266926 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.508321047 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.508343935 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.508354902 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.508459091 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.509090900 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.509109020 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.509154081 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.509160995 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.509224892 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.509279966 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.510699987 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.510720968 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.510793924 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.510793924 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.510802031 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.510885954 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.511750937 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.511765957 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.511847019 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.511854887 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.511897087 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.530167103 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.530186892 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.530232906 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.530253887 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.530282021 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.530299902 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.566382885 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.566399097 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.566437006 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.566462040 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.566483974 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.566504002 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.566513062 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.566711903 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.566817045 CET	49722	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.566831112 CET	443	49722	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.570449114 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.570511103 CET	49726	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.571413040 CET	49726	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.571423054 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.571691036 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.571980953 CET	49726	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.596297026 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.596355915 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.596374989 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.596390963 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.596432924 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.596862078 CET	49723	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:42:59.596879005 CET	443	49723	151.101.1.229	192.168.2.5
Mar 14, 2025 10:42:59.612323999 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.638704062 CET	49730	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:42:59.638740063 CET	443	49730	104.26.8.44	192.168.2.5
Mar 14, 2025 10:42:59.638791084 CET	49730	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:42:59.639117002 CET	49730	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:42:59.639136076 CET	443	49730	104.26.8.44	192.168.2.5
Mar 14, 2025 10:42:59.785830021 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.785984993 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.786039114 CET	49724	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.786063910 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.786078930 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.786125898 CET	49724	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.787132978 CET	49724	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.787147999 CET	443	49724	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.828578949 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.828691006 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.828771114 CET	49725	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.828788996 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.828813076 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.828866959 CET	49725	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.834619999 CET	49725	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.834647894 CET	443	49725	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.852814913 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:42:59.852968931 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:42:59.853421926 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:42:59.853434086 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:42:59.853697062 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:42:59.854074001 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:42:59.896327972 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:42:59.956706047 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.956856966 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.956912041 CET	49726	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.956928015 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:42:59.956976891 CET	49726	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.960498095 CET	49726	443	192.168.2.5	157.240.251.9
Mar 14, 2025 10:42:59.960515976 CET	443	49726	157.240.251.9	192.168.2.5
Mar 14, 2025 10:43:00.193671942 CET	443	49730	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.193775892 CET	49730	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.194937944 CET	49730	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.194952011 CET	443	49730	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.195200920 CET	443	49730	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.195672035 CET	49730	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.240319014 CET	443	49730	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.285249949 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285310030 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285346031 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285386086 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285391092 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.285403013 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285445929 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285454035 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.285485983 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.285486937 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285500050 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285545111 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285551071 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.285558939 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.285610914 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.289762020 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.336613894 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.336628914 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.371834993 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.371865988 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.371898890 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.371921062 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.371937037 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.371949911 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.371983051 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.372054100 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.372061014 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.372088909 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.372113943 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.372127056 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.372136116 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.372210026 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.372216940 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.372934103 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.372971058 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.372972012 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.372982979 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.373048067 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.373054981 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.373095989 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.373327971 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.373543024 CET	49729	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:00.373559952 CET	443	49729	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:00.381680965 CET	443	49730	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.381783962 CET	443	49730	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.381827116 CET	49730	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.382293940 CET	49730	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.382313013 CET	443	49730	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.384107113 CET	49731	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.384144068 CET	443	49731	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.384202957 CET	49731	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.384365082 CET	49731	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.384380102 CET	443	49731	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.942737103 CET	443	49731	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.943386078 CET	49731	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.943413973 CET	443	49731	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:00.943587065 CET	49731	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:00.943593025 CET	443	49731	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:01.129968882 CET	443	49731	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:01.130053997 CET	443	49731	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:01.130141020 CET	49731	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:01.163657904 CET	49731	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:01.163698912 CET	443	49731	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:01.281933069 CET	49732	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:01.281980038 CET	443	49732	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:01.284938097 CET	49732	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:01.285069942 CET	49732	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:01.285079002 CET	443	49732	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:01.845644951 CET	443	49732	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:01.845731020 CET	49732	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:01.846384048 CET	49732	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:01.846390963 CET	443	49732	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:01.846641064 CET	443	49732	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:01.847038984 CET	49732	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:01.892333031 CET	443	49732	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:02.111886024 CET	443	49732	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:02.111975908 CET	443	49732	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:02.112030029 CET	49732	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:02.112931013 CET	49732	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:02.112947941 CET	443	49732	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:03.713352919 CET	49735	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:03.713408947 CET	443	49735	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:03.717166901 CET	49735	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:03.720666885 CET	49735	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:03.720681906 CET	443	49735	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:04.191644907 CET	443	49735	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:04.191704988 CET	49735	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:04.192898989 CET	49735	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:04.192912102 CET	443	49735	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:04.193212986 CET	443	49735	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:04.193545103 CET	49735	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:04.236325026 CET	443	49735	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:04.592129946 CET	443	49735	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:04.592211962 CET	443	49735	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:04.592319012 CET	49735	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:04.593019962 CET	49735	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:04.593036890 CET	443	49735	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:04.594042063 CET	49737	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:04.594075918 CET	443	49737	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:04.594605923 CET	49737	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:04.594810009 CET	49737	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:04.594818115 CET	443	49737	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.055685997 CET	443	49737	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.055990934 CET	49737	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:05.056020021 CET	443	49737	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.056158066 CET	49737	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:05.056164026 CET	443	49737	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.476959944 CET	443	49737	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.477070093 CET	443	49737	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.477606058 CET	49737	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:05.477790117 CET	49737	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:05.477808952 CET	443	49737	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.508224010 CET	49738	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:05.508275986 CET	443	49738	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.508392096 CET	49738	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:05.508595943 CET	49738	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:05.508613110 CET	443	49738	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.964272976 CET	443	49738	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.964350939 CET	49738	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:05.964817047 CET	49738	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:05.964828968 CET	443	49738	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.965161085 CET	443	49738	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:05.965497017 CET	49738	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:06.008331060 CET	443	49738	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:06.376382113 CET	443	49738	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:06.376483917 CET	443	49738	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:06.376533031 CET	49738	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:06.378658056 CET	49738	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:06.378684998 CET	443	49738	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:06.385360956 CET	49739	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.385399103 CET	443	49739	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.385541916 CET	49739	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.385674000 CET	49739	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.385689020 CET	443	49739	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.846304893 CET	443	49739	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.846636057 CET	49739	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.847579002 CET	49739	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.847589016 CET	443	49739	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.847835064 CET	443	49739	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.848236084 CET	49739	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.888323069 CET	443	49739	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.969738960 CET	443	49739	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.969815969 CET	443	49739	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.970279932 CET	49739	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.970307112 CET	443	49739	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.970685005 CET	49740	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.970721960 CET	443	49740	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:06.970755100 CET	49739	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.970755100 CET	49739	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.970812082 CET	49740	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.970942974 CET	49740	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:06.970952034 CET	443	49740	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:07.424743891 CET	443	49740	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:07.425096989 CET	49740	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:07.425121069 CET	443	49740	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:07.425268888 CET	49740	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:07.425273895 CET	443	49740	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:07.552407026 CET	443	49740	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:07.552501917 CET	443	49740	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:07.552690029 CET	49740	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:07.552719116 CET	443	49740	35.190.80.1	192.168.2.5
Mar 14, 2025 10:43:07.552795887 CET	49740	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:07.552824020 CET	49740	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:43:11.831130028 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:11.831173897 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:11.831684113 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:11.831717014 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:11.831726074 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:11.831890106 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:11.831902027 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:11.831979990 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:11.832058907 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:11.832072973 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:12.287050962 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:12.288016081 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:12.288043022 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:12.288131952 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:12.288137913 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:12.290173054 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:12.290503979 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:12.290534973 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499170065 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499233007 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499272108 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499305964 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499317884 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.499346972 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499378920 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.499412060 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499448061 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.499458075 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499604940 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499644041 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499707937 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.499716997 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.499749899 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.503757954 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.503840923 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.503938913 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.503962040 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.526639938 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.526709080 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.526777029 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.527038097 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.527055025 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.527765036 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.527801037 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.527874947 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.528151035 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.528166056 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.553857088 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.630541086 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.630629063 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.630665064 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.630691051 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.630698919 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.630714893 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.630736113 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.630784035 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.630817890 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.630853891 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.630862951 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.630873919 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.630908966 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.631340981 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.631372929 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.631412029 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.631458044 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.631464005 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.631473064 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.631485939 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.631530046 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.631536961 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.632553101 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.632600069 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.632632971 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.632637024 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.632648945 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.632693052 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.632704020 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.632862091 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.632868052 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.683008909 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.683039904 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.729729891 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.759339094 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.759965897 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760026932 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760056019 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.760086060 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760128975 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.760133982 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760152102 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760612965 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760628939 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760656118 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.760656118 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.760667086 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760720015 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.760849953 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760862112 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.760926008 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.761521101 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.761591911 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.761720896 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.761831999 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.762399912 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.762454033 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.762562990 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.762643099 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.762676001 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.762743950 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.763345957 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.763422012 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.763488054 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.763546944 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.764239073 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.764328957 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.764419079 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.764481068 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.764497042 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.764539003 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.891403913 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.891496897 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.891526937 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.891575098 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.891680956 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.891772032 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.892026901 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.892102957 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.892237902 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.892308950 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.892395973 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.892443895 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.892632961 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.892704964 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.892715931 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.892730951 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.892757893 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.892935991 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.893007040 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.893017054 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.893148899 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.893273115 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.893332005 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.893418074 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.893467903 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.893646002 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.893678904 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.893702984 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.893709898 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.893776894 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.893899918 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.894119978 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.894165039 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.894387007 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.894438028 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.894614935 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.894728899 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.896260023 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.896326065 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.896374941 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.896445036 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.896498919 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.896615982 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.896708012 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.896734953 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.896752119 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.896759987 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.896786928 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.896786928 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.897100925 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:19.897166967 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:19.977219105 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.977303028 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.978029966 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.978044033 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.978321075 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.978887081 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.979717970 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.979846001 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.980329990 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:19.980341911 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.980595112 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:19.981018066 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.020334959 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.021528959 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.021579981 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.021656990 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.021688938 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.021702051 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.021753073 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.021764040 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.021913052 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.022057056 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.022064924 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.022115946 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.022131920 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.022176981 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.022196054 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.022202015 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.022238970 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.022238970 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.023078918 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.023087025 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.023123026 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.023144960 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.023154020 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.023175955 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.023180962 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.023195028 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.023228884 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.023302078 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.028340101 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.073636055 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.073832989 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.073858976 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.073966026 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.073997974 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.074065924 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.074131966 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.074646950 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.074690104 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.074721098 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.074747086 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.074754953 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.074779034 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.077147961 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.078804970 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.078891039 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.078926086 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.078950882 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.079000950 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.079000950 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.079024076 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.079067945 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.079221964 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.079252958 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.079294920 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.079303026 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.079339981 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.079344034 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.079473019 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.079499960 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.079521894 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.079556942 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.079556942 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.079566956 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.088975906 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.092552900 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.093750000 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.093760014 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.138899088 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.139482021 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.160013914 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.160141945 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.160291910 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.165637970 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.165702105 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.165731907 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.165802002 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.165828943 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.165874958 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.165899038 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.165927887 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.165927887 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.165941954 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.166090965 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.166116953 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.166196108 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.166198015 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.170316935 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.266007900 CET	49742	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.266057968 CET	443	49742	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.281922102 CET	49744	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.281941891 CET	443	49744	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.283030033 CET	49743	443	192.168.2.5	151.101.1.229
Mar 14, 2025 10:43:20.283066988 CET	443	49743	151.101.1.229	192.168.2.5
Mar 14, 2025 10:43:20.325052023 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.325089931 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.438255072 CET	49745	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:20.438308954 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:20.438385010 CET	49745	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:20.438590050 CET	49745	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:20.438606024 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:20.439874887 CET	49746	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:20.439914942 CET	443	49746	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:20.439970970 CET	49746	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:20.440148115 CET	49746	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:20.440162897 CET	443	49746	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:20.447776079 CET	49748	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:20.447792053 CET	443	49748	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:20.447837114 CET	49748	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:20.448043108 CET	49748	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:20.448052883 CET	443	49748	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:20.711920023 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.711978912 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.712011099 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.712039948 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.712073088 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.712065935 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.712095022 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.712106943 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.712127924 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.712132931 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.712517977 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.712547064 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.712567091 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.712572098 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.712621927 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.712626934 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.757879972 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.757895947 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.798597097 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.798636913 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.798655033 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.798666000 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.798711061 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.798715115 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.798763990 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.798804045 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.799351931 CET	49741	443	192.168.2.5	104.21.70.234
Mar 14, 2025 10:43:20.799371004 CET	443	49741	104.21.70.234	192.168.2.5
Mar 14, 2025 10:43:20.812365055 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:20.812413931 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:20.812482119 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:20.812608004 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:20.812630892 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:20.912024975 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:20.912482023 CET	49745	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:20.912513971 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:20.912669897 CET	49745	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:20.912678957 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:20.925417900 CET	443	49748	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:20.925494909 CET	49748	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:20.927227020 CET	49748	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:20.927236080 CET	443	49748	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:20.927526951 CET	443	49748	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:20.928838015 CET	49748	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:20.976321936 CET	443	49748	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:20.992669106 CET	443	49746	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:20.992979050 CET	49746	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:20.993007898 CET	443	49746	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:20.993134022 CET	49746	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:20.993139029 CET	443	49746	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:21.041778088 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.041826010 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.041882038 CET	49745	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.041903973 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.041918993 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.041974068 CET	49745	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.043062925 CET	49745	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.043082952 CET	443	49745	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.057764053 CET	443	49748	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.057841063 CET	443	49748	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.057842016 CET	49750	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.057884932 CET	49748	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.057890892 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.057945013 CET	49750	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.058281898 CET	49750	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.058291912 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.058859110 CET	49748	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.058866978 CET	443	49748	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.073967934 CET	49751	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.073988914 CET	443	49751	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.074045897 CET	49751	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.074346066 CET	49751	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.074356079 CET	443	49751	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.261204958 CET	443	49746	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:21.261290073 CET	443	49746	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:21.261338949 CET	49746	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:21.262691021 CET	49746	443	192.168.2.5	104.26.8.44
Mar 14, 2025 10:43:21.262716055 CET	443	49746	104.26.8.44	192.168.2.5
Mar 14, 2025 10:43:21.266977072 CET	49752	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:21.267059088 CET	443	49752	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:21.267124891 CET	49752	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:21.267322063 CET	49752	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:21.267338991 CET	443	49752	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:21.275702000 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.275976896 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.276012897 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.276133060 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.276139021 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416065931 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416152954 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416189909 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416201115 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.416218996 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416233063 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416264057 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.416290045 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416341066 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416368961 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.416378021 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416428089 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.416431904 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416443110 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.416486979 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.416793108 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.460045099 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.460077047 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.504446983 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.504493952 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.504540920 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.504576921 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.504611969 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.504631996 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.504643917 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.504740953 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.504991055 CET	49749	443	192.168.2.5	172.67.168.191
Mar 14, 2025 10:43:21.505006075 CET	443	49749	172.67.168.191	192.168.2.5
Mar 14, 2025 10:43:21.516463041 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.516638041 CET	49750	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.517107010 CET	49750	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.517124891 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.517426968 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.518944025 CET	49750	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.530900002 CET	443	49751	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.531100035 CET	49751	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.531527996 CET	49751	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.531542063 CET	443	49751	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.531780005 CET	443	49751	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.534522057 CET	49751	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.560343981 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.580332041 CET	443	49751	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.661150932 CET	443	49751	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.661232948 CET	443	49751	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.662597895 CET	49751	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.662853003 CET	49751	443	192.168.2.5	34.117.59.81
Mar 14, 2025 10:43:21.662889957 CET	443	49751	34.117.59.81	192.168.2.5
Mar 14, 2025 10:43:21.663722038 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.663774967 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.663873911 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.663902044 CET	49750	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.664033890 CET	49750	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.668102980 CET	49750	443	192.168.2.5	104.17.24.14
Mar 14, 2025 10:43:21.668117046 CET	443	49750	104.17.24.14	192.168.2.5
Mar 14, 2025 10:43:21.811465979 CET	443	49752	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:21.811911106 CET	49752	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:21.811950922 CET	443	49752	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:21.812094927 CET	49752	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:21.812100887 CET	443	49752	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:22.002685070 CET	443	49752	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:22.002765894 CET	443	49752	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:22.002974033 CET	49752	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:22.004998922 CET	49752	443	192.168.2.5	172.67.69.226
Mar 14, 2025 10:43:22.005012989 CET	443	49752	172.67.69.226	192.168.2.5
Mar 14, 2025 10:43:23.442660093 CET	49755	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:23.442717075 CET	443	49755	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:23.442789078 CET	49755	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:23.452012062 CET	49755	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:23.452044010 CET	443	49755	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:23.914550066 CET	443	49755	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:23.914937019 CET	49755	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:23.914977074 CET	443	49755	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:23.915282011 CET	49755	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:23.915293932 CET	443	49755	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:24.333707094 CET	443	49755	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:24.333770990 CET	443	49755	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:24.333842039 CET	49755	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:24.335093021 CET	49755	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:24.335134983 CET	443	49755	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:24.336188078 CET	49756	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:24.336225033 CET	443	49756	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:24.336282015 CET	49756	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:24.336728096 CET	49756	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:24.336743116 CET	443	49756	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:24.791012049 CET	443	49756	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:24.791364908 CET	49756	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:24.791383028 CET	443	49756	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:24.791595936 CET	49756	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:24.791601896 CET	443	49756	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:25.181655884 CET	443	49756	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:25.181754112 CET	443	49756	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:25.182235956 CET	49756	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:25.182687998 CET	49756	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:25.182707071 CET	443	49756	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:25.186707020 CET	49757	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:25.186743975 CET	443	49757	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:25.186975002 CET	49757	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:25.186975002 CET	49757	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:25.187011003 CET	443	49757	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:25.640435934 CET	443	49757	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:25.640738010 CET	49757	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:25.640763044 CET	443	49757	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:25.640984058 CET	49757	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:25.640990019 CET	443	49757	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:26.071360111 CET	443	49757	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:26.071465015 CET	443	49757	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:26.071674109 CET	49757	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:26.072429895 CET	49757	443	192.168.2.5	104.21.48.1
Mar 14, 2025 10:43:26.072442055 CET	443	49757	104.21.48.1	192.168.2.5
Mar 14, 2025 10:43:33.551944971 CET	49690	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:43:33.552026987 CET	49694	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:43:33.557038069 CET	80	49690	88.221.110.91	192.168.2.5
Mar 14, 2025 10:43:33.557050943 CET	80	49694	88.221.110.91	192.168.2.5
Mar 14, 2025 10:43:33.557094097 CET	49690	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:43:33.557106018 CET	49694	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:43:53.116117954 CET	49762	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:43:53.116158962 CET	443	49762	142.250.185.228	192.168.2.5
Mar 14, 2025 10:43:53.116322041 CET	49762	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:43:53.116516113 CET	49762	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:43:53.116520882 CET	443	49762	142.250.185.228	192.168.2.5
Mar 14, 2025 10:43:53.766253948 CET	443	49762	142.250.185.228	192.168.2.5
Mar 14, 2025 10:43:53.766345024 CET	49762	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:43:53.767086983 CET	49762	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:43:53.767111063 CET	443	49762	142.250.185.228	192.168.2.5
Mar 14, 2025 10:43:53.767368078 CET	443	49762	142.250.185.228	192.168.2.5
Mar 14, 2025 10:43:53.817987919 CET	49762	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:44:03.667210102 CET	443	49762	142.250.185.228	192.168.2.5
Mar 14, 2025 10:44:03.667268038 CET	443	49762	142.250.185.228	192.168.2.5
Mar 14, 2025 10:44:03.667321920 CET	49762	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:44:05.537879944 CET	49762	443	192.168.2.5	142.250.185.228
Mar 14, 2025 10:44:05.537910938 CET	443	49762	142.250.185.228	192.168.2.5
Mar 14, 2025 10:44:06.382121086 CET	49766	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.382167101 CET	443	49766	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:06.382313013 CET	49766	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.382453918 CET	49766	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.382467985 CET	443	49766	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:06.835675955 CET	443	49766	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:06.836046934 CET	49766	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.836086035 CET	443	49766	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:06.836199045 CET	49766	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.836205006 CET	443	49766	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:06.964030981 CET	443	49766	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:06.964099884 CET	443	49766	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:06.964164972 CET	49766	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.964333057 CET	49766	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.964365005 CET	443	49766	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:06.965219021 CET	49767	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.965276957 CET	443	49767	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:06.965357065 CET	49767	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.965475082 CET	49767	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:06.965488911 CET	443	49767	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:07.450841904 CET	443	49767	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:07.451391935 CET	49767	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:07.451421022 CET	443	49767	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:07.451625109 CET	49767	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:07.451631069 CET	443	49767	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:07.585345984 CET	443	49767	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:07.585527897 CET	443	49767	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:07.585612059 CET	49767	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:07.585669041 CET	49767	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:07.585683107 CET	443	49767	35.190.80.1	192.168.2.5
Mar 14, 2025 10:44:07.585691929 CET	49767	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:07.585748911 CET	49767	443	192.168.2.5	35.190.80.1
Mar 14, 2025 10:44:18.739195108 CET	49689	80	192.168.2.5	184.30.131.245
Mar 14, 2025 10:44:18.739248037 CET	49688	80	192.168.2.5	184.30.131.245
Mar 14, 2025 10:44:18.739314079 CET	49686	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:44:18.739345074 CET	49687	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:44:18.744625092 CET	80	49689	184.30.131.245	192.168.2.5
Mar 14, 2025 10:44:18.744641066 CET	80	49688	184.30.131.245	192.168.2.5
Mar 14, 2025 10:44:18.744678974 CET	80	49686	88.221.110.91	192.168.2.5
Mar 14, 2025 10:44:18.744694948 CET	49689	80	192.168.2.5	184.30.131.245
Mar 14, 2025 10:44:18.744699001 CET	80	49687	88.221.110.91	192.168.2.5
Mar 14, 2025 10:44:18.744712114 CET	49688	80	192.168.2.5	184.30.131.245
Mar 14, 2025 10:44:18.744736910 CET	49686	80	192.168.2.5	88.221.110.91
Mar 14, 2025 10:44:18.744745016 CET	49687	80	192.168.2.5	88.221.110.91

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:42:49.251424074 CET	53	49809	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:49.263381958 CET	53	62611	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:50.230328083 CET	53	61424	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:50.373161077 CET	53	57820	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:53.053174019 CET	51605	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:53.053339005 CET	54755	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:53.059982061 CET	53	54755	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:53.060013056 CET	53	51605	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:55.316874027 CET	49620	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:55.317096949 CET	62408	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:55.355915070 CET	52631	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:55.356146097 CET	63120	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:55.728595018 CET	53	62408	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:55.729837894 CET	53	63120	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:55.730083942 CET	53	52631	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:55.730171919 CET	53	49620	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:57.584894896 CET	51077	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:57.585079908 CET	65091	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:57.586173058 CET	63264	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:57.586489916 CET	56693	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:57.587239027 CET	59867	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:57.587419033 CET	59561	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:57.591506958 CET	53	65091	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:57.591568947 CET	53	51077	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:57.592888117 CET	53	63264	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:57.593169928 CET	53	56693	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:57.593864918 CET	53	59867	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:57.594299078 CET	53	59561	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:58.754553080 CET	57348	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:58.754728079 CET	61430	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:58.761236906 CET	53	61430	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:58.761281967 CET	53	57348	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:59.382962942 CET	49574	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:59.383336067 CET	62187	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:59.393167019 CET	53	49574	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:59.395340919 CET	53	62187	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:59.624053001 CET	57265	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:59.624528885 CET	52729	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:42:59.637093067 CET	53	57265	1.1.1.1	192.168.2.5
Mar 14, 2025 10:42:59.637949944 CET	53	52729	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:01.267211914 CET	52514	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:01.267649889 CET	57571	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:01.274245024 CET	53	52514	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:01.275393963 CET	53	57571	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:03.677723885 CET	58419	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:03.677876949 CET	53812	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:03.687869072 CET	53	58419	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:03.688024044 CET	53	53812	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:05.482187033 CET	63280	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:05.482357025 CET	56849	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:05.490454912 CET	53	63280	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:05.541901112 CET	53	56849	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:06.377881050 CET	62475	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:06.378034115 CET	55282	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:06.384462118 CET	53	55282	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:06.384963989 CET	53	62475	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:07.307744026 CET	53	60902	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:20.439141989 CET	52113	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:20.439337015 CET	62571	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:20.446027040 CET	53	62571	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:20.446274996 CET	53	62979	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:20.447272062 CET	53	52113	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:21.049664974 CET	55504	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:21.049830914 CET	56774	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:21.056659937 CET	53	55504	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:21.057306051 CET	53	56774	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:21.064896107 CET	54567	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:21.065072060 CET	56874	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:21.072984934 CET	53	54567	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:21.073477030 CET	53	56874	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:26.263832092 CET	53	57863	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:41.808882952 CET	138	138	192.168.2.5	192.168.2.255
Mar 14, 2025 10:43:48.767412901 CET	53	49830	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:49.273332119 CET	53	59045	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:51.561391115 CET	53	62657	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:57.540947914 CET	59684	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:57.541229010 CET	55881	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:57.547689915 CET	53	59684	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:57.547897100 CET	53	55881	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:58.552170038 CET	63481	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:58.552535057 CET	54807	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:43:58.558950901 CET	53	63481	1.1.1.1	192.168.2.5
Mar 14, 2025 10:43:58.559814930 CET	53	54807	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:00.584287882 CET	52019	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:00.590858936 CET	53	52019	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:01.598922014 CET	52019	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:01.605571985 CET	53	52019	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:02.599139929 CET	52019	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:02.605976105 CET	53	52019	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:04.614593983 CET	52019	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:04.621134996 CET	53	52019	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:08.614589930 CET	52019	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:08.621361971 CET	53	52019	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:13.540298939 CET	56732	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:13.540652990 CET	55715	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:13.549182892 CET	53	55715	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:13.549385071 CET	53	56732	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:14.552162886 CET	63790	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:14.558895111 CET	53	63790	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:16.583713055 CET	59518	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:16.590393066 CET	53	59518	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:17.598671913 CET	59518	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:17.605465889 CET	53	59518	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:18.614252090 CET	59518	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:18.620912075 CET	53	59518	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:20.614159107 CET	59518	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:20.620804071 CET	53	59518	1.1.1.1	192.168.2.5
Mar 14, 2025 10:44:24.614464998 CET	59518	53	192.168.2.5	1.1.1.1
Mar 14, 2025 10:44:24.621093035 CET	53	59518	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 14, 2025 10:42:55.730242968 CET	192.168.2.5	1.1.1.1	c223	(Port unreachable)	Destination Unreachable
Mar 14, 2025 10:43:05.542474031 CET	192.168.2.5	1.1.1.1	c2e2	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 10:42:53.053174019 CET	192.168.2.5	1.1.1.1	0xa7a5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:53.053339005 CET	192.168.2.5	1.1.1.1	0xca9a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 10:42:55.316874027 CET	192.168.2.5	1.1.1.1	0x391a	Standard query (0)	case-id-1000228246008.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:55.317096949 CET	192.168.2.5	1.1.1.1	0x13f	Standard query (0)	case-id-1000228246008.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:42:55.355915070 CET	192.168.2.5	1.1.1.1	0x4732	Standard query (0)	case-id-1000228246008.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:55.356146097 CET	192.168.2.5	1.1.1.1	0xabcf	Standard query (0)	case-id-1000228246008.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:42:57.584894896 CET	192.168.2.5	1.1.1.1	0x22f3	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.585079908 CET	192.168.2.5	1.1.1.1	0x58d7	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 14, 2025 10:42:57.586173058 CET	192.168.2.5	1.1.1.1	0x50ab	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.586489916 CET	192.168.2.5	1.1.1.1	0xccb1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 14, 2025 10:42:57.587239027 CET	192.168.2.5	1.1.1.1	0x4f2a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.587419033 CET	192.168.2.5	1.1.1.1	0xbbff	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:42:58.754553080 CET	192.168.2.5	1.1.1.1	0xa71e	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:58.754728079 CET	192.168.2.5	1.1.1.1	0xc1fd	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Mar 14, 2025 10:42:59.382962942 CET	192.168.2.5	1.1.1.1	0xf0d9	Standard query (0)	case-id-1000228246008.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:59.383336067 CET	192.168.2.5	1.1.1.1	0x27d9	Standard query (0)	case-id-1000228246008.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:42:59.624053001 CET	192.168.2.5	1.1.1.1	0x4f96	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:59.624528885 CET	192.168.2.5	1.1.1.1	0xca2	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:43:01.267211914 CET	192.168.2.5	1.1.1.1	0x1fb0	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:01.267649889 CET	192.168.2.5	1.1.1.1	0x238a	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:43:03.677723885 CET	192.168.2.5	1.1.1.1	0x6853	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.677876949 CET	192.168.2.5	1.1.1.1	0xf208	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:05.482187033 CET	192.168.2.5	1.1.1.1	0x5b01	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:05.482357025 CET	192.168.2.5	1.1.1.1	0x70f2	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:06.377881050 CET	192.168.2.5	1.1.1.1	0x9eaf	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:06.378034115 CET	192.168.2.5	1.1.1.1	0xa48	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:20.439141989 CET	192.168.2.5	1.1.1.1	0x601d	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:20.439337015 CET	192.168.2.5	1.1.1.1	0x20da	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 14, 2025 10:43:21.049664974 CET	192.168.2.5	1.1.1.1	0x5fe9	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:21.049830914 CET	192.168.2.5	1.1.1.1	0x2ded	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:21.064896107 CET	192.168.2.5	1.1.1.1	0x3f16	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:21.065072060 CET	192.168.2.5	1.1.1.1	0xd263	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 14, 2025 10:43:57.540947914 CET	192.168.2.5	1.1.1.1	0x7dfd	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:57.541229010 CET	192.168.2.5	1.1.1.1	0xe147	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:58.552170038 CET	192.168.2.5	1.1.1.1	0x554e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:58.552535057 CET	192.168.2.5	1.1.1.1	0x79e2	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 14, 2025 10:44:00.584287882 CET	192.168.2.5	1.1.1.1	0x9d16	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:01.598922014 CET	192.168.2.5	1.1.1.1	0x9d16	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:02.599139929 CET	192.168.2.5	1.1.1.1	0x9d16	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:04.614593983 CET	192.168.2.5	1.1.1.1	0x9d16	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:08.614589930 CET	192.168.2.5	1.1.1.1	0x9d16	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:13.540298939 CET	192.168.2.5	1.1.1.1	0xb73a	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:13.540652990 CET	192.168.2.5	1.1.1.1	0x6e50	Standard query (0)	beacons.gvt2.com	65	IN (0x0001)	false
Mar 14, 2025 10:44:14.552162886 CET	192.168.2.5	1.1.1.1	0x888b	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:16.583713055 CET	192.168.2.5	1.1.1.1	0x6fd5	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:17.598671913 CET	192.168.2.5	1.1.1.1	0x6fd5	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:18.614252090 CET	192.168.2.5	1.1.1.1	0x6fd5	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:20.614159107 CET	192.168.2.5	1.1.1.1	0x6fd5	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:24.614464998 CET	192.168.2.5	1.1.1.1	0x6fd5	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 10:42:53.059982061 CET	1.1.1.1	192.168.2.5	0xca9a	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 10:42:53.060013056 CET	1.1.1.1	192.168.2.5	0xa7a5	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:55.728595018 CET	1.1.1.1	192.168.2.5	0x13f	No error (0)	case-id-1000228246008.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:42:55.729837894 CET	1.1.1.1	192.168.2.5	0xabcf	No error (0)	case-id-1000228246008.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:42:55.730083942 CET	1.1.1.1	192.168.2.5	0x4732	No error (0)	case-id-1000228246008.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:55.730083942 CET	1.1.1.1	192.168.2.5	0x4732	No error (0)	case-id-1000228246008.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:55.730171919 CET	1.1.1.1	192.168.2.5	0x391a	No error (0)	case-id-1000228246008.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:55.730171919 CET	1.1.1.1	192.168.2.5	0x391a	No error (0)	case-id-1000228246008.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.591506958 CET	1.1.1.1	192.168.2.5	0x58d7	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:42:57.591568947 CET	1.1.1.1	192.168.2.5	0x22f3	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:42:57.591568947 CET	1.1.1.1	192.168.2.5	0x22f3	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.591568947 CET	1.1.1.1	192.168.2.5	0x22f3	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.591568947 CET	1.1.1.1	192.168.2.5	0x22f3	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.591568947 CET	1.1.1.1	192.168.2.5	0x22f3	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.592888117 CET	1.1.1.1	192.168.2.5	0x50ab	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.592888117 CET	1.1.1.1	192.168.2.5	0x50ab	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.592888117 CET	1.1.1.1	192.168.2.5	0x50ab	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.592888117 CET	1.1.1.1	192.168.2.5	0x50ab	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.593864918 CET	1.1.1.1	192.168.2.5	0x4f2a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.593864918 CET	1.1.1.1	192.168.2.5	0x4f2a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:57.594299078 CET	1.1.1.1	192.168.2.5	0xbbff	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 10:42:58.761236906 CET	1.1.1.1	192.168.2.5	0xc1fd	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:42:58.761236906 CET	1.1.1.1	192.168.2.5	0xc1fd	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:42:58.761236906 CET	1.1.1.1	192.168.2.5	0xc1fd	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:42:58.761281967 CET	1.1.1.1	192.168.2.5	0xa71e	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:42:58.761281967 CET	1.1.1.1	192.168.2.5	0xa71e	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:59.393167019 CET	1.1.1.1	192.168.2.5	0xf0d9	No error (0)	case-id-1000228246008.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:59.393167019 CET	1.1.1.1	192.168.2.5	0xf0d9	No error (0)	case-id-1000228246008.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:59.395340919 CET	1.1.1.1	192.168.2.5	0x27d9	No error (0)	case-id-1000228246008.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:42:59.637093067 CET	1.1.1.1	192.168.2.5	0x4f96	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:59.637093067 CET	1.1.1.1	192.168.2.5	0x4f96	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:59.637093067 CET	1.1.1.1	192.168.2.5	0x4f96	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:59.637949944 CET	1.1.1.1	192.168.2.5	0xca2	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:43:01.274245024 CET	1.1.1.1	192.168.2.5	0x1fb0	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:01.274245024 CET	1.1.1.1	192.168.2.5	0x1fb0	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:01.274245024 CET	1.1.1.1	192.168.2.5	0x1fb0	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:01.275393963 CET	1.1.1.1	192.168.2.5	0x238a	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:43:03.687869072 CET	1.1.1.1	192.168.2.5	0x6853	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.687869072 CET	1.1.1.1	192.168.2.5	0x6853	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.687869072 CET	1.1.1.1	192.168.2.5	0x6853	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.687869072 CET	1.1.1.1	192.168.2.5	0x6853	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.687869072 CET	1.1.1.1	192.168.2.5	0x6853	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.687869072 CET	1.1.1.1	192.168.2.5	0x6853	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.687869072 CET	1.1.1.1	192.168.2.5	0x6853	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.688024044 CET	1.1.1.1	192.168.2.5	0xf208	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:43:05.490454912 CET	1.1.1.1	192.168.2.5	0x5b01	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:05.490454912 CET	1.1.1.1	192.168.2.5	0x5b01	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:05.490454912 CET	1.1.1.1	192.168.2.5	0x5b01	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:05.490454912 CET	1.1.1.1	192.168.2.5	0x5b01	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:05.490454912 CET	1.1.1.1	192.168.2.5	0x5b01	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:05.490454912 CET	1.1.1.1	192.168.2.5	0x5b01	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:05.490454912 CET	1.1.1.1	192.168.2.5	0x5b01	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:05.541901112 CET	1.1.1.1	192.168.2.5	0x70f2	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:43:06.384963989 CET	1.1.1.1	192.168.2.5	0x9eaf	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:20.447272062 CET	1.1.1.1	192.168.2.5	0x601d	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:21.056659937 CET	1.1.1.1	192.168.2.5	0x5fe9	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:21.056659937 CET	1.1.1.1	192.168.2.5	0x5fe9	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:21.057306051 CET	1.1.1.1	192.168.2.5	0x2ded	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 10:43:21.072984934 CET	1.1.1.1	192.168.2.5	0x3f16	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:57.547689915 CET	1.1.1.1	192.168.2.5	0x7dfd	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:57.547689915 CET	1.1.1.1	192.168.2.5	0x7dfd	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.99	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:57.547897100 CET	1.1.1.1	192.168.2.5	0xe147	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:58.558950901 CET	1.1.1.1	192.168.2.5	0x554e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:58.558950901 CET	1.1.1.1	192.168.2.5	0x554e	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:58.559814930 CET	1.1.1.1	192.168.2.5	0x79e2	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:44:00.590858936 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:44:00.590858936 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.185.99	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:01.605571985 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:44:01.605571985 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.185.99	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:02.605976105 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:44:02.605976105 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.185.99	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:04.621134996 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:44:04.621134996 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.185.99	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:08.621361971 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:44:08.621361971 CET	1.1.1.1	192.168.2.5	0x9d16	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.185.99	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:13.549385071 CET	1.1.1.1	192.168.2.5	0xb73a	No error (0)	beacons.gvt2.com		142.250.180.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:14.558895111 CET	1.1.1.1	192.168.2.5	0x888b	No error (0)	beacons.gvt2.com		172.217.16.195	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:16.590393066 CET	1.1.1.1	192.168.2.5	0x6fd5	No error (0)	beacons.gvt2.com		172.217.18.3	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:17.605465889 CET	1.1.1.1	192.168.2.5	0x6fd5	No error (0)	beacons.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:18.620912075 CET	1.1.1.1	192.168.2.5	0x6fd5	No error (0)	beacons.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:20.620804071 CET	1.1.1.1	192.168.2.5	0x6fd5	No error (0)	beacons.gvt2.com		142.250.180.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:44:24.621093035 CET	1.1.1.1	192.168.2.5	0x6fd5	No error (0)	beacons.gvt2.com		142.250.180.67	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

case-id-1000228246008.counselschambers.co.uk

cdn.jsdelivr.net

code.jquery.com

cdnjs.cloudflare.com

static.xx.fbcdn.net

ipapi.co

pickoutsourcing.com

ipinfo.io

www.google.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	104.21.70.234	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:56 UTC	694	OUT	GET / HTTP/1.1 Host: case-id-1000228246008.counselschambers.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:56 UTC	883	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:42:56 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 12 Feb 2025 14:20:05 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ubYbPcjAnAsnl0VNfCnajUko0JeXvApAYiU3LGx2pCF46u8UQwEAXSgwBr61k4PAd4nhPXrL%2FnxNw1Ki6qcqEtYtnWbZSH3ris9zKfNOvMduS3rJnw8ctrIqqPb%2Fh8MD1JGtvlKPXhZTJ34KjBR4L6r50w4Kh%2BLg70KDGfJCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d2e9ca5a72a1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1873&min_rtt=1863&rtt_var=720&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1266&delivery_rate=1498973&cwnd=170&unsent_bytes=0&cid=9aee00210a7f9de6&ts=423&x=0"
2025-03-14 09:42:56 UTC	186	IN	Data Raw: 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 76 69 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 65 6c 70 2e 68 74 6d 6c 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: b4<!DOCTYPE html><html lang="vi"><head> <meta charset="UTF-8"> <script> window.location.href = "help.html"; </script></head><body></body></html>
2025-03-14 09:42:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	142.250.185.228	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:56 UTC	575	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiJo8sBCIWgzQEI9s/OAQjI0c4BCIDWzgEI0uDOAQiv5M4BCOLkzgEIi+XOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	104.21.70.234	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:57 UTC	754	OUT	GET /help.html HTTP/1.1 Host: case-id-1000228246008.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:57 UTC	886	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:42:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:38:16 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fh7%2B69ztzzpvIpMpN7dcijnqs4t%2FYY%2BtLu%2BeBdxAtRk8QryEyJmNXH1CJ8kH7ovAP7mgxNKTZaWhhG5%2FwTsfgClOLforI4c0G8lYqI8DkOVbZQgJdnfWzr3KtIo1QEP281E0GNyuv2D84bwVIyxwOz5oBeF5mmGcPQ3EYQq2pw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d2efbe6b90c2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2447&min_rtt=2436&rtt_var=935&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1326&delivery_rate=1156893&cwnd=52&unsent_bytes=0&cid=9f76ea43c9858716&ts=429&x=0"
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 33 37 64 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 71 49 6b Data Ascii: 37d0<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCFqIk
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 72 70 68 7a 62 61 6c 70 6d 50 38 44 6e 6e 38 62 42 33 6b 53 55 59 43 4c 51 30 67 53 77 48 5a 30 49 41 39 7a 49 4c 66 45 53 30 63 65 41 72 77 6f 35 42 6c 59 4e 43 33 32 69 4d 2b 4b 37 61 2f 75 78 48 58 6f 69 46 6c 36 44 33 49 64 41 4d 4d 73 79 4f 43 48 38 63 51 4f 4b 43 46 44 42 61 71 64 42 58 62 37 39 4e 51 37 38 72 41 6b 65 49 71 6f 61 4f 73 67 44 47 4f 4e 58 44 61 32 79 47 6e 77 59 36 4c 51 52 57 71 4a 36 65 37 44 2f 6e 51 32 43 55 42 59 42 4a 77 42 38 42 63 32 32 32 30 66 66 6a 41 76 4a 2b 4a 77 68 68 66 77 42 78 67 5a 6f 67 43 36 79 30 2b 57 4c 2b 41 52 43 4b 51 43 4e 36 58 37 50 79 68 63 42 65 7a 2b 6f 4c 33 45 59 49 33 79 54 58 41 52 39 75 78 32 77 65 61 43 66 4a 47 7a 62 66 37 7a 54 68 36 66 42 72 62 48 2f 43 49 4d 69 4c 68 4d 64 56 4e 73 49 76 42 Data Ascii: rphzbalpmP8Dnn8bB3kSUYCLQ0gSwHZ0IA9zILfES0ceArwo5BlYNC32iM+K7a/uxHXoiFl6D3IdAMMsyOCH8cQOKCFDBaqdBXb79NQ78rAkeIqoaOsgDGONXDa2yGnwY6LQRWqJ6e7D/nQ2CUBYBJwB8Bc2220ffjAvJ+JwhhfwBxgZogC6y0+WL+ARCKQCN6X7PyhcBez+oL3EYI3yTXAR9ux2weaCfJGzbf7zTh6fBrbH/CIMiLhMdVNsIvB
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 31 2e 31 2f 63 72 79 70 74 6f 2d 6a 73 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 Data Ascii: <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js"></script> <style type="text/css"> .ns-block-ui { position: relative; overflow: inherit; } .ns-block-ui .ns-bloc
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6c 6f 61 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 Data Ascii: ndex: 2; display: flex; flex-direction: column; } .ns-block-ui .ns-block-ui-container .ns-block-ui-loader-container .ns-block-ui-loader { position: relati
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 76 65 72 6c 61 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 30 30 6d 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 62 6c 6f 63 6b 69 6e 67 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 2e 66 61 64 65 6f 75 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 4f 75 74 4f 76 65 72 6c 61 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 Data Ascii: verlay; animation-duration: 100ms; animation-timing-function: ease-out; } .ns-block-ui.blocking .ns-block-ui-container.fadeout { animation-name: fadeOutOverlay; anima
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 Data Ascii: ateX(0px); transform: translateX(0px); } 60% { opacity: 1; } 80% { opacity: 0; } } @keyframes fadeInRTL1 { 0% {
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 34 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 Data Ascii: -webkit-transform: translateX(20px); transform: translateX(20px); } 40% { opacity: 1; -webkit-transform: translateX(0px); transform: translateX(0px);
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 33 73 20 65 61 73 65 20 30 2e 35 73 20 69 6e 66 69 6e 69 74 Data Ascii: 0% { opacity: 1; } 80% { opacity: 0; } } .loading-bullet { display: inline-block; opacity: 0; -webkit-animation: 3s ease 0.5s infinit
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 72 65 73 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a Data Ascii: ortant; } .--savior-overlay-z-index-reset { z-index: auto !important; } .--savior-overlay-display-none { display: none !important; } .--savior-overlay-clearfix { clear:
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 76 77 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 39 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 74 77 69 74 74 65 72 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 38 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 31 30 25 3b 0a 20 20 20 20 20 Data Ascii: h; width: 100vw !important; background-color: rgba(0, 0, 0, 0.9); } .--savior-overlay-twitter-video-player { position: fixed; width: 80%; height: 80%; top: 10%;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	104.21.70.234	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:57 UTC	621	OUT	GET /index-5b6c678b.css HTTP/1.1 Host: case-id-1000228246008.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://case-id-1000228246008.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:57 UTC	945	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:42:57 GMT Content-Type: text/css Content-Length: 13511 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:46 GMT ETag: "34c7-62ddf0fd25ec2" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ssVg2Zov6lSevhjkGHoDur0RqkyzwSHWDlb99LefIAHMlGEHay%2B6OzYKOBakk0V9vyCUE8ojgkh%2BdDFDH24qrStxpHTwLoVK4okeJDug33B1MvXkd2l5ivGW8e9Xd1GIDDUvBy2SK5V3TR8Dy%2BVa6dOFHGy%2Ftm%2BdBbFaMi%2BUIA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d2f23e9c41a3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1722&min_rtt=1715&rtt_var=657&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1193&delivery_rate=1647855&cwnd=164&unsent_bytes=0&cid=3abb908f242fc60f&ts=823&x=0"
2025-03-14 09:42:57 UTC	424	IN	Data Raw: 2e 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 65 6d 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 66 69 6c 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 7d 2e 6c 6f 67 6f 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 34 36 63 66 66 61 61 29 7d 2e 6c 6f 67 6f 2e 72 65 61 63 74 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 31 64 61 66 62 61 61 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 67 6f 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 Data Ascii: .logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-re
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 67 3a 35 30 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 62 61 6e 6e 65 72 2d 62 31 34 38 32 64 34 63 2e 77 65 62 70 29 7d 2e 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 34 33 37 36 30 62 33 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 35 30 70 78 20 30 3b 68 Data Ascii: g:50px 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;h
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 6f 70 3a 31 36 70 78 3b 77 69 64 74 68 3a 34 30 76 77 7d 2e 70 72 6f 67 72 65 73 73 7b 68 65 69 67 68 74 3a 35 70 78 7d 2e 72 65 71 75 69 65 64 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 34 38 34 38 34 38 61 62 7d 2e 62 6f 64 79 20 2e 77 72 61 70 2d 74 69 74 6c 65 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 31 63 31 62 31 62 64 39 7d 69 6e 70 75 74 23 74 78 74 5f 74 65 6c 6c 2c 69 6e 70 75 74 23 74 78 74 5f 69 73 73 75 65 2c 69 6e 70 75 74 23 65 6d 61 69 6c 2c 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 35 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 7b 70 61 Data Ascii: op:16px;width:40vw}.progress{height:5px}.requied-text{font-size:16px;color:#484848ab}.body .wrap-title p{font-size:14px;color:#1c1b1bd9}input#txt_tell,input#txt_issue,input#email,input.form-control{height:50px!important}.react-international-phone-input{pa
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 68 33 2e 68 33 2d 63 6f 6e 66 69 67 7b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 62 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 69 63 6f 6e 46 62 2d 6b 65 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a Data Ascii: mal!important;font-size:16px!important;line-height:19px;color:#000!important;font-weight:500!important;margin-bottom:8px!important}h3.h3-config{color:#000000bf;font-size:16px;font-weight:700;margin-bottom:10px;margin-top:20px}.iconFb-key{background-image:
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 69 6e 76 65 72 74 28 35 39 25 29 20 73 65 70 69 61 28 31 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 33 35 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 36 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 36 25 29 20 63 6f 6e 74 72 61 73 74 28 39 34 25 29 7d 2e 74 65 78 74 2d 63 61 72 64 2d 63 75 73 74 6f 6d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 30 36 32 35 72 65 6d Data Ascii: ground-repeat:no-repeat;display:inline-block;-webkit-filter:invert(59%) sepia(11%) saturate(200%) saturate(135%) hue-rotate(176deg) brightness(96%) contrast(94%)}.text-card-custom{font-family:inherit!important;font-weight:400!important;font-size:1.0625rem
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 7b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 5f 5f 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 Data Ascii: .react-international-phone-country-selector-button--hide-dropdown{cursor:auto}.react-international-phone-country-selector-button--hide-dropdown:hover{background-color:transparent}.react-international-phone-country-selector-button__button-content{display:f
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 77 68 69 74 65 73 6d 6f 6b 65 29 29 3b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 Data Ascii: -phone-disabled-background-color, whitesmoke));cursor:auto}.react-international-phone-country-selector-button--disabled:hover{background-color:var(--react-international-phone-disabled-country-selector-background-color, var(--react-international-phone-disa
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 66 6c 61 67 2d 65 6d 6f 6a 69 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 31 34 70 78 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 Data Ascii: ector-dropdown__list-item-flag-emoji{margin-right:8px}.react-international-phone-country-selector-dropdown__list-item-country-name{margin-right:8px;font-size:var(--react-international-phone-dropdown-item-font-size, 14px)}.react-international-phone-country
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 64 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 73 65 6c 65 63 74 65 64 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 67 72 61 79 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 66 6f 63 75 73 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e Data Ascii: de{color:var(--react-international-phone-selected-dropdown-item-dial-code-color, var(--react-international-phone-dropdown-item-dial-code-color, gray))}.react-international-phone-country-selector-dropdown__list-item--focused{background-color:var(--react-in
2025-03-14 09:42:57 UTC	1369	IN	Data Raw: 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 23 36 36 36 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 20 34 Data Ascii: national-phone-disabled-text-color, #666))}.react-international-phone-input-container{display:flex}.react-international-phone-input-container .react-international-phone-country-selector-button{border-radius:var(--react-international-phone-border-radius, 4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	151.101.1.229	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:58 UTC	670	OUT	GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228246008.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:58 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 232914 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.3.0 X-JSD-Version-Type: version ETag: W/"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y" Accept-Ranges: bytes Date: Fri, 14 Mar 2025 09:42:58 GMT Age: 2705605 X-Served-By: cache-fra-eddf8230088-FRA, cache-ewr-kewr1740032-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.0 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 6d 64 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a Data Ascii: }.row-cols-md-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-md-4>{flex:0 0 auto;width:25%}.row-cols-md-5>{flex:0 0 auto;width:20%}.row-cols-md-6>{flex:0 0 auto;width:16.6666666667%}.col-md-auto{flex:0 0 auto;width:auto}.col-md-1{flex:0 0 auto;width:
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 64 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 31 72 65 6d 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 37 35 72 65 6d 20 2b 20 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 2a 20 32 29 29 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 35 72 65 6d 20 2b 20 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 2a 20 32 29 29 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 Data Ascii: d:1rem;margin-inline-end:1rem}textarea.form-control{min-height:calc(1.5em + .75rem + calc(var(--bs-border-width) * 2))}textarea.form-control-sm{min-height:calc(1.5em + .5rem + calc(var(--bs-border-width) * 2))}textarea.form-control-lg{min-height:calc(1.5e
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 76 61 6c 69 64 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 72 67 62 29 2c 2e 32 35 29 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 7e 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 76 61 6c 69 64 7e 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 72 6d 2d 76 61 6c 69 64 2d 63 6f 6c 6f 72 29 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 Data Ascii: lidated .form-check-input:valid:focus{box-shadow:0 0 0 .25rem rgba(var(--bs-success-rgb),.25)}.form-check-input.is-valid~.form-check-label,.was-validated .form-check-input:valid~.form-check-label{color:var(--bs-form-valid-color)}.form-check-inline .form-c
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 64 69 76 69 64 65 72 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 72 61 6e 73 6c 75 63 65 6e 74 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 64 69 76 69 64 65 72 2d 6d 61 72 67 69 6e 2d 79 3a 30 2e 35 72 65 6d 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 2e 35 72 65 6d 20 31 72 65 6d 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 Data Ascii: bs-border-width));--bs-dropdown-divider-bg:var(--bs-border-color-translucent);--bs-dropdown-divider-margin-y:0.5rem;--bs-dropdown-box-shadow:0 0.5rem 1rem rgba(0, 0, 0, 0.15);--bs-dropdown-link-color:var(--bs-body-color);--bs-dropdown-link-hover-color:var
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 2d 73 63 72 6f 6c 6c 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 Data Ascii: n:absolute}.navbar-expand-md .navbar-nav .nav-link{padding-right:var(--bs-navbar-nav-link-padding-x);padding-left:var(--bs-navbar-nav-link-padding-x)}.navbar-expand-md .navbar-nav-scroll{overflow:visible}.navbar-expand-md .navbar-collapse{display:flex!imp
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 65 72 74 69 61 72 79 2d 62 67 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 6f 63 75 73 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 6f 63 75 73 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 6f 63 75 73 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 30 2e 32 35 72 65 6d 20 72 67 62 61 28 31 33 2c 20 31 31 30 2c 20 32 35 33 2c 20 30 2e 32 35 29 3b 2d 2d 62 73 2d 70 61 67 69 6e Data Ascii: ertiary-bg);--bs-pagination-hover-border-color:var(--bs-border-color);--bs-pagination-focus-color:var(--bs-link-hover-color);--bs-pagination-focus-bg:var(--bs-secondary-bg);--bs-pagination-focus-box-shadow:0 0 0 0.25rem rgba(13, 110, 253, 0.25);--bs-pagin
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 70 2d 61 63 74 69 6f 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 68 6f 76 65 72 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 61 63 74 69 76 65 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 76 65 2d 63 6f Data Ascii: p-action-hover-color:var(--bs-emphasis-color);--bs-list-group-action-hover-bg:var(--bs-info-border-subtle);--bs-list-group-action-active-color:var(--bs-emphasis-color);--bs-list-group-action-active-bg:var(--bs-info-border-subtle);--bs-list-group-active-co
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 7d 2e 70 6f 70 6f 76 65 72 20 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 2d 77 69 64 74 68 29 Data Ascii: round-color:var(--bs-popover-bg);background-clip:padding-box;border:var(--bs-popover-border-width) solid var(--bs-popover-border-color);border-radius:var(--bs-popover-border-radius)}.popover .popover-arrow{display:block;width:var(--bs-popover-arrow-width)
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 31 31 39 39 2e 39 38 70 78 29 7b 2e 6f 66 66 63 61 6e 76 61 73 2d 78 6c 2e 6f 66 66 63 61 6e 76 61 73 2d 73 74 61 72 74 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 77 69 64 74 68 29 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 7d 2e 6f 66 66 63 61 6e 76 61 73 2d 78 6c 2e 6f 66 66 63 61 6e 76 61 73 2d 65 6e 64 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 Data Ascii: 1199.98px){.offcanvas-xl.offcanvas-start{top:0;left:0;width:var(--bs-offcanvas-width);border-right:var(--bs-offcanvas-border-width) solid var(--bs-offcanvas-border-color);transform:translateX(-100%)}.offcanvas-xl.offcanvas-end{top:0;right:0;width:var(--bs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	151.101.2.137	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:58 UTC	603	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:58 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 14 Mar 2025 09:42:58 GMT Age: 614361 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740051-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 2 X-Timer: S1741945378.132230,VS0,VE0 Vary: Accept-Encoding
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-14 09:42:58 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-14 09:42:58 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	104.17.24.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:58 UTC	627	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:58 UTC	956	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:42:58 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-7b00" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1561 Expires: Wed, 04 Mar 2026 09:42:58 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3l0G0qdIskX%2B0IRbTftiAc%2BRoiRU0cKrY0mkhjUvm5g6w430W1gdH4kIK44V0LNMJ0SGe0Vlgx3akTDHQW6ocgIA3kNZvGE34CP8qDHzqvBI%2FYSwiqvKmuf14tqULbMd1X7FmYZi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202d2f57bef381d-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:42:58 UTC	413	IN	Data Raw: 37 62 65 64 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 20 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 09 09 2f 2f 20 43 6f 6d 6d 6f 6e 4a 53 0a 09 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 09 09 2f 2f 20 41 4d 44 0a 09 09 64 65 66 69 6e 65 28 5b 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 7b 0a 09 09 2f 2f 20 47 6c 6f 62 61 6c 20 28 62 72 6f 77 73 65 72 29 0a 09 09 72 6f 6f 74 Data Ascii: 7bed;(function (root, factory) {if (typeof exports === "object") {// CommonJSmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// AMDdefine([], factory);}else {// Global (browser)root
2025-03-14 09:42:58 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 28 4d 61 74 68 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 20 20 20 20 76 61 72 20 63 72 79 70 74 6f 3b 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 66 72 6f 6d 20 77 69 6e 64 6f 77 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 20 7b 0a 09 20 20 20 20 20 20 20 20 63 72 79 70 74 6f 20 3d 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 3b 0a 09 20 20 20 20 7d 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 69 6e 20 77 65 62 20 77 6f 72 6b 65 72 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 65 6c Data Ascii: nction (Math, undefined) { var crypto; // Native crypto from window (Browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // Native crypto in web worker (Browser) if (typeof sel
2025-03-14 09:42:58 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 55 73 65 20 72 61 6e 64 6f 6d 42 79 74 65 73 20 6d 65 74 68 6f 64 20 28 4e 6f 64 65 4a 53 29 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 42 79 74 65 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 09 20 20 Data Ascii: return crypto.getRandomValues(new Uint32Array(1))[0]; } catch (err) {} } // Use randomBytes method (NodeJS) if (typeof crypto.randomBytes === 'function') { try {
2025-03-14 09:42:58 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 2a 20 40 73 74 61 74 69 63 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 4d 79 54 79 70 65 20 3d 20 43 72 79 70 74 6f 4a 53 2e 6c 69 62 2e 42 61 73 65 2e 65 78 74 65 6e 64 28 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 66 69 65 6c 64 3a 20 27 76 61 6c 75 65 27 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 Data Ascii: * @static * * @example * * var MyType = CryptoJS.lib.Base.extend({ * field: 'value', * * method: function () { *
2025-03-14 09:42:58 UTC	1369	IN	Data Raw: 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 4d 79 54 79 70 65 2e 63 72 65 61 74 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 63 72 65 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 74 68 69 73 2e 65 78 74 65 6e 64 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 69 6e 69 74 2e 61 70 70 6c 79 28 69 6e 73 74 61 6e 63 65 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: * @example * * var instance = MyType.create(); */ create: function () { var instance = this.extend(); instance.init.apply(instance, arguments);
2025-03-14 09:42:58 UTC	1369	IN	Data Raw: 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 45 20 77 6f 6e 27 74 20 63 6f 70 79 20 74 6f 53 74 72 69 6e 67 20 75 73 69 6e 67 20 74 68 65 20 6c 6f 6f 70 20 61 62 6f 76 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 72 6f 70 65 72 74 69 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 27 74 6f 53 74 72 69 6e 67 27 29 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 20 3d 20 70 72 6f 70 65 72 74 69 65 73 2e 74 6f 53 74 72 69 6e 67 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 Data Ascii: // IE won't copy toString using the loop above if (properties.hasOwnProperty('toString')) { this.toString = properties.toString; } }, /** *
2025-03-14 09:42:58 UTC	1369	IN	Data Raw: 31 30 32 30 33 2c 20 30 78 30 34 30 35 30 36 30 37 5d 2c 20 36 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 73 2c 20 73 69 67 42 79 74 65 73 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 73 20 3d 20 74 68 69 73 2e 77 6f 72 64 73 20 3d 20 77 6f 72 64 73 20 7c 7c 20 5b 5d 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 69 67 42 79 74 65 73 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 20 3d 20 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 Data Ascii: 10203, 0x04050607], 6); */ init: function (words, sigBytes) { words = this.words = words \|\| []; if (sigBytes != undefined) { this.sigBytes = sigBytes; } else { th
2025-03-14 09:42:58 UTC	1369	IN	Data Raw: 20 20 20 20 20 76 61 72 20 74 68 69 73 53 69 67 42 79 74 65 73 20 3d 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 68 61 74 53 69 67 42 79 74 65 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 73 69 67 42 79 74 65 73 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 61 6d 70 20 65 78 63 65 73 73 20 62 69 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 6c 61 6d 70 28 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 6e 63 61 74 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 53 69 67 42 79 74 65 73 20 25 20 34 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 70 79 20 6f 6e 65 20 62 79 74 65 20 61 74 20 61 20 74 69 Data Ascii: var thisSigBytes = this.sigBytes; var thatSigBytes = wordArray.sigBytes; // Clamp excess bits this.clamp(); // Concat if (thisSigBytes % 4) { // Copy one byte at a ti
2025-03-14 09:42:58 UTC	1369	IN	Data Raw: 70 79 20 6f 66 20 74 68 69 73 20 77 6f 72 64 20 61 72 72 61 79 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 57 6f 72 64 41 72 72 61 79 7d 20 54 68 65 20 63 6c 6f 6e 65 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 63 6c 6f 6e 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 63 6c 6f 6e 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 42 61 73 65 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 Data Ascii: py of this word array. * * @return {WordArray} The clone. * * @example * * var clone = wordArray.clone(); */ clone: function () { var clone = Base.clone.call(t
2025-03-14 09:42:58 UTC	1369	IN	Data Raw: 69 63 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 68 65 78 53 74 72 69 6e 67 20 3d 20 43 72 79 70 74 6f 4a 53 2e 65 6e 63 2e 48 65 78 2e 73 74 72 69 6e 67 69 66 79 28 77 6f 72 64 41 72 72 61 79 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 73 74 72 69 6e 67 69 66 79 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 41 72 72 61 79 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 68 6f 72 74 63 75 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 6f 72 64 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 77 6f 72 64 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ic * * @example * * var hexString = CryptoJS.enc.Hex.stringify(wordArray); */ stringify: function (wordArray) { // Shortcuts var words = wordArray.words;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	151.101.1.229	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:58 UTC	647	OUT	GET /npm/react/umd/react.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228246008.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:58 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10751 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 18.3.1 X-JSD-Version-Type: version ETag: W/"29ff-qneuTEn1Jbwh3h0E8Ipdc5YsfM4" Accept-Ranges: bytes Age: 9396 Date: Fri, 14 Mar 2025 09:42:58 GMT X-Served-By: cache-fra-eddf8230081-FRA, cache-ewr-kewr1740055-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:42:58 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 Data Ascii: /** * @license React * react.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */(function(){'use s
2025-03-14 09:42:58 UTC	1378	IN	Data Raw: 24 22 2b 61 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 6e 75 6c 6c 21 3d 3d 61 26 26 6e 75 6c 6c 21 3d 61 2e 6b 65 79 3f 70 61 28 22 22 2b 61 2e 6b 65 79 29 3a 62 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 2c 65 2c 6d 2c 64 29 7b 76 61 72 20 63 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 63 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 63 29 61 3d 6e 75 6c 6c 3b 76 61 72 20 68 3d 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 29 68 3d 21 30 3b 65 6c 73 65 20 73 77 69 74 63 68 Data Ascii: $"+a.replace(/[=:]/g,function(a){return b[a]})}function N(a,b){return"object"===typeof a&&null!==a&&null!=a.key?pa(""+a.key):b.toString(36)}function B(a,b,e,m,d){var c=typeof a;if("undefined"===c\|\|"boolean"===c)a=null;var h=!1;if(null===a)h=!0;else switch
2025-03-14 09:42:58 UTC	1378	IN	Data Raw: 3d 61 2e 5f 73 74 61 74 75 73 26 26 28 61 2e 5f 73 74 61 74 75 73 3d 0a 30 2c 61 2e 5f 72 65 73 75 6c 74 3d 62 29 7d 69 66 28 31 3d 3d 3d 61 2e 5f 73 74 61 74 75 73 29 72 65 74 75 72 6e 20 61 2e 5f 72 65 73 75 6c 74 2e 64 65 66 61 75 6c 74 3b 74 68 72 6f 77 20 61 2e 5f 72 65 73 75 6c 74 3b 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 61 2c 62 29 7b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 3b 61 2e 70 75 73 68 28 62 29 3b 61 3a 66 6f 72 28 3b 30 3c 65 3b 29 7b 76 61 72 20 63 3d 65 2d 31 3e 3e 3e 31 2c 64 3d 61 5b 63 5d 3b 69 66 28 30 3c 44 28 64 2c 62 29 29 61 5b 63 5d 3d 62 2c 61 5b 65 5d 3d 64 2c 65 3d 63 3b 65 6c 73 65 20 62 72 65 61 6b 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c Data Ascii: =a._status&&(a._status=0,a._result=b)}if(1===a._status)return a._result.default;throw a._result;}function O(a,b){var e=a.length;a.push(b);a:for(;0<e;){var c=e-1>>>1,d=a[c];if(0<D(d,b))a[c]=b,a[e]=d,e=c;else break a}}function p(a){return 0===a.length?null
2025-03-14 09:42:58 UTC	1378	IN	Data Raw: 7b 61 28 76 28 29 29 7d 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 63 74 28 2e 2e 2e 29 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 20 62 75 69 6c 64 73 20 6f 66 20 52 65 61 63 74 2e 22 29 3b 7d 76 61 72 20 79 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 71 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 6f 72 74 61 6c 22 29 2c 73 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 2c 0a 74 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 74 72 69 63 74 5f 6d 6f 64 65 22 29 2c 75 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 72 Data Ascii: {a(v())},b)}function ka(a){throw Error("act(...) is not supported in production builds of React.");}var y=Symbol.for("react.element"),qa=Symbol.for("react.portal"),sa=Symbol.for("react.fragment"),ta=Symbol.for("react.strict_mode"),ua=Symbol.for("react.pr
2025-03-14 09:42:58 UTC	1378	IN	Data Raw: 76 61 72 20 42 61 3d 70 65 72 66 6f 72 6d 61 6e 63 65 3b 76 61 72 20 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 61 2e 6e 6f 77 28 29 7d 7d 65 6c 73 65 7b 76 61 72 20 6d 61 3d 44 61 74 65 2c 43 61 3d 6d 61 2e 6e 6f 77 28 29 3b 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 61 2e 6e 6f 77 28 29 2d 43 61 7d 7d 76 61 72 20 71 3d 5b 5d 2c 72 3d 5b 5d 2c 44 61 3d 31 2c 6e 3d 6e 75 6c 6c 2c 6b 3d 33 2c 46 3d 21 31 2c 75 3d 21 31 2c 7a 3d 21 31 2c 6a 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 73 65 74 54 69 6d 65 6f 75 74 3a 6e 75 6c 6c 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 3f 63 6c 65 61 72 54 69 6d 65 Data Ascii: var Ba=performance;var v=function(){return Ba.now()}}else{var ma=Date,Ca=ma.now();v=function(){return ma.now()-Ca}}var q=[],r=[],Da=1,n=null,k=3,F=!1,u=!1,z=!1,ja="function"===typeof setTimeout?setTimeout:null,ea="function"===typeof clearTimeout?clearTime
2025-03-14 09:42:58 UTC	1378	IN	Data Raw: 61 2c 0a 62 2c 63 29 7b 76 61 72 20 65 3d 76 28 29 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 63 26 26 6e 75 6c 6c 21 3d 3d 63 3f 28 63 3d 63 2e 64 65 6c 61 79 2c 63 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 63 26 26 30 3c 63 3f 65 2b 63 3a 65 29 3a 63 3d 65 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 76 61 72 20 64 3d 2d 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 64 3d 32 35 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 64 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 64 3d 31 45 34 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 64 3d 35 45 33 7d 64 3d 63 2b 64 3b 61 3d 7b 69 64 3a 44 61 2b 2b 2c 63 61 6c 6c 62 61 63 6b 3a 62 2c 70 72 69 6f 72 69 74 79 4c 65 76 65 6c 3a 61 2c 73 74 61 72 Data Ascii: a,b,c){var e=v();"object"===typeof c&&null!==c?(c=c.delay,c="number"===typeof c&&0<c?e+c:e):c=e;switch(a){case 1:var d=-1;break;case 2:d=250;break;case 5:d=1073741823;break;case 4:d=1E4;break;default:d=5E3}d=c+d;a={id:Da++,callback:b,priorityLevel:a,star
2025-03-14 09:42:58 UTC	1378	IN	Data Raw: 2e 6f 6e 6c 79 20 65 78 70 65 63 74 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 61 20 73 69 6e 67 6c 65 20 52 65 61 63 74 20 65 6c 65 6d 65 6e 74 20 63 68 69 6c 64 2e 22 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 63 2e 43 6f 6d 70 6f 6e 65 6e 74 3d 77 3b 63 2e 46 72 61 67 6d 65 6e 74 3d 73 61 3b 63 2e 50 72 6f 66 69 6c 65 72 3d 75 61 3b 63 2e 50 75 72 65 43 6f 6d 70 6f 6e 65 6e 74 3d 4b 3b 63 2e 53 74 72 69 63 74 4d 6f 64 65 3d 74 61 3b 63 2e 53 75 73 70 65 6e 73 65 3d 79 61 3b 63 2e 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 3d 0a 74 3b 63 2e 61 63 74 3d 6b 61 3b 63 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b Data Ascii: .only expected to receive a single React element child.");return a}};c.Component=w;c.Fragment=sa;c.Profiler=ua;c.PureComponent=K;c.StrictMode=ta;c.Suspense=ya;c.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=t;c.act=ka;c.cloneElement=function(a,b,c){
2025-03-14 09:42:58 UTC	1105	IN	Data Raw: 61 2c 74 79 70 65 3a 61 2c 63 6f 6d 70 61 72 65 3a 76 6f 69 64 20 30 3d 3d 3d 62 3f 6e 75 6c 6c 3a 62 7d 7d 3b 63 2e 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 4a 2e 74 72 61 6e 73 69 74 69 6f 6e 3b 4a 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 7b 7d 3b 74 72 79 7b 61 28 29 7d 66 69 6e 61 6c 6c 79 7b 4a 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 62 7d 7d 3b 63 2e 75 6e 73 74 61 62 6c 65 5f 61 63 74 3d 6b 61 3b 63 2e 75 73 65 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 61 2c 62 29 7d 3b 63 2e 75 73 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 Data Ascii: a,type:a,compare:void 0===b?null:b}};c.startTransition=function(a,b){b=J.transition;J.transition={};try{a()}finally{J.transition=b}};c.unstable_act=ka;c.useCallback=function(a,b){return g.current.useCallback(a,b)};c.useContext=function(a){return g.current

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49720	104.21.70.234	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:58 UTC	710	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228246008.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228246008.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:59 UTC	945	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:42:59 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=46mtBRkKc2W6eHPxUokTYX3uc5elEBP7KqdgyVTDjdmAWWQgphm%2BMY%2Bbu4x3zCQK1mEL%2FPRiWFW1o1oKdclSvqGk1mVQiedtPKAtqKWwHZpEy7PFxk3pSXsCUpAh7M%2BX7D1LIHx4ouUMWEQ6BcGCrP8Og9v0PnaY4CPr%2BktgdQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d2fa4daf7d05-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1984&min_rtt=1978&rtt_var=755&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1282&delivery_rate=1437715&cwnd=207&unsent_bytes=0&cid=5679e6f2318a6b94&ts=441&x=0"
2025-03-14 09:42:59 UTC	424	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:42:59 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 36 81 09 74 0d 2d 8e 72 Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs6t-r
2025-03-14 09:42:59 UTC	1369	IN	Data Raw: bc f7 c3 ed 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 bd f2 24 a2 24 a2 29 bc Data Ascii: :WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8$$)
2025-03-14 09:42:59 UTC	1369	IN	Data Raw: 79 ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 51 ef 99 4f 5a f4 bc a3 Data Ascii: y^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2QOZ
2025-03-14 09:42:59 UTC	1369	IN	Data Raw: 3e 34 e8 00 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 4f 2c 77 32 f1 d9 c2 e7 Data Ascii: >4T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!O,w2
2025-03-14 09:42:59 UTC	1369	IN	Data Raw: 48 45 61 61 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d Data Ascii: HEaatOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwFtiwF
2025-03-14 09:42:59 UTC	1369	IN	Data Raw: 96 19 5e 1b b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 92 69 35 3b 72 5a 6c 8c Data Ascii: ^<i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%i5;rZl
2025-03-14 09:42:59 UTC	1369	IN	Data Raw: ec 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 34 66 8c d3 19 8a 17 ab Data Ascii: Cqf-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV4f
2025-03-14 09:42:59 UTC	1369	IN	Data Raw: 88 be 87 dc 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 ba f4 aa 60 30 76 ed 52 Data Ascii: uM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C`0vR
2025-03-14 09:42:59 UTC	1369	IN	Data Raw: ec 40 8a 2b c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 d7 a3 07 15 af e1 38 5b Data Ascii: @+^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP8[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49722	151.101.1.229	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:59 UTC	655	OUT	GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228246008.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:59 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 131835 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 18.3.1 X-JSD-Version-Type: version ETag: W/"202fb-/rjdydBWak+glxpuEThlhhjNrP4" Accept-Ranges: bytes Age: 22897 Date: Fri, 14 Mar 2025 09:42:59 GMT X-Served-By: cache-fra-eddf8230141-FRA, cache-nyc-kteb1890096-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a Data Ascii: /** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. /(function(){/
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 22 3d 3d 3d 74 79 70 65 6f 66 20 62 7c 7c 64 6a 28 61 2c 62 2c 63 2c 64 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 64 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 63 29 73 77 69 74 63 68 28 63 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 62 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 62 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 62 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 62 29 7c 7c 31 3e 62 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 59 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 74 68 69 73 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3d 32 3d 3d 3d 62 7c 7c 33 3d 3d 3d 62 7c 7c 34 3d 3d 3d 62 3b 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 4e 61 Data Ascii: "===typeof b\|\|dj(a,b,c,d))return!0;if(d)return!1;if(null!==c)switch(c.type){case 3:return!b;case 4:return!1===b;case 5:return isNaN(b);case 6:return isNaN(b)\|\|1>b}return!1}function Y(a,b,c,d,e,f,g){this.acceptsBooleans=2===b\|\|3===b\|\|4===b;this.attributeNa
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 7b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 62 2c 5b 5d 29 7d 63 61 74 63 68 28 6e 29 7b 76 61 72 20 64 3d 6e 7d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 61 2c 5b 5d 2c 62 29 7d 65 6c 73 65 7b 74 72 79 7b 62 2e 63 61 6c 6c 28 29 7d 63 61 74 63 68 28 6e 29 7b 64 3d 6e 7d 61 2e 63 61 6c 6c 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 7d 65 6c 73 65 7b 74 72 79 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 0a 7d 63 61 74 63 68 28 6e 29 7b 64 3d 6e 7d 61 28 29 7d 7d 63 61 74 63 68 28 6e 29 7b 69 66 28 6e 26 26 64 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 2e 73 74 61 63 6b 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 66 3d 64 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c Data Ascii: {Reflect.construct(b,[])}catch(n){var d=n}Reflect.construct(a,[],b)}else{try{b.call()}catch(n){d=n}a.call(b.prototype)}else{try{throw Error();}catch(n){d=n}a()}}catch(n){if(n&&d&&"string"===typeof n.stack){for(var e=n.stack.split("\n"),f=d.stack.split("\
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 6f 76 69 64 65 72 22 3b 63 61 73 65 20 69 65 3a 76 61 72 20 62 3d 61 2e 72 65 6e 64 65 72 3b 61 3d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3b 61 7c 7c 28 61 3d 62 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 62 2e 6e 61 6d 65 7c 7c 22 22 2c 61 3d 22 22 21 3d 3d 61 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 61 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 72 65 74 75 72 6e 20 61 3b 63 61 73 65 20 6a 65 3a 72 65 74 75 72 6e 20 62 3d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 6e 75 6c 6c 2c 6e 75 6c 6c 21 3d 3d 62 3f 62 3a 64 65 28 61 2e 74 79 70 65 29 7c 7c 22 4d 65 6d 6f 22 3b 63 61 73 65 20 54 61 3a 62 3d 61 2e 5f 70 61 79 6c 6f 61 64 3b 61 3d 61 2e 5f 69 6e 69 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 28 61 28 62 29 29 7d 63 61 74 63 68 28 Data Ascii: ovider";case ie:var b=a.render;a=a.displayName;a\|\|(a=b.displayName\|\|b.name\|\|"",a=""!==a?"ForwardRef("+a+")":"ForwardRef");return a;case je:return b=a.displayName\|\|null,null!==b?b:de(a.type)\|\|"Memo";case Ta:b=a._payload;a=a._init;try{return de(a(b))}catch(
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 62 29 2c 64 3d 22 22 2b 61 5b 62 5d 3b 69 66 28 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 2e 67 65 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 2e 73 65 74 29 7b 76 61 72 20 65 3d 63 2e 67 65 74 2c 66 3d 63 2e 73 65 74 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 Data Ascii: PropertyDescriptor(a.constructor.prototype,b),d=""+a[b];if(!a.hasOwnProperty(b)&&"undefined"!==typeof c&&"function"===typeof c.get&&"function"===typeof c.set){var e=c.get,f=c.set;Object.defineProperty(a,b,{configurable:!0,get:function(){return e.call(this
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 67 28 61 2c 62 29 3b 76 61 72 20 63 3d 55 61 28 62 2e 76 61 6c 75 65 29 2c 64 3d 62 2e 74 79 70 65 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 64 29 7b 69 66 28 30 3d 3d 3d 63 26 26 22 22 3d 3d 3d 61 2e 76 61 6c 75 65 7c 7c 61 2e 76 61 6c 75 65 21 3d 0a 63 29 61 2e 76 61 6c 75 65 3d 22 22 2b 63 7d 65 6c 73 65 20 61 2e 76 61 6c 75 65 21 3d 3d 22 22 2b 63 26 26 28 61 2e 76 61 6c 75 65 3d 22 22 2b 63 29 3b 65 6c 73 65 20 69 66 28 22 73 75 62 6d 69 74 22 3d 3d 3d 64 7c 7c 22 72 65 73 65 74 22 3d 3d 3d 64 29 7b 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 3b 72 65 74 75 72 6e 7d 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 76 61 6c 75 65 22 29 3f 6d 65 28 61 2c 62 2e 74 79 70 65 2c 63 Data Ascii: g(a,b);var c=Ua(b.value),d=b.type;if(null!=c)if("number"===d){if(0===c&&""===a.value\|\|a.value!=c)a.value=""+c}else a.value!==""+c&&(a.value=""+c);else if("submit"===d\|\|"reset"===d){a.removeAttribute("value");return}b.hasOwnProperty("value")?me(a,b.type,c
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 72 6e 20 45 28 7b 7d 2c 62 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 22 22 2b 61 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 67 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2e 76 61 6c 75 65 3b 69 66 28 6e 75 6c 6c 3d 3d 63 29 7b 63 3d 62 2e 63 68 69 6c 64 72 65 6e 3b 62 3d 62 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 39 32 29 29 3b 69 66 28 63 63 28 63 29 29 7b 69 66 28 31 3c 63 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 39 33 29 29 3b 0a 63 3d 63 5b 30 5d 7d 62 3d Data Ascii: rn E({},b,{value:void 0,defaultValue:void 0,children:""+a._wrapperState.initialValue})}function ng(a,b){var c=b.value;if(null==c){c=b.children;b=b.defaultValue;if(null!=c){if(null!=b)throw Error(m(92));if(cc(c)){if(1<c.length)throw Error(m(93));c=c[0]}b=
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 65 74 49 6e 6e 65 72 48 54 4d 4c 29 7b 69 66 28 6e 75 6c 6c 21 3d 62 2e 63 68 69 6c 64 72 65 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 30 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 7c 7c 21 28 22 5f 5f 68 74 6d 6c 22 69 6e 20 62 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 31 29 29 3b 7d 69 66 28 6e 75 6c 6c 21 3d 62 2e 73 74 79 6c 65 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 62 2e 73 74 79 6c 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 32 29 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 61 2c 62 29 7b 69 66 28 2d 31 3d 3d 3d 61 2e 69 6e 64 Data Ascii: etInnerHTML){if(null!=b.children)throw Error(m(60));if("object"!==typeof b.dangerouslySetInnerHTML\|\|!("__html"in b.dangerouslySetInnerHTML))throw Error(m(61));}if(null!=b.style&&"object"!==typeof b.style)throw Error(m(62));}}function qe(a,b){if(-1===a.ind
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 64 2e 64 69 73 61 62 6c 65 64 29 7c 7c 28 61 3d 61 2e 74 79 70 65 2c 64 3d 21 28 22 62 75 74 74 6f 6e 22 3d 3d 3d 61 7c 7c 22 69 6e 70 75 74 22 3d 3d 3d 61 7c 7c 22 73 65 6c 65 63 74 22 3d 3d 3d 61 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 61 29 29 3b 61 3d 21 64 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 61 3d 21 31 7d 69 66 28 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 69 66 28 63 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 32 33 31 2c 62 2c 74 79 70 65 6f 66 20 63 29 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 6a 6a 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 6b 29 7b 67 63 3d 21 31 3b 53 63 3d 6e 75 6c 6c 3b 6b 6a 2e 61 70 70 6c 79 28 6c 6a 2c 61 Data Ascii: d.disabled)\|\|(a=a.type,d=!("button"===a\|\|"input"===a\|\|"select"===a\|\|"textarea"===a));a=!d;break a;default:a=!1}if(a)return null;if(c&&"function"!==typeof c)throw Error(m(231,b,typeof c));return c}function jj(a,b,c,d,e,f,g,h,k){gc=!1;Sc=null;kj.apply(lj,a
2025-03-14 09:42:59 UTC	1378	IN	Data Raw: 6e 61 74 65 21 3d 3d 64 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 31 39 30 29 29 3b 7d 69 66 28 33 21 3d 3d 63 2e 74 61 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 31 38 38 29 29 3b 72 65 74 75 72 6e 20 63 2e 73 74 61 74 65 4e 6f 64 65 2e 63 75 72 72 65 6e 74 3d 3d 3d 63 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 42 67 28 61 29 7b 61 3d 6e 6a 28 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 3f 43 67 28 61 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 43 67 28 61 29 7b 69 66 28 35 3d 3d 3d 61 2e 74 61 67 7c 7c 36 3d 3d 3d 61 2e 74 61 67 29 72 65 74 75 72 6e 20 61 3b 66 6f 72 28 61 3d 61 2e 63 68 69 6c 64 3b 6e 75 6c 6c 21 3d 3d 61 3b 29 7b 76 61 72 20 62 3d 43 67 28 61 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 61 Data Ascii: nate!==d)throw Error(m(190));}if(3!==c.tag)throw Error(m(188));return c.stateNode.current===c?a:b}function Bg(a){a=nj(a);return null!==a?Cg(a):null}function Cg(a){if(5===a.tag\|\|6===a.tag)return a;for(a=a.child;null!==a;){var b=Cg(a);if(null!==b)return b;a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	151.101.1.229	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:59 UTC	662	OUT	GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228246008.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:59 UTC	766	IN	HTTP/1.1 200 OK Connection: close Content-Length: 119175 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.9.0-beta.1 X-JSD-Version-Type: version ETag: W/"1d187-o2+OYezMEsMzpEcT3E+ubsFUj8Q" Accept-Ranges: bytes Age: 24899 Date: Fri, 14 Mar 2025 09:42:59 GMT X-Served-By: cache-fra-eddf8230077-FRA, cache-ewr-kewr1740066-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:42:59 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 61 63 74 2d 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 72 65 61 63 74 22 29 2c 72 65 71 75 69 72 65 28 22 72 65 61 63 74 2d 64 6f 6d 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 72 65 61 63 74 22 2c 22 72 65 Data Ascii: /! For license information please see react-bootstrap.min.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","re
2025-03-14 09:42:59 UTC	16384	IN	Data Raw: 2c 2e 2e 2e 78 7d 2c 67 29 3d 3e 7b 63 6f 6e 73 74 20 79 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 75 3f 75 28 29 3a 75 2c 77 3d 28 30 2c 6e 2e 75 73 65 4d 65 6d 6f 29 28 28 28 29 3d 3e 51 28 28 65 3d 3e 7b 65 2e 73 74 79 6c 65 5b 79 5d 3d 22 30 22 7d 29 2c 65 29 29 2c 5b 79 2c 65 5d 29 2c 4e 3d 28 30 2c 6e 2e 75 73 65 4d 65 6d 6f 29 28 28 28 29 3d 3e 51 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 60 73 63 72 6f 6c 6c 24 7b 79 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 24 7b 79 2e 73 6c 69 63 65 28 31 29 7d 60 3b 65 2e 73 74 79 6c 65 5b 79 5d 3d 60 24 7b 65 5b 74 5d 7d 70 78 60 7d 29 2c 6f 29 29 2c 5b 79 2c 6f 5d 29 2c 45 3d 28 30 2c 6e 2e 75 73 65 4d 65 6d 6f 29 28 28 28 29 3d 3e 51 28 28 65 3d 3e 7b 65 2e 73 74 79 6c 65 5b 79 Data Ascii: ,...x},g)=>{const y="function"==typeof u?u():u,w=(0,n.useMemo)((()=>Q((e=>{e.style[y]="0"}),e)),[y,e]),N=(0,n.useMemo)((()=>Q((e=>{const t=`scroll${y[0].toUpperCase()}${y.slice(1)}`;e.style[y]=`${e[t]}px`}),o)),[y,o]),E=(0,n.useMemo)((()=>Q((e=>{e.style[y
2025-03-14 09:42:59 UTC	16384	IN	Data Raw: 45 6e 74 65 72 65 64 3a 6f 3f 70 65 3a 76 6f 69 64 20 30 2c 61 64 64 45 6e 64 4c 69 73 74 65 6e 65 72 3a 4a 2c 63 68 69 6c 64 72 65 6e 3a 28 72 2c 61 29 3d 3e 6e 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 28 65 2c 7b 2e 2e 2e 61 2c 63 6c 61 73 73 4e 61 6d 65 3a 74 28 29 28 65 2e 70 72 6f 70 73 2e 63 6c 61 73 73 4e 61 6d 65 2c 6f 26 26 22 65 6e 74 65 72 65 64 22 21 3d 3d 72 26 26 75 65 2c 28 22 65 6e 74 65 72 65 64 22 3d 3d 3d 72 7c 7c 22 65 78 69 74 69 6e 67 22 3d 3d 3d 72 29 26 26 22 61 63 74 69 76 65 22 2c 28 22 65 6e 74 65 72 69 6e 67 22 3d 3d 3d 72 7c 7c 22 65 78 69 74 69 6e 67 22 3d 3d 3d 72 29 26 26 64 65 29 7d 29 7d 29 3a 6e 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 28 65 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 28 29 28 65 2e 70 72 6f 70 73 2e 63 6c 61 73 Data Ascii: Entered:o?pe:void 0,addEndListener:J,children:(r,a)=>n.cloneElement(e,{...a,className:t()(e.props.className,o&&"entered"!==r&&ue,("entered"===r\|\|"exiting"===r)&&"active",("entering"===r\|\|"exiting"===r)&&de)})}):n.cloneElement(e,{className:t()(e.props.clas
2025-03-14 09:42:59 UTC	16384	IN	Data Raw: 7b 62 6f 75 6e 64 61 72 79 3a 6c 2c 72 6f 6f 74 42 6f 75 6e 64 61 72 79 3a 63 2c 70 61 64 64 69 6e 67 3a 64 2c 61 6c 74 42 6f 75 6e 64 61 72 79 3a 75 7d 29 2c 62 3d 6d 6e 28 74 2e 70 6c 61 63 65 6d 65 6e 74 29 2c 78 3d 4a 6e 28 74 2e 70 6c 61 63 65 6d 65 6e 74 29 2c 67 3d 21 78 2c 79 3d 4d 6e 28 62 29 2c 77 3d 22 78 22 3d 3d 3d 79 3f 22 79 22 3a 22 78 22 2c 4e 3d 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 70 6f 70 70 65 72 4f 66 66 73 65 74 73 2c 45 3d 74 2e 72 65 63 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 6a 3d 74 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 43 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 76 3f 76 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 72 65 63 74 73 2c 7b 70 6c 61 63 65 6d 65 6e 74 3a 74 2e 70 6c 61 Data Ascii: {boundary:l,rootBoundary:c,padding:d,altBoundary:u}),b=mn(t.placement),x=Jn(t.placement),g=!x,y=Mn(b),w="x"===y?"y":"x",N=t.modifiersData.popperOffsets,E=t.rects.reference,j=t.rects.popper,C="function"==typeof v?v(Object.assign({},t.rects,{placement:t.pla
2025-03-14 09:42:59 UTC	16384	IN	Data Raw: 61 63 74 69 76 65 3a 73 2c 61 73 3a 69 3d 56 65 2c 2e 2e 2e 6c 7d 2c 63 29 3d 3e 7b 63 6f 6e 73 74 20 75 3d 79 28 65 2c 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 29 2c 5b 64 2c 66 5d 3d 75 6f 28 7b 6b 65 79 3a 72 2c 68 72 65 66 3a 6c 2e 68 72 65 66 2c 64 69 73 61 62 6c 65 64 3a 6f 2c 6f 6e 43 6c 69 63 6b 3a 61 2c 61 63 74 69 76 65 3a 73 7d 29 3b 72 65 74 75 72 6e 28 30 2c 6d 2e 6a 73 78 29 28 69 2c 7b 2e 2e 2e 6c 2c 2e 2e 2e 64 2c 72 65 66 3a 63 2c 63 6c 61 73 73 4e 61 6d 65 3a 74 28 29 28 6e 2c 75 2c 66 2e 69 73 41 63 74 69 76 65 26 26 22 61 63 74 69 76 65 22 2c 6f 26 26 22 64 69 73 61 62 6c 65 64 22 29 7d 29 7d 29 29 3b 43 6f 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 44 72 6f 70 64 6f 77 6e 49 74 65 6d 22 3b 63 6f 6e 73 74 20 4f 6f 3d 43 6f 2c 52 6f Data Ascii: active:s,as:i=Ve,...l},c)=>{const u=y(e,"dropdown-item"),[d,f]=uo({key:r,href:l.href,disabled:o,onClick:a,active:s});return(0,m.jsx)(i,{...l,...d,ref:c,className:t()(n,u,f.isActive&&"active",o&&"disabled")})}));Co.displayName="DropdownItem";const Oo=Co,Ro
2025-03-14 09:42:59 UTC	16384	IN	Data Raw: 6e 45 6e 74 65 72 3a 6f 2c 75 6e 6d 6f 75 6e 74 4f 6e 45 78 69 74 3a 61 7d 29 7b 63 6f 6e 73 74 20 73 3d 28 30 2c 6e 2e 75 73 65 52 65 66 29 28 6e 75 6c 6c 29 2c 69 3d 28 30 2c 6e 2e 75 73 65 52 65 66 29 28 74 29 2c 6c 3d 6b 65 28 72 29 3b 28 30 2c 6e 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 74 3f 69 2e 63 75 72 72 65 6e 74 3d 21 30 3a 6c 28 73 2e 63 75 72 72 65 6e 74 29 7d 29 2c 5b 74 2c 6c 5d 29 3b 63 6f 6e 73 74 20 63 3d 6e 65 28 73 2c 65 2e 72 65 66 29 2c 75 3d 28 30 2c 6e 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 29 28 65 2c 7b 72 65 66 3a 63 7d 29 3b 72 65 74 75 72 6e 20 74 3f 75 3a 61 7c 7c 21 69 2e 63 75 72 72 65 6e 74 26 26 6f 3f 6e 75 6c 6c 3a 75 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 73 28 7b 63 68 69 6c 64 72 65 6e 3a 65 2c 69 6e 3a 74 Data Ascii: nEnter:o,unmountOnExit:a}){const s=(0,n.useRef)(null),i=(0,n.useRef)(t),l=ke(r);(0,n.useEffect)((()=>{t?i.current=!0:l(s.current)}),[t,l]);const c=ne(s,e.ref),u=(0,n.cloneElement)(e,{ref:c});return t?u:a\|\|!i.current&&o?null:u};function os({children:e,in:t
2025-03-14 09:42:59 UTC	16384	IN	Data Raw: 61 73 73 4e 61 6d 65 3a 75 2c 61 73 3a 64 3d 22 6e 61 76 22 2c 65 78 70 61 6e 64 65 64 3a 66 2c 6f 6e 54 6f 67 67 6c 65 3a 76 2c 6f 6e 53 65 6c 65 63 74 3a 68 2c 63 6f 6c 6c 61 70 73 65 4f 6e 53 65 6c 65 63 74 3a 62 3d 21 31 2c 2e 2e 2e 78 7d 3d 70 28 65 2c 7b 65 78 70 61 6e 64 65 64 3a 22 6f 6e 54 6f 67 67 6c 65 22 7d 29 2c 67 3d 79 28 6f 2c 22 6e 61 76 62 61 72 22 29 2c 77 3d 28 30 2c 6e 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 28 2e 2e 2e 65 29 3d 3e 7b 6e 75 6c 6c 3d 3d 68 7c 7c 68 28 2e 2e 2e 65 29 2c 62 26 26 66 26 26 28 6e 75 6c 6c 3d 3d 76 7c 7c 76 28 21 31 29 29 7d 29 2c 5b 68 2c 62 2c 66 2c 76 5d 29 3b 76 6f 69 64 20 30 3d 3d 3d 78 2e 72 6f 6c 65 26 26 22 6e 61 76 22 21 3d 3d 64 26 26 28 78 2e 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e Data Ascii: assName:u,as:d="nav",expanded:f,onToggle:v,onSelect:h,collapseOnSelect:b=!1,...x}=p(e,{expanded:"onToggle"}),g=y(o,"navbar"),w=(0,n.useCallback)(((...e)=>{null==h\|\|h(...e),b&&f&&(null==v\|\|v(!1))}),[h,b,f,v]);void 0===x.role&&"nav"!==d&&(x.role="navigation
2025-03-14 09:42:59 UTC	4487	IN	Data Raw: 78 3a 65 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 2c 73 74 72 69 70 65 64 3a 72 2c 62 6f 72 64 65 72 65 64 3a 6f 2c 62 6f 72 64 65 72 6c 65 73 73 3a 61 2c 68 6f 76 65 72 3a 73 2c 73 69 7a 65 3a 69 2c 76 61 72 69 61 6e 74 3a 6c 2c 72 65 73 70 6f 6e 73 69 76 65 3a 63 2c 2e 2e 2e 75 7d 2c 64 29 3d 3e 7b 63 6f 6e 73 74 20 66 3d 79 28 65 2c 22 74 61 62 6c 65 22 29 2c 70 3d 74 28 29 28 6e 2c 66 2c 6c 26 26 60 24 7b 66 7d 2d 24 7b 6c 7d 60 2c 69 26 26 60 24 7b 66 7d 2d 24 7b 69 7d 60 2c 72 26 26 60 24 7b 66 7d 2d 24 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 3f 60 73 74 72 69 70 65 64 2d 24 7b 72 7d 60 3a 22 73 74 72 69 70 65 64 22 7d 60 2c 6f 26 26 60 24 7b 66 7d 2d 62 6f 72 64 65 72 65 64 60 2c 61 26 26 60 24 7b 66 7d 2d 62 6f 72 64 65 72 6c 65 73 73 Data Ascii: x:e,className:n,striped:r,bordered:o,borderless:a,hover:s,size:i,variant:l,responsive:c,...u},d)=>{const f=y(e,"table"),p=t()(n,f,l&&`${f}-${l}`,i&&`${f}-${i}`,r&&`${f}-${"string"==typeof r?`striped-${r}`:"striped"}`,o&&`${f}-bordered`,a&&`${f}-borderless

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49724	157.240.251.9	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:59 UTC	778	OUT	GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:59 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:42:59 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:42:59 UTC	3366	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4a 55 2d 6f 4d 33 61 72 57 31 78 55 6e 32 74 50 43 31 4d 63 79 55 48 41 35 52 38 72 78 63 39 46 79 65 71 49 33 52 57 57 62 57 57 52 34 78 6b 77 59 4e 62 30 78 59 4c 77 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4a 36 66 5f 5f 58 76 70 57 41 4b 72 7a 6f 74 56 6c 70 76 71 4f 58 6e 42 39 59 34 72 68 67 4e 64 41 62 31 57 4f 33 51 54 34 35 59 6f 4f 4c 78 37 44 4a 71 4c 70 76 39 76 4e 6e 6c 44 4f 68 67 37 54 71 68 47 5a 59 68 41 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 49 5a 6d 37 30 4e 7a 57 50 51 53 5a 4d 4a 72 6b 71 78 63 64 71 67 46 47 45 51 66 49 5f 76 39 55 49 7a Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcJU-oM3arW1xUn2tPC1McyUHA5R8rxc9FyeqI3RWWbWWR4xkwYNb0xYLw"; e_fb_requesttime="AcJ6f__XvpWAKrzotVlpvqOXnB9Y4rhgNdAb1WO3QT45YoOLx7DJqLpv9vNnlDOhg7TqhGZYhA"; e_proxy="AcIZm70NzWPQSZMJrkqxcdqgFGEQfI_v9UIz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49725	157.240.251.9	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:59 UTC	778	OUT	GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:59 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:42:59 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:42:59 UTC	3367	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4b 62 77 63 76 73 57 6a 68 69 46 37 6a 41 4a 79 6e 6c 59 53 5f 30 41 67 57 44 35 44 59 42 46 56 76 4c 55 6d 6b 56 4e 71 39 63 50 4e 59 4c 4a 54 43 37 61 71 54 73 6b 51 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4b 73 54 4e 7a 76 6a 67 30 43 36 53 33 42 7a 57 69 69 50 44 75 39 70 4d 69 46 63 76 6e 59 6e 41 69 41 4d 4d 5a 37 78 45 63 4c 61 79 39 71 75 37 37 6e 79 51 67 69 64 6f 72 77 6a 31 69 79 45 70 6d 57 6c 57 68 6e 66 51 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 49 63 72 64 43 64 63 5a 59 47 77 76 52 32 70 75 5a 57 39 46 55 6d 38 67 61 48 54 79 6d 4a 74 66 36 72 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcKbwcvsWjhiF7jAJynlYS_0AgWD5DYBFVvLUmkVNq9cPNYLJTC7aqTskQ"; e_fb_requesttime="AcKsTNzvjg0C6S3BzWiiPDu9pMiFcvnYnAiAMMZ7xEcLay9qu77nyQgidorwj1iyEpmWlWhnfQ"; e_proxy="AcIcrdCdcZYGwvR2puZW9FUm8gaHTymJtf6r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	157.240.251.9	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:59 UTC	778	OUT	GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:42:59 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:42:59 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:42:59 UTC	3365	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 49 63 6e 4b 55 38 37 77 54 63 4e 45 33 74 51 45 72 54 63 4b 44 6b 79 55 66 53 76 68 77 4d 4e 55 78 6c 55 51 49 5a 34 5a 72 46 77 4e 37 74 4f 44 30 37 4f 45 4e 49 6b 67 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4b 55 59 6b 68 62 58 74 33 58 6a 50 72 71 66 33 47 55 7a 48 39 56 58 58 61 68 4e 6c 2d 42 34 48 30 33 63 2d 4d 47 4d 4b 46 47 51 50 58 44 65 4a 63 2d 55 39 68 47 4f 67 7a 39 7a 49 46 70 35 4f 43 57 58 4f 75 53 44 77 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4b 5f 58 42 6c 4d 6d 6e 46 38 54 58 4d 48 6a 76 4e 6b 57 4b 4e 41 6f 54 6d 4d 77 4c 53 53 54 6d 30 4c Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcIcnKU87wTcNE3tQErTcKDkyUfSvhwMNUxlUQIZ4ZrFwN7tOD07OENIkg"; e_fb_requesttime="AcKUYkhbXt3XjPrqf3GUzH9VXXahNl-B4H03c-MGMKFGQPXDeJc-U9hGOgz9zIFp5OCWXOuSDw"; e_proxy="AcK_XBlMmnF8TXMHjvNkWKNAoTmMwLSSTm0L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49729	172.67.168.191	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:42:59 UTC	469	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228246008.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:00 UTC	946	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:00 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qo%2BzfxoJ%2ByPRmDRutsqNszVew2ZARjzQ00Omaa0dizI67%2FIPyfJk0nDMRh94vVnku80YmedGBeDrHMYfQ9aW7OG9%2BrM0HlIzcXvpWICb2n3dxNlLgUVOKLPuUHhjcqtx2Fcq1IQNVc3CEcJJZzg6rsT%2B1SeMLTvrH8VfCwreig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d300a85c1dc7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2632&min_rtt=2520&rtt_var=1025&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1041&delivery_rate=1158730&cwnd=104&unsent_bytes=0&cid=0beff6e0fbf51191&ts=438&x=0"
2025-03-14 09:43:00 UTC	423	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:43:00 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 36 81 09 74 0d 2d 8e Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs6t-
2025-03-14 09:43:00 UTC	1369	IN	Data Raw: 09 bc f7 c3 ed 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 bd f2 24 a2 24 a2 29 Data Ascii: :WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8$$)
2025-03-14 09:43:00 UTC	1369	IN	Data Raw: e8 79 ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 51 ef 99 4f 5a f4 bc Data Ascii: y^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2QOZ
2025-03-14 09:43:00 UTC	1369	IN	Data Raw: 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 4f 2c 77 32 f1 d9 c2 Data Ascii: >4T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!O,w2
2025-03-14 09:43:00 UTC	1369	IN	Data Raw: d6 48 45 61 61 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 Data Ascii: HEaatOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwFtiwF
2025-03-14 09:43:00 UTC	1369	IN	Data Raw: 33 96 19 5e 1b b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 92 69 35 3b 72 5a 6c Data Ascii: 3^<i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%i5;rZl
2025-03-14 09:43:00 UTC	1369	IN	Data Raw: 5b ec 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 34 66 8c d3 19 8a 17 Data Ascii: [Cqf-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV4f
2025-03-14 09:43:00 UTC	1369	IN	Data Raw: 4e 88 be 87 dc 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 ba f4 aa 60 30 76 ed Data Ascii: NuM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C`0v
2025-03-14 09:43:00 UTC	1369	IN	Data Raw: 33 ec 40 8a 2b c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 d7 a3 07 15 af e1 38 Data Ascii: 3@+^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49730	104.26.8.44	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:00 UTC	558	OUT	OPTIONS /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://case-id-1000228246008.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:00 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin access-control-allow-origin: https://case-id-1000228246008.counselschambers.co.uk access-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 86400 X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4VjnR18n7hyk5FBkAIjjkF5Y1yndMY5nemzGWnn6NQCY4f1WW8oelGo3PTvpv%2B%2FQzby9Oc6eEFiJV4%2FJoq3GZsKzXWzpSurBORF0DlynsymsK2ESoHzFW5WS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3028b2943e9-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3175&min_rtt=1866&rtt_var=3141&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2790&recv_bytes=1134&delivery_rate=1546610&cwnd=196&unsent_bytes=0&cid=7844a20b8f0ac623&ts=291&x=0"
2025-03-14 09:43:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49731	104.26.8.44	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:00 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228246008.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:01 UTC	1010	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:01 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: OPTIONS, POST, OPTIONS, HEAD, GET X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228246008.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YxbymicfkgtGCTtbYjA%2FdkkdTi45qtdVEpl4CdwQZicGXVKjVbVMlUtcsBfm02OflVPwIEHnXx7jYsV2EPlSGrK%2B5XW%2BeVz57nXgDBwgJ2r5kG0FIV7ba7xP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3073f8a4234-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4589&min_rtt=1704&rtt_var=6238&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2788&recv_bytes=1211&delivery_rate=1713615&cwnd=183&unsent_bytes=0&cid=0966382a8ee9d04b&ts=287&x=0"
2025-03-14 09:43:01 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49732	172.67.69.226	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:01 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:02 UTC	930	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:02 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: GET, POST, OPTIONS, HEAD, OPTIONS X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtR4V%2BsfeLtQt1DGsrZAHvlCp2d1390m9Xx1%2BgZpSwJ8pwCYRlMk81%2BlwHjEqu5w0inIJm%2FDgNdYAIKgmdbfAaPAL%2BAbUXNZfk8diZuGApJF2ykMoTR15eGI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d30cd83b335a-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3501&min_rtt=2045&rtt_var=3464&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2790&recv_bytes=950&delivery_rate=1427872&cwnd=221&unsent_bytes=0&cid=8082ef6a9d9c3b56&ts=367&x=0"
2025-03-14 09:43:02 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49735	104.21.48.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:04 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228246008.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:04 UTC	867	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:43:04 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1QMf1421hG%2BDLKMbAcY4PcNb2pbfhj4yz7%2BsgWeN7rXxFLRqNsrgV9auSOvX7wyFSI3LEkFV7XhJjzu8Z1AJn%2BOs280%2BLR5Aim6UkfhrCbLwWkL7hJgog4ApX2GdM7fgG9tpQ2He"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d31bab7178d9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1955&min_rtt=1945&rtt_var=751&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1155&delivery_rate=1437715&cwnd=144&unsent_bytes=0&cid=e15f24dc37b9abee&ts=413&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49737	104.21.48.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:05 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 55 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228246008.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:05 UTC	55	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 35 51 62 38 7a 52 38 6e 66 41 6e 43 4b 75 41 68 4a 6c 45 75 66 2f 6f 70 4f 7a 72 70 55 4c 44 6f 6d 2b 4f 4a 51 2f 63 70 55 73 41 3d 22 7d Data Ascii: {"data":"5Qb8zR8nfAnCKuAhJlEuf/opOzrpULDom+OJQ/cpUsA="}
2025-03-14 09:43:05 UTC	875	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:05 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZKbaexIf%2BqKLNyoK%2FRrXsp1vuXusxboo%2F4Y0xk3X6CxYDb0jIUVOGvPP7kBdrVaSuxH0hnFMnuSUAohE92aSvaW%2FznKmoujSnjjf%2Fe0EcCoJhth6Y%2FsNwJbUtM14jgc1eZZLE5nD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d321289819ae-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2010&min_rtt=2003&rtt_var=766&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1387&delivery_rate=1415414&cwnd=213&unsent_bytes=0&cid=ad75405b97aedcc1&ts=428&x=0"
2025-03-14 09:43:05 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49738	104.21.48.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:05 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:06 UTC	840	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:43:06 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ODgZBzTbVvirfooCGDasIZoS1qPG1AiL%2B2UsvmmQ90i%2FWIIc2QEdxxaN2kyUcmA4lQiP7zthAWl8S4TTD1umXIuBrXFRIISVUZzxVi%2BNdVUKOgYj%2BCeu1vcbxwGXLU%2FOwYVqKjdt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d326ce10a67e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2000&min_rtt=1990&rtt_var=766&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=970&delivery_rate=1410628&cwnd=177&unsent_bytes=0&cid=2e115268e9b2284f&ts=417&x=0"
2025-03-14 09:43:06 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 38 39 38 33 30 35 64 63 30 66 33 36 34 39 62 30 34 31 38 36 62 33 33 62 62 30 61 62 62 39 31 33 2d 66 61 33 37 35 31 39 35 34 34 34 63 61 35 34 63 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-898305dc0f3649b04186b33bb0abb913-fa375195444ca54c-00"}
2025-03-14 09:43:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49739	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:06 UTC	552	OUT	OPTIONS /report/v4?s=ODgZBzTbVvirfooCGDasIZoS1qPG1AiL%2B2UsvmmQ90i%2FWIIc2QEdxxaN2kyUcmA4lQiP7zthAWl8S4TTD1umXIuBrXFRIISVUZzxVi%2BNdVUKOgYj%2BCeu1vcbxwGXLU%2FOwYVqKjdt HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 14 Mar 2025 09:43:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49740	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:07 UTC	527	OUT	POST /report/v4?s=ODgZBzTbVvirfooCGDasIZoS1qPG1AiL%2B2UsvmmQ90i%2FWIIc2QEdxxaN2kyUcmA4lQiP7zthAWl8S4TTD1umXIuBrXFRIISVUZzxVi%2BNdVUKOgYj%2BCeu1vcbxwGXLU%2FOwYVqKjdt HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 402 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:07 UTC	402	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 39 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 38 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 6e 67 2e 63 6f Data Ascii: [{"age":0,"body":{"elapsed_time":895,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.48.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourcing.co
2025-03-14 09:43:07 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:43:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49742	104.21.70.234	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:12 UTC	791	OUT	GET /case-support.html HTTP/1.1 Host: case-id-1000228246008.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://case-id-1000228246008.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:19 UTC	880	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:39:24 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TalGjapZk42K5Vp71rqds1naYqCANvgr6vsSNTXqIUprIO9EymBpfHAnBSrXuF8ogxVUssACauslAY6cYz0tBsDlYXgVuCBtoGdS88atNWaeDV9G3M339RyTAPnIDO0XSqzfFwb79V0BN%2FiSyqTEksgBEGn3Xgu8pcXKZye45w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d34e5874c358-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1461&min_rtt=1455&rtt_var=559&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1363&delivery_rate=1935056&cwnd=152&unsent_bytes=0&cid=cb36ed38a0962b32&ts=7217&x=0"
2025-03-14 09:43:19 UTC	489	IN	Data Raw: 33 37 63 65 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 Data Ascii: 37ce<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCF
2025-03-14 09:43:19 UTC	1369	IN	Data Raw: 38 42 6a 38 44 33 53 4a 38 4a 52 41 53 65 78 4a 52 35 6d 32 67 4f 51 6e 2f 2f 45 54 68 30 53 6f 4a 77 30 74 63 75 62 35 66 6c 4a 37 50 35 6a 41 57 41 74 2b 43 4b 6c 41 42 39 6f 4f 77 45 6c 35 53 35 36 54 6e 67 78 4d 49 6e 41 45 66 51 2b 49 63 51 6b 65 73 77 78 74 51 59 65 74 6e 78 4c 55 35 76 49 52 71 72 30 53 56 51 48 35 65 72 42 61 4c 2b 77 37 77 70 59 55 41 69 43 79 64 55 45 44 4c 62 74 49 68 38 47 4f 43 34 47 33 67 63 64 58 58 6c 64 4f 38 46 61 46 48 5a 58 41 56 64 32 6e 58 56 76 4b 47 32 69 45 68 49 4d 46 77 6b 41 74 67 5a 70 49 64 61 70 38 70 75 4b 51 4e 33 44 4b 42 51 50 4d 72 57 49 51 43 49 6f 78 5a 77 41 63 53 33 68 41 53 43 79 41 51 56 67 55 38 65 54 37 68 4b 66 41 4c 32 68 54 6b 34 4a 4a 65 79 4d 79 6c 4a 41 56 52 46 39 56 47 47 68 51 42 5a 72 Data Ascii: 8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMylJAVRF9VGGhQBZr
2025-03-14 09:43:19 UTC	1369	IN	Data Raw: 4b 62 67 4c 65 42 4f 45 50 77 4e 63 35 4b 44 51 50 71 2b 72 41 6e 68 66 45 50 72 36 6e 6a 47 39 34 6e 49 32 6d 61 74 36 36 47 36 30 65 70 64 4a 41 45 53 59 68 59 51 50 47 6b 77 75 4a 67 6a 57 43 76 61 43 58 65 43 50 42 4f 47 44 34 44 35 79 57 41 69 66 69 66 43 2f 6a 62 63 4f 4d 79 37 51 4c 53 43 41 4d 36 6e 76 6c 4c 36 78 2f 77 32 71 47 76 77 51 41 73 4e 6f 49 61 45 49 2b 49 45 6d 5a 7a 63 50 69 42 52 35 69 56 49 73 68 4a 2b 44 32 52 2f 51 6a 4e 6e 6e 39 68 46 55 33 69 4d 46 51 4c 2f 67 4d 77 6f 43 78 67 34 4a 39 4c 68 45 6a 62 6d 76 33 65 43 6e 46 41 52 32 30 6e 55 57 5a 76 34 70 68 49 2b 4f 74 34 39 42 52 57 39 63 6f 47 6f 77 4c 75 41 4e 67 54 44 54 41 6f 6e 4a 36 75 4b 63 42 5a 6f 64 43 4f 77 42 47 71 47 75 58 36 4c 7a 4f 62 52 4f 46 41 67 71 4e 77 54 Data Ascii: KbgLeBOEPwNc5KDQPq+rAnhfEPr6njG94nI2mat66G60epdJAESYhYQPGkwuJgjWCvaCXeCPBOGD4D5yWAififC/jbcOMy7QLSCAM6nvlL6x/w2qGvwQAsNoIaEI+IEmZzcPiBR5iVIshJ+D2R/QjNnn9hFU3iMFQL/gMwoCxg4J9LhEjbmv3eCnFAR20nUWZv4phI+Ot49BRW9coGowLuANgTDTAonJ6uKcBZodCOwBGqGuX6LzObROFAgqNwT
2025-03-14 09:43:19 UTC	1369	IN	Data Raw: 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 63 73 73 2f 69 6e 74 6c 54 65 6c 49 6e 70 75 74 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 54 68 c6 b0 20 76 69 e1 bb 87 6e 20 4a 61 76 61 53 63 72 69 70 74 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 6a 73 2f 69 6e 74 6c 54 65 6c 49 6e 70 75 74 2e 6d 69 6e Data Ascii: --> <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css"> ... Th vin JavaScript --> <script src="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min
2025-03-14 09:43:19 UTC	1369	IN	Data Raw: 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ock-ui .ns-block-ui-container .ns-block-ui-loader-container { position: absolute; top: 50%; left: 0; right: 0; text-align: center;
2025-03-14 09:43:19 UTC	1369	IN	Data Raw: 65 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 62 6c 6f 63 6b 69 6e 67 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 61 64 65 6f 75 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 Data Ascii: ed; top: 0; right: 0; bottom: 0; left: 0; } .ns-block-ui.blocking .ns-block-ui-container:not(.fadeout) { opacity: 1; }
2025-03-14 09:43:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 Data Ascii: opacity: 1; } to { opacity: 0; } } @-webkit-keyframes fadeInRTL1 { 0% { opacity: 0; -webkit-transform: translateX(20
2025-03-14 09:43:19 UTC	1369	IN	Data Raw: 61 74 65 58 28 32 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 34 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d Data Ascii: ateX(20px); } 40% { opacity: 1; -webkit-transform: translateX(0px); transform: translateX(0px); } 60% { opacity: 1; }
2025-03-14 09:43:19 UTC	1369	IN	Data Raw: 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 32 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 Data Ascii: pacity: 1; } 80% { opacity: 0; } } @keyframes fadeInRTL3 { 0% { opacity: 0; } 20% { opacity: 0;
2025-03-14 09:43:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 74 6f 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 33 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d 73 74 61 74 69 63 20 7b 0d 0a 20 20 20 20 20 Data Ascii: } .--savior-overlay-z-index-top { z-index: 2147483643 !important; } .--savior-overlay-position-relative { position: relative; } .--savior-overlay-position-static {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49743	151.101.1.229	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:19 UTC	656	OUT	GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:20 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 19157 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 17.0.19 X-JSD-Version-Type: version ETag: W/"4ad5-/7iiVjPE3eq4HRsXQqwv0LRCpMY" Accept-Ranges: bytes Age: 1458425 Date: Fri, 14 Mar 2025 09:43:20 GMT X-Served-By: cache-fra-etou8220138-FRA, cache-ewr-kewr1740051-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 2e 69 74 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 69 74 69 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 69 74 69 5f 5f 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 74 69 5f 5f 76 2d 68 69 64 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 69 74 69 20 69 6e 70 75 74 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 Data Ascii: .iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0!impor
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 6d 65 2c 2e 69 74 69 5f 5f 64 69 61 6c 2d 63 6f 64 65 2c 2e 69 74 69 5f 5f 66 6c 61 67 2d 62 6f 78 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 74 69 5f 5f 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 2c 2e 69 74 69 5f 5f 66 6c 61 67 2d 62 6f 78 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 70 78 7d 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 69 6e 70 75 74 2c 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d 64 69 61 6c 2d 63 6f 64 65 20 69 6e 70 75 74 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d Data Ascii: me,.iti__dial-code,.iti__flag-box{vertical-align:middle}.iti__country-name,.iti__flag-box{margin-right:6px}.iti--allow-dropdown input,.iti--allow-dropdown input[type=tel],.iti--allow-dropdown input[type=text],.iti--separate-dial-code input,.iti--separate-
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 69 74 69 2d 6d 6f 62 69 6c 65 20 2e 69 74 69 5f 5f 63 6f 75 6e 74 72 79 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 65 6d 7d 2e 69 74 69 5f 5f 66 6c 61 67 7b 77 69 64 74 68 3a 32 30 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 65 7b 77 69 64 74 68 3a 31 38 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 68 7b 77 69 64 74 68 3a 31 35 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 63 7b 77 69 64 74 68 3a 31 39 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6e 65 7b 77 69 64 74 68 3a 31 38 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6e 70 7b 77 69 64 74 68 3a 31 33 70 78 7d 2e 69 74 69 5f 5f 66 6c Data Ascii: %;width:100%}.iti-mobile .iti__country{padding:10px 10px;line-height:1.5em}.iti__flag{width:20px}.iti__flag.iti__be{width:18px}.iti__flag.iti__ch{width:15px}.iti__flag.iti__mc{width:19px}.iti__flag.iti__ne{width:18px}.iti__flag.iti__np{width:13px}.iti__fl
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 73 69 74 69 6f 6e 3a 2d 33 35 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 61 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 37 34 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 62 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 39 36 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 64 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 31 38 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 65 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 34 30 70 78 20 30 Data Ascii: sition:-352px 0}.iti__flag.iti__ba{height:10px;background-position:-374px 0}.iti__flag.iti__bb{height:14px;background-position:-396px 0}.iti__flag.iti__bd{height:12px;background-position:-418px 0}.iti__flag.iti__be{height:15px;background-position:-440px 0
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 2d 38 35 36 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 64 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 37 38 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 66 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 30 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 67 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 32 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 68 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 34 34 70 78 Data Ascii: position:-856px 0}.iti__flag.iti__cd{height:15px;background-position:-878px 0}.iti__flag.iti__cf{height:14px;background-position:-900px 0}.iti__flag.iti__cg{height:14px;background-position:-922px 0}.iti__flag.iti__ch{height:15px;background-position:-944px
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 33 35 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 64 6f 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 33 37 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 64 7a 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 30 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 61 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 32 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 63 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b Data Ascii: t:10px;background-position:-1357px 0}.iti__flag.iti__do{height:14px;background-position:-1379px 0}.iti__flag.iti__dz{height:14px;background-position:-1401px 0}.iti__flag.iti__ea{height:14px;background-position:-1423px 0}.iti__flag.iti__ec{height:14px;back
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 67 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 38 36 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 68 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 38 38 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 69 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 30 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 6c 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 32 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 Data Ascii: }.iti__flag.iti__gg{height:14px;background-position:-1863px 0}.iti__flag.iti__gh{height:14px;background-position:-1885px 0}.iti__flag.iti__gi{height:10px;background-position:-1907px 0}.iti__flag.iti__gl{height:14px;background-position:-1929px 0}.iti__flag
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 34 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6c 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 36 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6d 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 39 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6e 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 31 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6f 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 Data Ascii: ground-position:-2347px 0}.iti__flag.iti__il{height:15px;background-position:-2369px 0}.iti__flag.iti__im{height:10px;background-position:-2391px 0}.iti__flag.iti__in{height:14px;background-position:-2413px 0}.iti__flag.iti__io{height:10px;background-posi
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 2e 69 74 69 5f 5f 6b 7a 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 35 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 61 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 37 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 62 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 39 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 63 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 31 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 69 7b 68 65 Data Ascii: .iti__kz{height:10px;background-position:-2853px 0}.iti__flag.iti__la{height:14px;background-position:-2875px 0}.iti__flag.iti__lb{height:14px;background-position:-2897px 0}.iti__flag.iti__lc{height:10px;background-position:-2919px 0}.iti__flag.iti__li{he
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 74 69 6f 6e 3a 2d 33 33 33 36 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 6f 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 33 35 38 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 70 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 33 38 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 71 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 34 30 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 72 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 34 32 34 70 Data Ascii: tion:-3336px 0}.iti__flag.iti__mo{height:14px;background-position:-3358px 0}.iti__flag.iti__mp{height:10px;background-position:-3380px 0}.iti__flag.iti__mq{height:14px;background-position:-3402px 0}.iti__flag.iti__mr{height:14px;background-position:-3424p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49744	151.101.1.229	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:19 UTC	640	OUT	GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:20 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 29519 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 17.0.19 X-JSD-Version-Type: version ETag: W/"734f-tveChQZOzfKDCBYG03tkPAXVi2E" Accept-Ranges: bytes Age: 52322 Date: Fri, 14 Mar 2025 09:43:20 GMT X-Served-By: cache-fra-etou8220100-FRA, cache-ewr-kewr1740096-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 2f 2a 0a 20 2a 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 54 65 6c 65 70 68 6f 6e 65 20 49 6e 70 75 74 20 76 31 37 2e 30 2e 31 39 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 61 63 6b 6f 63 6e 72 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2e 67 69 74 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3a 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 3d 61 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: /* * International Telephone Input v17.0.19 * https://github.com/jackocnr/intl-tel-input.git * Licensed under the MIT license */!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use strict"
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 31 22 5d 2c 5b 22 42 65 6e 69 6e 20 28 42 c3 a9 6e 69 6e 29 22 2c 22 62 6a 22 2c 22 32 32 39 22 5d 2c 5b 22 42 65 72 6d 75 64 61 22 2c 22 62 6d 22 2c 22 31 22 2c 31 30 2c 5b 22 34 34 31 22 5d 5d 2c 5b 22 42 68 75 74 61 6e 20 28 e0 bd a0 e0 bd 96 e0 be b2 e0 bd b4 e0 bd 82 29 22 2c 22 62 74 22 2c 22 39 37 35 22 5d 2c 5b 22 42 6f 6c 69 76 69 61 22 2c 22 62 6f 22 2c 22 35 39 31 22 5d 2c 5b 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 20 28 d0 91 d0 be d1 81 d0 bd d0 b0 20 d0 b8 20 d0 a5 d0 b5 d1 80 d1 86 d0 b5 d0 b3 d0 be d0 b2 d0 b8 d0 bd d0 b0 29 22 2c 22 62 61 22 2c 22 33 38 37 22 5d 2c 5b 22 42 6f 74 73 77 61 6e 61 22 2c 22 62 77 22 2c 22 32 36 37 22 5d 2c 5b 22 42 72 61 7a 69 6c 20 28 42 72 61 73 69 6c 29 22 2c 22 62 72 22 2c 22 Data Ascii: 1"],["Benin (Bnin)","bj","229"],["Bermuda","bm","1",10,["441"]],["Bhutan ()","bt","975"],["Bolivia","bo","591"],["Bosnia and Herzegovina ( )","ba","387"],["Botswana","bw","267"],["Brazil (Brasil)","br","
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 76 69 6c 6c 65 29 22 2c 22 63 67 22 2c 22 32 34 32 22 5d 2c 5b 22 43 6f 6f 6b 20 49 73 6c 61 6e 64 73 22 2c 22 63 6b 22 2c 22 36 38 32 22 5d 2c 5b 22 43 6f 73 74 61 20 52 69 63 61 22 2c 22 63 72 22 2c 22 35 30 36 22 5d 2c 5b 22 43 c3 b4 74 65 20 64 e2 80 99 49 76 6f 69 72 65 22 2c 22 63 69 22 2c 22 32 32 35 22 5d 2c 5b 22 43 72 6f 61 74 69 61 20 28 48 72 76 61 74 73 6b 61 29 22 2c 22 68 72 22 2c 22 33 38 35 22 5d 2c 5b 22 43 75 62 61 22 2c 22 63 75 22 2c 22 35 33 22 5d 2c 5b 22 43 75 72 61 c3 a7 61 6f 22 2c 22 63 77 22 2c 22 35 39 39 22 2c 30 5d 2c 5b 22 43 79 70 72 75 73 20 28 ce 9a cf 8d cf 80 cf 81 ce bf cf 82 29 22 2c 22 63 79 22 2c 22 33 35 37 22 5d 2c 5b 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 20 28 c4 8c 65 73 6b c3 a1 20 72 65 70 75 62 6c 69 Data Ascii: ville)","cg","242"],["Cook Islands","ck","682"],["Costa Rica","cr","506"],["Cte dIvoire","ci","225"],["Croatia (Hrvatska)","hr","385"],["Cuba","cu","53"],["Curaao","cw","599",0],["Cyprus ()","cy","357"],["Czech Republic (esk republi
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 2c 22 37 39 31 31 22 5d 5d 2c 5b 22 47 75 69 6e 65 61 20 28 47 75 69 6e c3 a9 65 29 22 2c 22 67 6e 22 2c 22 32 32 34 22 5d 2c 5b 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 20 28 47 75 69 6e c3 a9 20 42 69 73 73 61 75 29 22 2c 22 67 77 22 2c 22 32 34 35 22 5d 2c 5b 22 47 75 79 61 6e 61 22 2c 22 67 79 22 2c 22 35 39 32 22 5d 2c 5b 22 48 61 69 74 69 22 2c 22 68 74 22 2c 22 35 30 39 22 5d 2c 5b 22 48 6f 6e 64 75 72 61 73 22 2c 22 68 6e 22 2c 22 35 30 34 22 5d 2c 5b 22 48 6f 6e 67 20 4b 6f 6e 67 20 28 e9 a6 99 e6 b8 af 29 22 2c 22 68 6b 22 2c 22 38 35 32 22 5d 2c 5b 22 48 75 6e 67 61 72 79 20 28 4d 61 67 79 61 72 6f 72 73 7a c3 a1 67 29 22 2c 22 68 75 22 2c 22 33 36 22 5d 2c 5b 22 49 63 65 6c 61 6e 64 20 28 c3 8d 73 6c 61 6e 64 29 22 2c 22 69 73 22 2c 22 33 35 Data Ascii: ,"7911"]],["Guinea (Guine)","gn","224"],["Guinea-Bissau (Guin Bissau)","gw","245"],["Guyana","gy","592"],["Haiti","ht","509"],["Honduras","hn","504"],["Hong Kong ()","hk","852"],["Hungary (Magyarorszg)","hu","36"],["Iceland (sland)","is","35
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 2c 5b 22 4d 61 6c 61 77 69 22 2c 22 6d 77 22 2c 22 32 36 35 22 5d 2c 5b 22 4d 61 6c 61 79 73 69 61 22 2c 22 6d 79 22 2c 22 36 30 22 5d 2c 5b 22 4d 61 6c 64 69 76 65 73 22 2c 22 6d 76 22 2c 22 39 36 30 22 5d 2c 5b 22 4d 61 6c 69 22 2c 22 6d 6c 22 2c 22 32 32 33 22 5d 2c 5b 22 4d 61 6c 74 61 22 2c 22 6d 74 22 2c 22 33 35 36 22 5d 2c 5b 22 4d 61 72 73 68 61 6c 6c 20 49 73 6c 61 6e 64 73 22 2c 22 6d 68 22 2c 22 36 39 32 22 5d 2c 5b 22 4d 61 72 74 69 6e 69 71 75 65 22 2c 22 6d 71 22 2c 22 35 39 36 22 5d 2c 5b 22 4d 61 75 72 69 74 61 6e 69 61 20 28 e2 80 ab d9 85 d9 88 d8 b1 d9 8a d8 aa d8 a7 d9 86 d9 8a d8 a7 e2 80 ac e2 80 8e 29 22 2c 22 6d 72 22 2c 22 32 32 32 22 5d 2c 5b 22 4d 61 75 72 69 74 69 75 73 20 28 4d 6f 72 69 73 29 22 2c 22 6d 75 22 2c 22 32 33 30 Data Ascii: ,["Malawi","mw","265"],["Malaysia","my","60"],["Maldives","mv","960"],["Mali","ml","223"],["Malta","mt","356"],["Marshall Islands","mh","692"],["Martinique","mq","596"],["Mauritania ()","mr","222"],["Mauritius (Moris)","mu","230
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 5b 22 50 61 72 61 67 75 61 79 22 2c 22 70 79 22 2c 22 35 39 35 22 5d 2c 5b 22 50 65 72 75 20 28 50 65 72 c3 ba 29 22 2c 22 70 65 22 2c 22 35 31 22 5d 2c 5b 22 50 68 69 6c 69 70 70 69 6e 65 73 22 2c 22 70 68 22 2c 22 36 33 22 5d 2c 5b 22 50 6f 6c 61 6e 64 20 28 50 6f 6c 73 6b 61 29 22 2c 22 70 6c 22 2c 22 34 38 22 5d 2c 5b 22 50 6f 72 74 75 67 61 6c 22 2c 22 70 74 22 2c 22 33 35 31 22 5d 2c 5b 22 50 75 65 72 74 6f 20 52 69 63 6f 22 2c 22 70 72 22 2c 22 31 22 2c 33 2c 5b 22 37 38 37 22 2c 22 39 33 39 22 5d 5d 2c 5b 22 51 61 74 61 72 20 28 e2 80 ab d9 82 d8 b7 d8 b1 e2 80 ac e2 80 8e 29 22 2c 22 71 61 22 2c 22 39 37 34 22 5d 2c 5b 22 52 c3 a9 75 6e 69 6f 6e 20 28 4c 61 20 52 c3 a9 75 6e 69 6f 6e 29 22 2c 22 72 65 22 2c 22 32 36 32 22 2c 30 5d 2c 5b 22 52 6f Data Ascii: ["Paraguay","py","595"],["Peru (Per)","pe","51"],["Philippines","ph","63"],["Poland (Polska)","pl","48"],["Portugal","pt","351"],["Puerto Rico","pr","1",3,["787","939"]],["Qatar ()","qa","974"],["Runion (La Runion)","re","262",0],["Ro
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: e0 b7 8a e2 80 8d e0 b6 bb e0 b7 93 20 e0 b6 bd e0 b6 82 e0 b6 9a e0 b7 8f e0 b7 80 29 22 2c 22 6c 6b 22 2c 22 39 34 22 5d 2c 5b 22 53 75 64 61 6e 20 28 e2 80 ab d8 a7 d9 84 d8 b3 d9 88 d8 af d8 a7 d9 86 e2 80 ac e2 80 8e 29 22 2c 22 73 64 22 2c 22 32 34 39 22 5d 2c 5b 22 53 75 72 69 6e 61 6d 65 22 2c 22 73 72 22 2c 22 35 39 37 22 5d 2c 5b 22 53 76 61 6c 62 61 72 64 20 61 6e 64 20 4a 61 6e 20 4d 61 79 65 6e 22 2c 22 73 6a 22 2c 22 34 37 22 2c 31 2c 5b 22 37 39 22 5d 5d 2c 5b 22 53 77 65 64 65 6e 20 28 53 76 65 72 69 67 65 29 22 2c 22 73 65 22 2c 22 34 36 22 5d 2c 5b 22 53 77 69 74 7a 65 72 6c 61 6e 64 20 28 53 63 68 77 65 69 7a 29 22 2c 22 63 68 22 2c 22 34 31 22 5d 2c 5b 22 53 79 72 69 61 20 28 e2 80 ab d8 b3 d9 88 d8 b1 d9 8a d8 a7 e2 80 ac e2 80 8e 29 Data Ascii: )","lk","94"],["Sudan ()","sd","249"],["Suriname","sr","597"],["Svalbard and Jan Mayen","sj","47",1,["79"]],["Sweden (Sverige)","se","46"],["Switzerland (Schweiz)","ch","41"],["Syria ()
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 2c 22 7a 77 22 2c 22 32 36 33 22 5d 2c 5b 22 c3 85 6c 61 6e 64 20 49 73 6c 61 6e 64 73 22 2c 22 61 78 22 2c 22 33 35 38 22 2c 31 2c 5b 22 31 38 22 5d 5d 5d 2c 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 65 5b 66 5d 3b 65 5b 66 5d 3d 7b 6e 61 6d 65 3a 67 5b 30 5d 2c 69 73 6f 32 3a 67 5b 31 5d 2c 64 69 61 6c 43 6f 64 65 3a 67 5b 32 5d 2c 70 72 69 6f 72 69 74 79 3a 67 5b 33 5d 7c 7c 30 2c 61 72 65 61 43 6f 64 65 73 3a 67 5b 34 5d 7c 7c 6e 75 6c 6c 7d 7d 76 61 72 20 68 3d 7b 67 65 74 49 6e 73 74 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2d 69 64 22 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e Data Ascii: ,"zw","263"],["land Islands","ax","358",1,["18"]]],f=0;f<e.length;f++){var g=e[f];e[f]={name:g[0],iso2:g[1],dialCode:g[2],priority:g[3]\|\|0,areaCodes:g[4]\|\|null}}var h={getInstance:function(a){var b=a.getAttribute("data-intl-tel-input-id");return window.
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 73 2e 64 2e 6e 61 74 69 6f 6e 61 6c 4d 6f 64 65 26 26 28 74 68 69 73 2e 64 2e 61 75 74 6f 48 69 64 65 44 69 61 6c 43 6f 64 65 3d 21 31 29 2c 74 68 69 73 2e 64 2e 73 65 70 61 72 61 74 65 44 69 61 6c 43 6f 64 65 26 26 28 74 68 69 73 2e 64 2e 61 75 74 6f 48 69 64 65 44 69 61 6c 43 6f 64 65 3d 74 68 69 73 2e 64 2e 6e 61 74 69 6f 6e 61 6c 4d 6f 64 65 3d 21 31 29 2c 74 68 69 73 2e 67 3d 2f 41 6e 64 72 6f 69 64 2e 2b 4d 6f 62 69 6c 65 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 74 68 69 73 2e 67 26 26 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e Data Ascii: s.d.nationalMode&&(this.d.autoHideDialCode=!1),this.d.separateDialCode&&(this.d.autoHideDialCode=this.d.nationalMode=!1),this.g=/Android.+Mobile\|webOS\|iPhone\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent),this.g&&(document.body.classList.
2025-03-14 09:43:20 UTC	1378	IN	Data Raw: 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 69 73 6f 32 29 7d 29 7d 65 6c 73 65 20 74 68 69 73 2e 70 3d 65 7d 7d 2c 7b 6b 65 79 3a 22 5f 64 30 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 74 68 69 73 2e 70 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 70 5b 61 5d 2e 69 73 6f 32 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 74 68 69 73 2e 64 2e 6c 6f 63 61 6c 69 7a 65 64 43 6f 75 6e 74 72 69 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 26 26 28 74 68 69 73 2e 70 5b 61 5d 2e 6e 61 6d 65 3d 74 68 69 73 2e 64 2e 6c 6f 63 61 6c 69 7a 65 64 43 6f 75 6e 74 72 69 65 73 5b 62 5d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 64 31 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: =b.indexOf(a.iso2)})}else this.p=e}},{key:"_d0",value:function(){for(var a=0;a<this.p.length;a++){var b=this.p[a].iso2.toLowerCase();this.d.localizedCountries.hasOwnProperty(b)&&(this.p[a].name=this.d.localizedCountries[b])}}},{key:"_d1",value:function(a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49741	104.21.70.234	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:20 UTC	678	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228246008.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228246008.counselschambers.co.uk/index-5b6c678b.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:20 UTC	950	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:20 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DGUoUMW3miWEaR4JnGW9f%2FptMbWyF%2BWH3x%2Bi%2BmsPxPBLMeYFkRdM3axnPXRAPSY7VxLC2OKKOwAEDhk36bmG9uxaWc%2FZ1xZQcDEYZzze1foRb%2B1oXn%2B4XVSNrsSx7BcyDPWMAeSsgI7Gag4FivLHoIMeqvIrmPbRX5Uy7uQsdg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3805ad1c33f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1460&min_rtt=1456&rtt_var=555&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1250&delivery_rate=1957104&cwnd=192&unsent_bytes=0&cid=6b2aef57864caac1&ts=8429&x=0"
2025-03-14 09:43:20 UTC	419	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:43:20 UTC	1369	IN	Data Raw: 7e d5 b8 f5 be 7d e3 50 56 58 18 6c 6c 27 ad 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 Data Ascii: ~}PVXll'YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqa
2025-03-14 09:43:20 UTC	1369	IN	Data Raw: f7 ae 87 93 61 d2 4a 6a 03 c8 e6 da 7c 10 59 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 Data Ascii: aJj\|YL^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[F
2025-03-14 09:43:20 UTC	1369	IN	Data Raw: e3 2b 58 b1 7a 49 a7 dc f2 63 b6 44 05 a3 7f 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 Data Ascii: +XzIcD&%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H
2025-03-14 09:43:20 UTC	1369	IN	Data Raw: 3f bf 62 0f 68 10 0a 55 b2 c8 05 57 80 00 33 df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 Data Ascii: ?bhUW3%3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q
2025-03-14 09:43:20 UTC	1369	IN	Data Raw: 86 81 de e4 c7 0c 36 27 49 e6 a3 b7 d0 36 0e 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 Data Ascii: 6'I6%~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=
2025-03-14 09:43:20 UTC	1369	IN	Data Raw: 1b da a7 84 24 20 98 8b df dc a6 dc 31 c2 02 ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 Data Ascii: $ 1{Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O
2025-03-14 09:43:20 UTC	1369	IN	Data Raw: ed 78 c7 8d db ca 65 7c 6f cf 6d 68 ae 2f ed 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 Data Ascii: xe\|omh/]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{
2025-03-14 09:43:20 UTC	1369	IN	Data Raw: 95 1f 10 b2 9b 45 88 10 be 6f 6b d5 94 10 31 f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc Data Ascii: Eok1E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^
2025-03-14 09:43:20 UTC	1369	IN	Data Raw: c6 d8 8f b8 6e ef 46 85 6d bb 83 69 52 9d 25 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 Data Ascii: nFmiR%]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49745	104.17.24.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:20 UTC	693	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:21 UTC	944	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:20 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2071 Expires: Wed, 04 Mar 2026 09:43:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PP2OplQnRoHupiSEupCOW173Cvy8%2B6c47quPJqQTBSsAVqxZO0Fvf4nljHQgfEoNKipAtCZXV6wjOQqXzGfK5AYtSjrfxDWZQ3xNbJiBpTy%2BtHdPaf5AkFLyTDy507BzE8ONoyOy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202d3842abdf3ba-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:43:21 UTC	425	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: 2e 33 33 32 2d 2e 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d 2e 31 32 38 20 38 2e Data Ascii: .332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.
2025-03-14 09:43:21 UTC	675	IN	Data Raw: 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 20 30 6c 2e 36 31 38 Data Ascii: 8.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4 0l.618
2025-03-14 09:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49748	34.117.59.81	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:20 UTC	651	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228246008.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:21 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:43:20 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:43:21 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49746	104.26.8.44	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:20 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228246008.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:21 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: OPTIONS, OPTIONS, GET, POST, HEAD X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228246008.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n5vQ74%2FYbNhitjNUoOZdlHBnvaNc3otvr%2F%2Fj%2FEU89TXX2MaRlVWt6yPTMjzHZWoVE89UO1iHNVDHULmvYcOMLHp3VBC1LE3ZY%2BIA3cYiMv3PO2Lphwj%2FhTwE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3848c382f06-EWR server-timing: cfL4;desc="?proto=TCP&rtt=8068&min_rtt=1637&rtt_var=13321&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2789&recv_bytes=1211&delivery_rate=1737061&cwnd=83&unsent_bytes=0&cid=b33cf740b9abff82&ts=367&x=0"
2025-03-14 09:43:21 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49749	172.67.168.191	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:21 UTC	428	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228246008.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:21 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:21 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SwTYnKPGNvppaJHthxOZHqBqLIyGZegGWfSWemU99mVsZLGPgP%2BC6SlHrX8SLZOPb7Jpq0r4%2FiP%2BzuG3xqBQi9Y8X2sUbk6N1bbDqR%2FO%2BjM9lHE5ge59EcwszajMVut8bRnafsaSr%2FviAf7Fi7QnbuJvxi8FBJdT6wQN2BSTeQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3868d180f46-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1479&min_rtt=1463&rtt_var=582&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1000&delivery_rate=1828428&cwnd=220&unsent_bytes=0&cid=db25761955eeb4dd&ts=146&x=0"
2025-03-14 09:43:21 UTC	422	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: f5 be 7d e3 50 56 58 18 6c 6c 27 ad 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 Data Ascii: }PVXll'YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqapX8
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: 93 61 d2 4a 6a 03 c8 e6 da 7c 10 59 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa Data Ascii: aJj\|YL^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[Fy3
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: b1 7a 49 a7 dc f2 63 b6 44 05 a3 7f 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 Data Ascii: zIcD&%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H`
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: 0f 68 10 0a 55 b2 c8 05 57 80 00 33 df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c 95 f1 Data Ascii: hUW3%3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q,
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: e4 c7 0c 36 27 49 e6 a3 b7 d0 36 0e 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c ec c6 Data Ascii: 6'I6%~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=\
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: 84 24 20 98 8b df dc a6 dc 31 c2 02 ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e c0 82 Data Ascii: $ 1{Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O.
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: 8d db ca 65 7c 6f cf 6d 68 ae 2f ed 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 e4 38 Data Ascii: e\|omh/]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{@8
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: b2 9b 45 88 10 be 6f 6b d5 94 10 31 f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 05 59 Data Ascii: Eok1E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^Y
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: b8 6e ef 46 85 6d bb 83 69 52 9d 25 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba cc 17 Data Ascii: nFmiR%]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49750	104.17.24.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:21 UTC	428	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:21 UTC	951	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:21 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 15615 Expires: Wed, 04 Mar 2026 09:43:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zHPnZvDORkwtWIe8JyFWPRXpa5jA5ctVmvUjIccS9y6QWdkIXkZZ631dE2f9qxb%2BRTQ7%2BOS0RFfPxuE1QngWx%2B%2BgyI01K3MxzAt2%2B5N5rq9UlFir9ax9YiK2ceKYaqj8sM4ZIJck"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202d3880b9a43dd-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:43:21 UTC	418	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:43:21 UTC	1369	IN	Data Raw: 34 33 2d 2e 34 38 33 2e 33 33 32 2d 2e 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d Data Ascii: 43-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM
2025-03-14 09:43:21 UTC	682	IN	Data Raw: 32 20 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 Data Ascii: 2 4l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4
2025-03-14 09:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49751	34.117.59.81	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:21 UTC	379	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:21 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:43:21 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:43:21 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49752	172.67.69.226	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:21 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:21 UTC	928	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: POST, GET, HEAD, OPTIONS, OPTIONS X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9HlLadCvU5EeTF1O8a8rT%2B5eE5QvbVbwpTP3cHYeyRK1ok3S44zFOOL9kHNE9ZFN6nk9%2Bk5yF4mTt7kyPAUIwottQc7LaT%2BZ66oWYc3%2FZQPyIbk2ns3W95ad"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d389aa7e8ae3-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3454&min_rtt=1944&rtt_var=3561&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2789&recv_bytes=950&delivery_rate=1428571&cwnd=253&unsent_bytes=0&cid=478327f8e5ac1fa6&ts=288&x=0"
2025-03-14 09:43:21 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49755	104.21.48.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:23 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228246008.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:24 UTC	864	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:43:24 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q3PisfgWgvm%2FwhxdKF7p78Uxkl2yDuRoXEihu4izNRLG4dgUgxz2xGg41iS6xqa18LMCZ1OykZRoo5O4I2WeotIsOGMjhK7BYuXa6ZFXW8Xrjp7nxFXyyt8DjzRlK4Ga2%2B%2FetioJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3970dfd187f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2479&min_rtt=2479&rtt_var=930&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1155&delivery_rate=1175996&cwnd=93&unsent_bytes=0&cid=63041e796ae5e63e&ts=423&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49756	104.21.48.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:24 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 75 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228246008.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228246008.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:24 UTC	75	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 67 6f 63 45 68 6f 2b 4c 2b 67 73 68 73 59 64 43 55 52 50 50 4f 71 4b 30 4d 38 2f 6e 56 76 6d 59 46 70 4f 53 4a 4f 36 57 58 74 44 77 74 36 49 4f 63 4d 6a 46 65 77 4a 6d 42 45 7a 47 47 4e 31 4f 22 7d Data Ascii: {"data":"gocEho+L+gshsYdCURPPOqK0M8/nVvmYFpOSJO6WXtDwt6IOcMjFewJmBEzGGN1O"}
2025-03-14 09:43:25 UTC	871	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:25 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b5Ja1bN3Hx33RHFnCUfJTOOZCjgH1ZDEzabyTNw%2FvyS42wavck7zbNMDuCwm8K%2Fbe8tCLddqL2k%2F818hoSRYWvJf%2F3uQ2YEK6JKnv95zE3TQcdoerxohkAwZXDcUi7av5DmlAhVw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d39c6d268c5f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1787&min_rtt=1786&rtt_var=673&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1407&delivery_rate=1623123&cwnd=182&unsent_bytes=0&cid=45d09c6fcc608cd6&ts=395&x=0"
2025-03-14 09:43:25 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:43:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49757	104.21.48.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:25 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:26 UTC	842	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:43:26 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BRFxOmZ%2FdEBpf0FmCb6SRQqpkjLhHfhW1ZhfjwdSaFNd2Hr7F%2FA6KARBqpcY5pYRZuRdezxzxe9%2FJtusFht5FqhGiTLbnm8Y641J3b69YnDg5B%2Bsn5efT87ETGYhmBgG%2FHnHkcaY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3a1dc77f02b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1964&min_rtt=1960&rtt_var=744&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=970&delivery_rate=1462925&cwnd=124&unsent_bytes=0&cid=8f184ec9a525c34d&ts=435&x=0"
2025-03-14 09:43:26 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 36 38 63 34 63 63 62 39 62 30 36 30 33 34 64 65 32 66 38 34 65 37 34 34 65 32 39 33 64 31 36 34 2d 32 31 30 63 38 30 61 37 38 38 36 62 39 36 33 36 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-68c4ccb9b06034de2f84e744e293d164-210c80a7886b9636-00"}
2025-03-14 09:43:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49766	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:44:06 UTC	554	OUT	OPTIONS /report/v4?s=%2BRFxOmZ%2FdEBpf0FmCb6SRQqpkjLhHfhW1ZhfjwdSaFNd2Hr7F%2FA6KARBqpcY5pYRZuRdezxzxe9%2FJtusFht5FqhGiTLbnm8Y641J3b69YnDg5B%2Bsn5efT87ETGYhmBgG%2FHnHkcaY HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:44:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 14 Mar 2025 09:44:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49767	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:44:07 UTC	529	OUT	POST /report/v4?s=%2BRFxOmZ%2FdEBpf0FmCb6SRQqpkjLhHfhW1ZhfjwdSaFNd2Hr7F%2FA6KARBqpcY5pYRZuRdezxzxe9%2FJtusFht5FqhGiTLbnm8Y641J3b69YnDg5B%2Bsn5efT87ETGYhmBgG%2FHnHkcaY HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 406 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:44:07 UTC	406	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 30 33 30 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 38 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 38 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 6e Data Ascii: [{"age":40309,"body":{"elapsed_time":885,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.48.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourcin
2025-03-14 09:44:07 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:44:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	1
Start time:	05:42:40
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff662e20000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:42:46
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,13452090225541810052,11060446469918622517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1980 /prefetch:3
Imagebase:	0x7ff662e20000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:42:50
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,13452090225541810052,11060446469918622517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3260 /prefetch:8
Imagebase:	0x7ff662e20000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	05:42:53
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228246008.counselschambers.co.uk/"
Imagebase:	0x7ff662e20000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://case-id-1000228246008.counselschambers.co.uk/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
http://case-id-1000228246008.counselschambers.co.uk/