Edit tour

Windows Analysis Report
https://2fa.com-token-auth.com/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FE

Overview

General Information

Sample URL:	https://2fa.com-token-auth.com/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpI
Analysis ID:	1711322
Infos:

Detection

KnowBe4

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected KnowBe4 simulated phishing

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1280,i,14118492116032178447,3945001351059846368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://2fa.com-token-auth.com/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09?cid=2559917548" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_KnowBe4	Yara detected KnowBe4 simulated phishing	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected KnowBe4 simulated phishing

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Source: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49727 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 8MB later: 47MB

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.165.131
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.165.131
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09?cid=2559917548 HTTP/1.1host: 2fa.com-token-auth.comsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"upgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-fetch-site: nonesec-fetch-mode: navigatesec-fetch-user: ?1sec-fetch-dest: documentaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0, i
Source: global traffic	HTTP traffic detected: GET /pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 HTTP/1.1host: secured-login.netsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"upgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-fetch-site: cross-sitesec-fetch-mode: navigatesec-fetch-dest: documentreferer: https://2fa.com-token-auth.com/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09?cid=2559917548accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0, i
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1host: secured-login.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,/;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic	HTTP traffic detected: GET /landing_pages/oops/styles.css HTTP/1.1Host: helpimg.s3.amazonaws.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1host: secured-login.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1host: training.knowbe4.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1host: training.knowbe4.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1host: training.knowbe4.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /petite-vue HTTP/1.1host: unpkg.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1host: unpkg.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1host: secured-login.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1host: secured-login.netuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=X8RFSd9WVcxetbY&MD=zgW3LcFa HTTP/1.1host: slscr.update.microsoft.comaccept: /user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33accept-encoding: identity
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=X8RFSd9WVcxetbY&MD=zgW3LcFa HTTP/1.1host: slscr.update.microsoft.comaccept: /user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33accept-encoding: identity

Source: global traffic	DNS traffic detected: DNS query: 2fa.com-token-auth.com
Source: global traffic	DNS traffic detected: DNS query: secured-login.net
Source: global traffic	DNS traffic detected: DNS query: helpimg.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: training.knowbe4.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com

Source: chromecache_61.1.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_61.1.dr	String found in binary or memory: http://blog.jquery.com/2012/08/09/jquery-1-8-released/
Source: chromecache_61.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_61.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_61.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_61.1.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_61.1.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/)
Source: chromecache_61.1.dr	String found in binary or memory: http://datatables.net).
Source: chromecache_61.1.dr	String found in binary or memory: http://datatables.net/license
Source: chromecache_61.1.dr	String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_61.1.dr	String found in binary or memory: http://datatables.net/manual/styling/bootstrap
Source: chromecache_61.1.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_61.1.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_61.1.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_61.1.dr	String found in binary or memory: http://eligrey.com
Source: chromecache_61.1.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_61.1.dr	String found in binary or memory: http://flightschool.acylt.com/devnotes/caret-position-woes/
Source: chromecache_61.1.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_61.1.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_61.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_61.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_61.1.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_61.1.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_61.1.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_61.1.dr	String found in binary or memory: http://jsperf.com/html-decode
Source: chromecache_61.1.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_61.1.dr	String found in binary or memory: http://jsperf.com/tostring-v-check
Source: chromecache_61.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_61.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_61.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_61.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_61.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_61.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_61.1.dr	String found in binary or memory: http://pdfmake.org
Source: chromecache_61.1.dr	String found in binary or memory: http://semver.org/
Source: chromecache_61.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_61.1.dr	String found in binary or memory: http://stackoverflow.com/a/21336448/937891
Source: chromecache_61.1.dr	String found in binary or memory: http://stackoverflow.com/a/26707753
Source: chromecache_61.1.dr	String found in binary or memory: http://stackoverflow.com/a/32954565/96342
Source: chromecache_61.1.dr	String found in binary or memory: http://stackoverflow.com/a/384380/937891
Source: chromecache_61.1.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_61.1.dr	String found in binary or memory: http://stackoverflow.com/questions/8898412
Source: chromecache_61.1.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_61.1.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_61.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_61.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_61.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: chromecache_61.1.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_61.1.dr	String found in binary or memory: http://www.datatables.net/extensions/select
Source: chromecache_61.1.dr	String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: chromecache_61.1.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_61.1.dr	String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: chromecache_61.1.dr	String found in binary or memory: https://blog.alexmaccaw.com/css-transitions
Source: chromecache_61.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_61.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_61.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_61.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_61.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_61.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_61.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_61.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_61.1.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#altinput
Source: chromecache_61.1.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#dateformat
Source: chromecache_61.1.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#disable
Source: chromecache_61.1.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#inline-calendar
Source: chromecache_61.1.dr	String found in binary or memory: https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements
Source: chromecache_61.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_61.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_61.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_61.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_61.1.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_61.1.dr	String found in binary or memory: https://datatables.net/tn/11
Source: chromecache_61.1.dr	String found in binary or memory: https://developer.apple.com/library/safari/documentation/Tools/Conceptual/SafariExtensionGuide/Worki
Source: chromecache_61.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_61.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
Source: chromecache_61.1.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_61.1.dr	String found in binary or memory: https://developer.snapappointments.com/bootstrap-select)
Source: chromecache_61.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_61.1.dr	String found in binary or memory: https://fullcalendar.io/
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#affix
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#alerts
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#buttons
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#carousel
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#collapse
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#dropdowns
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#modals
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#popovers
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#scrollspy
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tabs
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tooltip
Source: chromecache_61.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#transitions
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/DoersGuild/jQuery.print/issues/18#issuecomment-96451589
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/angular/angular/blob/7.2.4/packages/core/src/sanitization/url_sanitizer.ts
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/davidstutz/bootstrap-multiselect)
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jdewit/bootstrap-timepicker/graphs/contributors
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jquery/jquery-color/
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.0/ui/core.js#L51
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/2.2.4/src/core.js#L448
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_60.1.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/rails/jquery-ujs
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/rails/jquery-ujs/issues/357
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/snapappointments/bootstrap-select/blob/master/LICENSE)
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/14093
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/20280
Source: chromecache_61.1.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: chromecache_62.1.dr	String found in binary or memory: https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Source: chromecache_61.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_61.1.dr	String found in binary or memory: https://itsjavi.com/bootstrap-colorpicker/
Source: chromecache_61.1.dr	String found in binary or memory: https://jsperf.com/childnodes-array-slice-vs-loop
Source: chromecache_61.1.dr	String found in binary or memory: https://modernizr.com/)
Source: chromecache_61.1.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_61.1.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_59.1.dr	String found in binary or memory: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29
Source: chromecache_61.1.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_61.1.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_62.1.dr	String found in binary or memory: https://training.knowbe4.com/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf
Source: chromecache_62.1.dr	String found in binary or memory: https://training.knowbe4.com/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8
Source: chromecache_62.1.dr	String found in binary or memory: https://training.knowbe4.com/packs/js/vendor-954761ad0dceb106b971.js
Source: chromecache_62.1.dr	String found in binary or memory: https://unpkg.com/petite-vue
Source: chromecache_57.1.dr	String found in binary or memory: https://utopia.fyi/type/calculator?c=320
Source: chromecache_61.1.dr	String found in binary or memory: https://www.chromestatus.com/features/5093566007214080
Source: chromecache_61.1.dr	String found in binary or memory: https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49727 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@23/16@14/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1280,i,14118492116032178447,3945001351059846368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://2fa.com-token-auth.com/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09?cid=2559917548"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1280,i,14118492116032178447,3945001351059846368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3-w.us-east-1.amazonaws.com	52.216.221.137	true	false	high
www.google.com	142.251.35.164	true	false	high
training.knowbe4.com	52.85.61.109	true	false	high
secured-login.net	3.220.17.5	true	false	high
unpkg.com	104.18.0.22	true	false	high
landing.training.knowbe4.com	3.220.17.5	true	false	high
2fa.com-token-auth.com	unknown	unknown	false	high
helpimg.s3.amazonaws.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css	false		high
https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://jqueryui.com/menu/	chromecache_61.1.dr	false	high
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	chromecache_61.1.dr	false	unknown
http://api.jqueryui.com/slide-effect/	chromecache_61.1.dr	false	unknown
https://github.com/moment/moment/issues/1423	chromecache_61.1.dr	false	high
http://jqueryui.com/accordion/	chromecache_61.1.dr	false	high
http://api.jqueryui.com/data-selector/	chromecache_61.1.dr	false	high
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	chromecache_61.1.dr	false	high
http://stackoverflow.com/a/32954565/96342	chromecache_61.1.dr	false	high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_61.1.dr	false	high
http://stackoverflow.com/a/26707753	chromecache_61.1.dr	false	high
https://github.com/jquery/jquery-color	chromecache_61.1.dr	false	high
http://jqueryui.com/position/	chromecache_61.1.dr	false	high
http://api.jqueryui.com/jQuery.widget/	chromecache_61.1.dr	false	unknown
http://blog.jquery.com/2012/08/09/jquery-1-8-released/	chromecache_61.1.dr	false	unknown
http://api.jqueryui.com/focusable-selector/	chromecache_61.1.dr	false	high
http://pdfmake.org	chromecache_61.1.dr	false	high
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_61.1.dr	false	high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_61.1.dr	false	unknown
https://bugs.webkit.org/show_bug.cgi?id=107380	chromecache_61.1.dr	false	high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_61.1.dr	false	high
http://www.apache.org/licenses/LICENSE-2.0)	chromecache_61.1.dr	false	high
https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js	chromecache_60.1.dr	false	high
http://api.jqueryui.com/button/	chromecache_61.1.dr	false	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_61.1.dr	false	high
https://blog.alexmaccaw.com/css-transitions	chromecache_61.1.dr	false	high
http://www.datatables.net	chromecache_61.1.dr	false	high
https://github.com/bassjobsen/Bootstrap-3-Typeahead	chromecache_61.1.dr	false	high
https://getbootstrap.com/docs/3.4/javascript/#transitions	chromecache_61.1.dr	false	high
http://api.jqueryui.com/size-effect/	chromecache_61.1.dr	false	high
http://momentjs.com/guides/#/warnings/zone/	chromecache_61.1.dr	false	high
http://bugs.jquery.com/ticket/12359	chromecache_61.1.dr	false	unknown
http://api.jqueryui.com/uniqueId/	chromecache_61.1.dr	false	high
http://creativecommons.org/licenses/by/3.0/)	chromecache_61.1.dr	false	high
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_61.1.dr	false	high
http://api.jqueryui.com/checkboxradio/	chromecache_61.1.dr	false	high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_61.1.dr	false	high
https://getbootstrap.com/docs/3.4/javascript/#tooltip	chromecache_61.1.dr	false	high
https://github.com/twbs/bootstrap/issues/20280	chromecache_61.1.dr	false	high
http://jqueryui.com/slider/	chromecache_61.1.dr	false	high
https://utopia.fyi/type/calculator?c=320	chromecache_57.1.dr	false	unknown
https://getbootstrap.com/docs/3.4/javascript/#modals	chromecache_61.1.dr	false	high
http://api.jqueryui.com/disableSelection/	chromecache_61.1.dr	false	high
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_61.1.dr	false	high
http://jqueryui.com/controlgroup/	chromecache_61.1.dr	false	high
https://stackoverflow.com/q/181348	chromecache_61.1.dr	false	high
https://getbootstrap.com/docs/3.4/javascript/#collapse	chromecache_61.1.dr	false	high
http://www.macromedia.com/go/getflashplayer	chromecache_61.1.dr	false	high
https://getbootstrap.com/docs/3.4/javascript/#scrollspy	chromecache_61.1.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_61.1.dr	false	high
http://flightschool.acylt.com/devnotes/caret-position-woes/	chromecache_61.1.dr	false	unknown
http://api.jqueryui.com/transfer-effect/	chromecache_61.1.dr	false	unknown
https://github.com/rails/jquery-ujs	chromecache_61.1.dr	false	high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_61.1.dr	false	high
https://unpkg.com/petite-vue	chromecache_62.1.dr	false	high
http://www.robertpenner.com/easing)	chromecache_61.1.dr	false	high
http://momentjs.com/guides/#/warnings/min-max/	chromecache_61.1.dr	false	high
http://jqueryui.com/datepicker/	chromecache_61.1.dr	false	high
Http://bugs.jqueryui.com/ticket/9446	chromecache_61.1.dr	false	high
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_61.1.dr	false	high
https://npms.io/search?q=ponyfill.	chromecache_61.1.dr	false	high
http://api.jqueryui.com/drop-effect/	chromecache_61.1.dr	false	unknown
http://datatables.net/license	chromecache_61.1.dr	false	high
http://jsperf.com/getall-vs-sizzle/2	chromecache_61.1.dr	false	unknown
https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe	chromecache_61.1.dr	false	high
https://getbootstrap.com/docs/3.4/javascript/#buttons	chromecache_61.1.dr	false	high
https://github.com/jquery/jquery/pull/557)	chromecache_61.1.dr	false	high
http://api.jqueryui.com/menu/	chromecache_61.1.dr	false	unknown
http://jqueryui.com/checkboxradio/	chromecache_61.1.dr	false	high
https://getbootstrap.com/docs/3.4/javascript/#alerts	chromecache_61.1.dr	false	high
http://api.jqueryui.com/controlgroup/	chromecache_61.1.dr	false	high
http://jqueryui.com/widget/	chromecache_61.1.dr	false	high
http://momentjs.com/guides/#/warnings/define-locale/	chromecache_61.1.dr	false	high
http://api.jqueryui.com/category/effects-core/	chromecache_61.1.dr	false	unknown
https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29	chromecache_59.1.dr	false	high
http://api.jqueryui.com/dialog/	chromecache_61.1.dr	false	unknown
http://jqueryui.com/tooltip/	chromecache_61.1.dr	false	high
http://api.jqueryui.com/selectmenu/	chromecache_61.1.dr	false	high
http://api.jqueryui.com/shake-effect/	chromecache_61.1.dr	false	unknown
https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js	chromecache_61.1.dr	false	high
http://api.jqueryui.com/jQuery.ui.keyCode/	chromecache_61.1.dr	false	high
https://getbootstrap.com/)	chromecache_61.1.dr	false	high
https://modernizr.com/)	chromecache_61.1.dr	false	high
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_61.1.dr	false	high
https://tools.ietf.org/html/rfc2822#section-3.3	chromecache_61.1.dr	false	high
http://api.jqueryui.com/bounce-effect/	chromecache_61.1.dr	false	unknown
http://api.jquery.com/jQuery.ajax/)	chromecache_61.1.dr	false	high
https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22	chromecache_61.1.dr	false	high
http://bugs.jquery.com/ticket/13378	chromecache_61.1.dr	false	unknown
http://jsperf.com/thor-indexof-vs-for/5	chromecache_61.1.dr	false	unknown
https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714	chromecache_61.1.dr	false	high
https://github.com/jdewit/bootstrap-timepicker/graphs/contributors	chromecache_61.1.dr	false	high
https://getbootstrap.com/docs/3.4/javascript/#tabs	chromecache_61.1.dr	false	high
https://github.com/uxsolutions/bootstrap-datepicker)	chromecache_61.1.dr	false	high
https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js	chromecache_61.1.dr	false	high
http://jqueryui.com/dialog/	chromecache_61.1.dr	false	high
http://api.jqueryui.com/scale-effect/	chromecache_61.1.dr	false	unknown
http://jqueryui.com/selectable/	chromecache_61.1.dr	false	high
http://jquery.com/	chromecache_61.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.85.61.109	training.knowbe4.com	United States	16509	AMAZON-02US	false
3.220.17.5	secured-login.net	United States	14618	AMAZON-AESUS	false
104.18.0.22	unpkg.com	United States	13335	CLOUDFLARENETUS	false
52.216.221.137	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
54.156.51.235	unknown	United States	14618	AMAZON-AESUS	false
142.251.35.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1711322
Start date and time:	2025-06-10 19:25:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://2fa.com-token-auth.com/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09?cid=2559917548
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@23/16@14/8

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.35.163, 142.251.40.142, 142.250.72.110, 172.253.115.84, 142.250.80.46, 142.251.32.110, 142.251.41.14, 142.251.40.238, 142.250.80.14, 142.250.65.174, 142.250.80.35, 142.250.80.110, 142.250.65.238, 142.250.176.206, 23.205.30.159
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5845
Entropy (8bit):	5.0998661950168875
Encrypted:	false
SSDEEP:	96:pcaGCswbr8k4CHRN0tn/jWQFC8p3XOlPg8ycCbE4XKEwRzmhClpKojFCgF4KxPJK:pJBs0r80RN09b4P4FzbFKtR6U/Xj4gFQ
MD5:	583981782F408E2108F192FBB96C0FD8
SHA1:	0CE49DB1FEBD88EE21DAFE10EF93312741F31863
SHA-256:	EBFB477A7BEFECBAF3DB9D633ECD0E89351F0C1E3D7954AD1B3A0BE55473240C
SHA-512:	79D0742BC453331441A7F996A9E82F2A81258FA89918B1FF51EBE37C5ABF3672CE051A829A927EEE7187DB307C055E3C56604FBD0464E58B286379E2C5F67434
Malicious:	false
Reputation:	low
URL:	https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Preview:	:root {. --clr-neutral-100: #ffffff;. --clr-neutral-200: #f5f5f5;. --clr-neutral-300: #d5d5d5;. --clr-neutral-400: #ababab;. --clr-neutral-500: #707070;. --clr-neutral-600: #2c2c2c;.. /* Padding /. --padding-xs: clamp(0.5rem, 1.5%, 0.75rem);. --padding-sm: clamp(1rem, 3%, 1.5rem);. --padding-md: clamp(1.5rem, 6%, 3rem);. --padding-lg: clamp(3rem, 12%, 6rem);.. / Margin /. --block-flow-xs: min(1rem, 2vh);. --block-flow-sm: min(2rem, 4vh);. --block-flow-md: min(4rem, 8vh);. --block-flow-lg: min(8rem, 16vh);.. / Font Sizes /.. / @link https://utopia.fyi/type/calculator?c=320,18,1.2,1240,20,1.25,5,2,&s=0.75\|0.5\|0.25,1.5\|2\|3\|4\|6,s-l&g=s,l,xl,12 /.. / Step -1: 15px . 12.003px /. --step--1: clamp(0.7502rem, 1.0027rem + -0.3258vi, 0.9375rem);. / Step 0: 18px . 16px /. --step-0: clamp(1rem, 1.1685rem + -0.2174vi, 1.125rem);. / Step 1: 21.6px . 21.328px /. --step-1: clamp(1.333rem, 1.3559rem + -0.0296vi, 1.35rem);. / Step 2: 25.92px . 28.4302px */.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16900)
Category:	downloaded
Size (bytes):	16901
Entropy (8bit):	5.207509946311759
Encrypted:	false
SSDEEP:	384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy
MD5:	A7DB3244C9A6704A3159A38C82207F66
SHA1:	CC3B2BF9D2FCC718C86B1ED2AC7D9CD5BA12EF43
SHA-256:	774BB8E88B09936246A57F0DFED88A375258A8235B893561C96880411DABC4D5
SHA-512:	3197FFB1055735A329D122D6C8EDFA9C12FCCD54E8F22F579A4E79B3C6AE0163391E790429A3F680434309AAECCE1572941EA47DEE321AC080FEAADA2DE3F3B6
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/petite-vue@0.4.1/dist/petite-vue.iife.js
Preview:	var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length;s++){const i=e[s],o=d(i)?r(i):t(i);if(o)for(const e in o)n[e]=o[e]}return n}return d(e)\|\|g(e)?e:void 0}const n=/;(?![^(]*\))/g,s=/:(.+)/;function r(e){const t={};return e.split(n).forEach((e=>{if(e){const n=e.split(s);n.length>1&&(t[n[0].trim()]=n[1].trim())}})),t}function i(e){let t="";if(d(e))t=e;else if(a(e))for(let n=0;n<e.length;n++){const s=i(e[n]);s&&(t+=s+" ")}else if(g(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}function o(e,t){if(e===t)return!0;let n=h(e),s=h(t);if(n\|\|s)return!(!n\|\|!s)&&e.getTime()===t.getTime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.k

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (398)
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	5.867541587555431
Encrypted:	false
SSDEEP:	12:3R+xnARXbzRppftfATqJooPtjbTe0nd4AEdeIQL:3EyRpppATsooNb5dNEkj
MD5:	4E06FBD77D37649E733F7A36D1D93C47
SHA1:	BC8A13577EAE14FED8AE93C48F753C4138B5206F
SHA-256:	1E29188ED567A0B5BED605BB44D7917C35B1F5A03F43C58400A2F0715C93CE26
SHA-512:	BA57A540A6E60A7E8B6F7A054A237E772F8F14C16E04CDE7B5EC7B158B4DAB01AC0C56A55142C6D5619A7CD2B1401A41CA58E9D7517E0E861806AB4B132FF9AD
Malicious:	false
Reputation:	low
URL:	https://2fa.com-token-auth.com/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09?cid=2559917548
Preview:	<html>. <head>. <script>window.location.href = 'https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09';</script>. </head>. <body>. </body>.</html>.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	51364
Entropy (8bit):	4.630626843010533
Encrypted:	false
SSDEEP:	1536:TRCJJ/KpVsnpxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277ts:TS/FpzarzCT71Pts
MD5:	BF2F96E6233DE3D8C0346085AC28248A
SHA1:	4DB267704D7E3FB2489CF96E82862A2245CD9311
SHA-256:	EE94DDA0AF1FC5C5045741B39E54136015365EEDCA34095F1D3C666998BB442D
SHA-512:	D4DB54380D135D9F5AAA03727CC88037B014C1057A3061C3D173EB8D4CEC7E4A2F71CFCA1478E8E15C093D510EEE80668C2038691EAEB21958942089F0DD9C6C
Malicious:	false
Reputation:	low
URL:	https://training.knowbe4.com/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js
Preview:	/!. Modernizr v2.7.1. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.7.1',..

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3205083
Entropy (8bit):	5.067660187114562
Encrypted:	false
SSDEEP:	49152:Jw4mDiTFyA6TVfMAeolyHCcmMy/W/EEPbhhDdR30mpz+acKWheTXOz2usGgNaE0J:q
MD5:	F1232635B40CBFAE664CA09BA03FC9C3
SHA1:	C70240DA2684DB0184AB4C123B7F686035A8FB93
SHA-256:	55644838E3E24BB2ED95B03654F6BC0AB4B5725F73BD9E6656C50AB8441194FF
SHA-512:	FB466E90765EB7D07AD12D8FFF42926F9C86CE41EDFB36254B1EE180221B5429624B711389F0143AA0716DEB113DB1BE9954E9A4FAF49151A6C19867512BB064
Malicious:	false
Reputation:	low
URL:	https://training.knowbe4.com/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (382)
Category:	downloaded
Size (bytes):	75074
Entropy (8bit):	6.138406589178574
Encrypted:	false
SSDEEP:	1536:crpvhGe1FSmB10lpn/n3Bzx0rEO3pQpE03ejrfodzWUc:mxhGe1FSmB10lpn/nRzx0AO3pQHejrfZ
MD5:	D8798AAE777F6C93C53155F081A8C8EA
SHA1:	81B8A61366B8F08C3D3A8A2E1CFE499CEC5521B8
SHA-256:	69FEB31D20F8340079383EB02BD89606E55D53476E2C1A9D70646E3A19FE4A25
SHA-512:	495DAB5208A42596D39852997A20433395648AE68D384EE13AB648D5EBF8C936B2E903F19CA8918E6E70D8DEEF1D036AC6962EA5C58B696A5D7F07146E274239
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">. <meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers." />. <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com." />. <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"/>. <meta name="robots" content="noindex, nofollow" />.. <head>. <script src="/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js"></script>.. <link rel="stylesheet" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css" media="all" />.. </head>. .......<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">... Stylesheet for default styles -->...<link rel="stylesheet" href="https://helpimg

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	4.754611179426391
Encrypted:	false
SSDEEP:	24:y40r8CQo40agx40mC400XLaR404hZYmx40vGk40vG/I40vGhH40VhZ40UrCmn:xdDgCFEiBZgnTOHTn
MD5:	15E89F9684B18EC43EE51F8D62A787C3
SHA1:	9CBAAACEAE96845ECD3497F41EE3B02588ABEC11
SHA-256:	16F13E16A7EF02FB6F94250AA1931DED83DBEE5D9FAD278E33DD5792D085194F
SHA-512:	79E0110A045F28437D192290AC9789270CB0D4E676A985564746DB439992D867BA89639D7738E2A7F7D83BBF37D9A02CAA2AE1DC4E0EE2519797E5840A47FABE
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css
Preview:	/* line 1, app/assets/stylesheets/landing-watermark.scss /..watermark {. -webkit-writing-mode: vertical-rl;. -ms-writing-mode: tb-rl;. writing-mode: vertical-rl;. text-orientation: sideways;.}../ line 4, app/assets/stylesheets/landing-watermark.scss /..watermark.left {. left: 0;.}../ line 7, app/assets/stylesheets/landing-watermark.scss /..watermark.right {. right: 0;.}../ line 10, app/assets/stylesheets/landing-watermark.scss /..watermark.top {. text-align: center;. -webkit-writing-mode: horizontal-tb;. -ms-writing-mode: lr-tb;. writing-mode: horizontal-tb;. top: -38px;.}../ line 15, app/assets/stylesheets/landing-watermark.scss /..watermark h1 {. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-size: 15px;. color: #fdfdfa;. font-weight: bold;.}../ line 24, app/assets/stylesheets/landing-watermark.scss /.#template_sei .watermark.left {. margin-left: -10px;.}../ li

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 10, 2025 19:25:53.569118977 CEST	49671	443	192.168.2.16	204.79.197.203
Jun 10, 2025 19:25:53.872800112 CEST	49671	443	192.168.2.16	204.79.197.203
Jun 10, 2025 19:25:54.479695082 CEST	49671	443	192.168.2.16	204.79.197.203
Jun 10, 2025 19:25:55.298176050 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.298213959 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.298425913 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.299190044 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.299201012 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.299402952 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.299438000 CEST	443	49704	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.299774885 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.299774885 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.299798965 CEST	443	49704	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.592489958 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.592644930 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.594527960 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.594546080 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.594707966 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.594717979 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.594959021 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.594964981 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.600574017 CEST	443	49704	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.600861073 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.601007938 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.601231098 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.601238012 CEST	443	49704	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.601522923 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.601876020 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.601984978 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.602612019 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.604125977 CEST	443	49704	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.644694090 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.644725084 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.685614109 CEST	443	49704	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.692708969 CEST	49671	443	192.168.2.16	204.79.197.203
Jun 10, 2025 19:25:55.740700960 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.880261898 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.880517006 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.880590916 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.880600929 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:55.881728888 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:55.881829977 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.090965986 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.091015100 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.091110945 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.091546059 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.091593027 CEST	443	49712	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.091897964 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.091911077 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.091922998 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.092305899 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.092317104 CEST	443	49712	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.382585049 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.382684946 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.384047985 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.384057045 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.384238005 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.384244919 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.384427071 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.384430885 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.390429974 CEST	443	49712	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.390539885 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.390815973 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.390966892 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.390984058 CEST	443	49712	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.391282082 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.391335964 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.391515017 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.392390013 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.393862963 CEST	443	49712	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.434720039 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.434745073 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:56.475545883 CEST	443	49712	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:56.529690027 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.092744112 CEST	49671	443	192.168.2.16	204.79.197.203
Jun 10, 2025 19:25:58.426544905 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.426789045 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.426799059 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.426856995 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.426868916 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.426882982 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.426924944 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.426948071 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.427004099 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.427026033 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.427052021 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.457258940 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.457725048 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.458897114 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.516196966 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.516293049 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.516545057 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.516611099 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.516623974 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.516693115 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.516702890 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.516763926 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.517544985 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.517632008 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.517637014 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.517694950 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.517704010 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.520066977 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.520118952 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.544418097 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.544471025 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.544538021 CEST	49717	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.544567108 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.544573069 CEST	443	49717	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.544627905 CEST	49717	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.544722080 CEST	49718	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.544747114 CEST	443	49718	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.544796944 CEST	49718	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.545258045 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.545265913 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.545428038 CEST	49717	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.545437098 CEST	443	49717	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.545732021 CEST	49718	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.545741081 CEST	443	49718	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.549551964 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:25:58.549592018 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.549716949 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:25:58.550187111 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:25:58.550204039 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.568264961 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.568463087 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.568514109 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.568530083 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.568572044 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.569586039 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.607996941 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.608076096 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.608264923 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.608333111 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.608345985 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.608409882 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.608414888 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.608464956 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.608475924 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.608524084 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.608901024 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.608984947 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.608999968 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.609051943 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.609065056 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.609108925 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.609122038 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.609311104 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.698334932 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.698436022 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.698717117 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.698806047 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.698808908 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.698873997 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.698894024 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.698955059 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.700021029 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.700105906 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.700305939 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.700371981 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.700381994 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.700452089 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.700452089 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.700510025 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.733772993 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.733860970 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.735332012 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.735341072 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.735570908 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.735579967 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.735655069 CEST	49717	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.735862970 CEST	49718	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.736023903 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.736028910 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.736056089 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.736059904 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.736077070 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.736079931 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.742784023 CEST	443	49717	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.742863894 CEST	49717	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.742899895 CEST	49717	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.749113083 CEST	443	49718	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.749207020 CEST	49718	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.749207020 CEST	49718	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.751035929 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.757745028 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.757803917 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.758049011 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.760426998 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.768512011 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.768609047 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:25:58.769788980 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:25:58.769798994 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.769996881 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:25:58.770009041 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.771794081 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.771874905 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.771982908 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.772042990 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.772106886 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.772173882 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.772181034 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.772242069 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.776117086 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.789406061 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.789551973 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.790189028 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.790272951 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.790334940 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.790400982 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.790503979 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.790565014 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.790579081 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.790632963 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.790649891 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.790700912 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.790725946 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.790781975 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.790795088 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.790885925 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.791225910 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.791315079 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.791970015 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.792061090 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.792207003 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.792272091 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.792313099 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.792367935 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.792444944 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.792505980 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.792529106 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.792577982 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.792606115 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.792670965 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.792692900 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.792742014 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.793025017 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.793097019 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.793160915 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.793220043 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.793241978 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.793302059 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.793332100 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.793392897 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.810765028 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.827347994 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:25:58.852994919 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.853151083 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.854222059 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.854298115 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.854370117 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.854433060 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.854454994 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.854513884 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.854526997 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.854592085 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.854604959 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.854654074 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.854748964 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.854808092 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.855040073 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.855101109 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.855118990 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.866545916 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:25:58.866730928 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:25:58.888638973 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.889303923 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.889323950 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.889368057 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:25:58.889409065 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:25:58.889534950 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:25:58.925487995 CEST	49720	443	192.168.2.16	142.251.35.164
Jun 10, 2025 19:25:58.925539970 CEST	443	49720	142.251.35.164	192.168.2.16
Jun 10, 2025 19:25:58.925678015 CEST	49720	443	192.168.2.16	142.251.35.164
Jun 10, 2025 19:25:58.926012039 CEST	49720	443	192.168.2.16	142.251.35.164
Jun 10, 2025 19:25:58.926024914 CEST	443	49720	142.251.35.164	192.168.2.16
Jun 10, 2025 19:25:58.961740971 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.961757898 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.961795092 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.961854935 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.961929083 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.962095022 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.962153912 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:58.962529898 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.962541103 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:58.962599993 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.025918007 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.026025057 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.026031017 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.026118994 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.048115015 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.048224926 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.048259974 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.048326969 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.048337936 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.048377037 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.048392057 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.052088022 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.052196026 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.063555002 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.063858986 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.063992023 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.067199945 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.067382097 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.081732988 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.081898928 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.121038914 CEST	443	49720	142.251.35.164	192.168.2.16
Jun 10, 2025 19:25:59.121174097 CEST	49720	443	192.168.2.16	142.251.35.164
Jun 10, 2025 19:25:59.121388912 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.121471882 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.121484041 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.121541977 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.122272968 CEST	49720	443	192.168.2.16	142.251.35.164
Jun 10, 2025 19:25:59.122281075 CEST	443	49720	142.251.35.164	192.168.2.16
Jun 10, 2025 19:25:59.122878075 CEST	443	49720	142.251.35.164	192.168.2.16
Jun 10, 2025 19:25:59.126511097 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.126590014 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.126600027 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.126677990 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.130817890 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.130889893 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.130909920 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.130948067 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.142005920 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.142137051 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.153971910 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.154145956 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.154207945 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.154273987 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.154423952 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.154499054 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.164591074 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.164685011 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.175451994 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.175570011 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.175589085 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.175632000 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.177741051 CEST	49720	443	192.168.2.16	142.251.35.164
Jun 10, 2025 19:25:59.186851978 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.186958075 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.187007904 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.187068939 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.193260908 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.193357944 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.193360090 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.193412066 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.193430901 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.193490028 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.200697899 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.200788021 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.209702969 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.209784985 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.209809065 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.209870100 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.215146065 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.215265989 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.215281963 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.215327978 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.221182108 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.221276045 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.221297979 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.221359015 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.223251104 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.223345995 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.223365068 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.223413944 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.229557037 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.229657888 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.229701042 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.229758978 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.235126019 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.235217094 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.240112066 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.240205050 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.240217924 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.240264893 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.245632887 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.245726109 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.245763063 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.245810986 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.251403093 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.251497030 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.251526117 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.251554966 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.256562948 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.256653070 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.256685019 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.256705999 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.256721020 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.256784916 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.262062073 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.262160063 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.267908096 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.267996073 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.268026114 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.268064976 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.268094063 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.268141985 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.271496058 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.271584034 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.276144028 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.276228905 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.276268005 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.276309013 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.280683041 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.280769110 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.280777931 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.280837059 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.280838013 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.280916929 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.284101009 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.284188986 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.288058996 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.288142920 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.288146019 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.288192987 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.291532993 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.291611910 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.291666985 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.291712046 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.294743061 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.294820070 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.294821024 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.294877052 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.294898987 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.294956923 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.298691988 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.298767090 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.301991940 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.302068949 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.302078962 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.302128077 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.304898977 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.305002928 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.305052996 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.305099964 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.308069944 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.308142900 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.308188915 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.308234930 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.311728954 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.311809063 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.311811924 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.311875105 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.314042091 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.314119101 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.314131975 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.314186096 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.314202070 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.314315081 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.314802885 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.314857006 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.317662001 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.317754030 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.320621014 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.320692062 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.320724010 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.320765972 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.320769072 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.320822954 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.320830107 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.320872068 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.323111057 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.323191881 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.325881958 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.325956106 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.325977087 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.326015949 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.328419924 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.328489065 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.328501940 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.328541040 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.331068039 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.331140041 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.331171036 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.331197977 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.334322929 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.334392071 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.334428072 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.334455967 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.334464073 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.334512949 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.336827040 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.336918116 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.339088917 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.339163065 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.339195013 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.339230061 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.341561079 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.341630936 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.341636896 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.341681957 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.341701984 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.341753006 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.343763113 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.343862057 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.346723080 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.346811056 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.346848011 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.346865892 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.348650932 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.348721981 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.348728895 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.348778009 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.348784924 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.348836899 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.348845959 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.348884106 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.351243019 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.351334095 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.351335049 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.351388931 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.353104115 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.353193998 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.353215933 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.353260994 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.355473995 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.355545998 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.358223915 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.358294964 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.358309031 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.358366966 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.358376026 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.358424902 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.360290051 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.360361099 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.362140894 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.362215996 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.362216949 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.362271070 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.364356041 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.364428997 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.364429951 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.364484072 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.366034031 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.366106033 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.366108894 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.366179943 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.368474960 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.368551970 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.368573904 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.368597031 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.370284081 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.370340109 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.370377064 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.370419979 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.372371912 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.372446060 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.372489929 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.372522116 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.374248981 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.374332905 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.374345064 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.374392033 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.376080990 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.376153946 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.376164913 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.376210928 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.377926111 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.378009081 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.378010035 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.378070116 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.379715919 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.379785061 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.379810095 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.379836082 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.379847050 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.379890919 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.379913092 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.379985094 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.381505966 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.381578922 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.381582022 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.381637096 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.383230925 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.383301020 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.383301973 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.383363008 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.384977102 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.385049105 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.385055065 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.385113001 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.386740923 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.386821032 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.386822939 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.386885881 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.388565063 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.388637066 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.388643026 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.388706923 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.388711929 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.388756037 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.390440941 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.390518904 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.391452074 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.391524076 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.391542912 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.391588926 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.393443108 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.393512964 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.393539906 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.393579006 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.395289898 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.395359993 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.395376921 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.395414114 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.396162033 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.396229982 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.396260977 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.396341085 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.398020029 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.398092031 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.398395061 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.398463964 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.400028944 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.400106907 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.400116920 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.400158882 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.401374102 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.401448011 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.401456118 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.401519060 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.403145075 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.403220892 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.403229952 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.403297901 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.404067993 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.404134035 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.404141903 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.404196024 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.405648947 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.405723095 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.405723095 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.405785084 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.406656981 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.406728983 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.406758070 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.406794071 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.408559084 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.408633947 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.408660889 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.408699989 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.410371065 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.410444021 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.410471916 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.410501957 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.411331892 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.411402941 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.411425114 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.411461115 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.413233995 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.413321018 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.413336039 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.413393021 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.413412094 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.413470030 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.414069891 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.414139032 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.415802956 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.415884972 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.415894985 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.415944099 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.416709900 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.416778088 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.416789055 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.416837931 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.418462038 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.418536901 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.418561935 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.418592930 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.419480085 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.419552088 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.419553041 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.419620037 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.420988083 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.421055079 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.421063900 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.421116114 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.421993971 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.422058105 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.422070980 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.422126055 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.422945023 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.423023939 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.423027039 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.423088074 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.424698114 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.424771070 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.424772024 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.424823046 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.426083088 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.426166058 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.426172018 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.426223040 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.426933050 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.427000046 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.427009106 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.427062035 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.427833080 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.427895069 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.427906036 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.427949905 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.429713964 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.429779053 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.429812908 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.429857016 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.430785894 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.430855989 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.430871010 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.430918932 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.431756020 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.431830883 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.431833982 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.431880951 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.432830095 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.432898045 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.432907104 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.432951927 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.432981014 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.433027983 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.434537888 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.434598923 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.435394049 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.435468912 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.435476065 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.435524940 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.436397076 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.436458111 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.436480999 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.436526060 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.437252998 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.437311888 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.437330008 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.437377930 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.438973904 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.439038992 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.439048052 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.439099073 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.439857960 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.439923048 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.439941883 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.439990044 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.440721035 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.440795898 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.440812111 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.440865040 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.441732883 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.441800117 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.441823959 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.441871881 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.442630053 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.442691088 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.442709923 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.442761898 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.444108963 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.444186926 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.444205999 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.444259882 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.444933891 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.444998026 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.445014000 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.445069075 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.445852041 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.445929050 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.445929050 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.445980072 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.447155952 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.447236061 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.447259903 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.447293043 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.448075056 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.448154926 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.448158979 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.448199987 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.448976040 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.449044943 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.449060917 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.449105024 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.450267076 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.450340033 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.450350046 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.450402021 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.450423002 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.450472116 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.450742006 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.450802088 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.452022076 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.452081919 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.452104092 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.452156067 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.453563929 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.453636885 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.453663111 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.453697920 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.453948021 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.454005003 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.454022884 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.454073906 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.455068111 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.455137968 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.455156088 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.455210924 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.456631899 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.456717968 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.456722975 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.456770897 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.457622051 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.457681894 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.457700014 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.457750082 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.457911015 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.457962036 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.457984924 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.458029032 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.459343910 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.459417105 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.459419966 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.459465027 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.460781097 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.460845947 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.460870981 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.460916042 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.461400986 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.461472034 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.461479902 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.461527109 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.462094069 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.462165117 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.462184906 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.462232113 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.462750912 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.462811947 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.462829113 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.462872982 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.464024067 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.464109898 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.464109898 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.464155912 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.464705944 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.464780092 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.464787960 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.464840889 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.466002941 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.466090918 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.466094971 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.466149092 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.466178894 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.466234922 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.466675043 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.466743946 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.467327118 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.467396975 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.467405081 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.467458010 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.468563080 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.468636990 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.468638897 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.468686104 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.468997002 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.469058037 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.469072104 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.469121933 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.469557047 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.469629049 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.469639063 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.469686985 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.470426083 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.470494032 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.470504999 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.470554113 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.471890926 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.471978903 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.471980095 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.472039938 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.472229958 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.472296000 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.472321033 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.472371101 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.473841906 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.473912001 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.473916054 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.473967075 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.474148035 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.474210024 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.474215984 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.474270105 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.475012064 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.475079060 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.475096941 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.475142956 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.476063967 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.476135969 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.476144075 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.476186991 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.476939917 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.477003098 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.477009058 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.477060080 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.477214098 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.477267981 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.477281094 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.477329016 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.478914022 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.478986025 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.479012012 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.479032993 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.481081009 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.481157064 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.481163025 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.481214046 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.481232882 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.481276035 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.481518984 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.481571913 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.481592894 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.481658936 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.481658936 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.481703043 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.481877089 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.481928110 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.481940985 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.481985092 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.482392073 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.482455969 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.482465029 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.482515097 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.484154940 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.484227896 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.484226942 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.484281063 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.484445095 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.484498978 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.484512091 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.484565020 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.485037088 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.485097885 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.485120058 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.485171080 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.486303091 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.486366034 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.486371040 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.486426115 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.486948013 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.487010956 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.487015009 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.487067938 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.487231016 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.487291098 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.487308025 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.487361908 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.488393068 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.488452911 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.488456964 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.488507986 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.489598036 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.489660025 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.489677906 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.489712000 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.490266085 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.490329981 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.490331888 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.490386963 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.490557909 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.490622044 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.490622044 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.490673065 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.490680933 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.490726948 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.490840912 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.490904093 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.491884947 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.491952896 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.491952896 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.492012978 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.493006945 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.493078947 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.493083000 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.493124008 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.493283033 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.493339062 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.493346930 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.493392944 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.493932962 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.493999004 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.494005919 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.494054079 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.494539976 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.494600058 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.494605064 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.494659901 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.495771885 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.495840073 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.495842934 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.495891094 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.496073008 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.496126890 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.496140003 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.496189117 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.496201038 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.496243000 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.496619940 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.496681929 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.497364044 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.497421980 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.497431993 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.497481108 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.498671055 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.498737097 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.498743057 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.498788118 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.498953104 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.499008894 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.499017000 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.499067068 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.499484062 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.499547005 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.499553919 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.499609947 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.499789000 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.499847889 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.499852896 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.499901056 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.500355005 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.500407934 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.500422001 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.500485897 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.500631094 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.500689983 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.500694036 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.500740051 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.500752926 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.500788927 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.501590967 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.501671076 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.501826048 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.501888990 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.501893044 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.501938105 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.502202034 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.502259016 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.502281904 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.502332926 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.503154993 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.503216982 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.503226995 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.503273964 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.503288984 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.503341913 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.504354000 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.504419088 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.504549980 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.504607916 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.504623890 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.504677057 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.504894018 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.504955053 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.504961014 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.505014896 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.505834103 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.505893946 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.505894899 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.505947113 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.509171009 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.509249926 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.509254932 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.509306908 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.509572029 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.509632111 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.509640932 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.509695053 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.509704113 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.509759903 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.509766102 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.509815931 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.509980917 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.510045052 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.510052919 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.510106087 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.510255098 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.510320902 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.510322094 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.510376930 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.510546923 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.510607958 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.510615110 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.510677099 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.510703087 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.510727882 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.511130095 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.511190891 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.511204958 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.511259079 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.512331009 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.512401104 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.512413025 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.512450933 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.513036013 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.513104916 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.513106108 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.513154030 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.515295029 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.515366077 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.515366077 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.515414953 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.515424967 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.515482903 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.515713930 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.557935953 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.560272932 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.560575008 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.560933113 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.561188936 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.561249018 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.561249971 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.562474012 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:25:59.562541008 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:25:59.652502060 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.652549982 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.652676105 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.653106928 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.653116941 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.843108892 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.843236923 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.844367981 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.844379902 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.844577074 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.844582081 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.844778061 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.844785929 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.844829082 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.845375061 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.845441103 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.845614910 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.846438885 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.893800974 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.976273060 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.976603031 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.976666927 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.976696014 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.977467060 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:25:59.978478909 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:25:59.978916883 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:26:00.024285078 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:00.095736980 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:00.096211910 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:00.096225023 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:00.096327066 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:26:00.096337080 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:00.096358061 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:00.096384048 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:26:00.096421003 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:26:00.096424103 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:00.096462965 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:26:00.096497059 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:00.097906113 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:00.097981930 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:26:00.250790119 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:00.292282104 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:26:00.359935999 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:26:00.395180941 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.395237923 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:00.395339012 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.398307085 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.398322105 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:00.400734901 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:00.575016975 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.575062990 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:00.575129032 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.576198101 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.576208115 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:00.814825058 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:00.815012932 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.818783045 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.818789959 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:00.819422960 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:00.859808922 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.865298986 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:00.865473986 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.871212959 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.871222973 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:00.871403933 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.871423960 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:00.871814966 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.871822119 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:00.872133017 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:00.872833014 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:00.872891903 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.873065948 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.873930931 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:00.886143923 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.886509895 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.887218952 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:00.887389898 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:00.887598038 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.888731003 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:00.922805071 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:00.936264038 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:00.973171949 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:01.018915892 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:01.024447918 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.066884041 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:01.158680916 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.158703089 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.158729076 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.158751011 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.158760071 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.158809900 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:01.158809900 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:01.158828020 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.158854008 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.158864021 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:01.158865929 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.158931017 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:01.158989906 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.159368038 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:01.161827087 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.162151098 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:01.194838047 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:01.195321083 CEST	443	49723	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:01.195547104 CEST	49723	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:02.004270077 CEST	49679	443	192.168.2.16	52.182.143.211
Jun 10, 2025 19:26:02.307719946 CEST	49679	443	192.168.2.16	52.182.143.211
Jun 10, 2025 19:26:02.898732901 CEST	49671	443	192.168.2.16	204.79.197.203
Jun 10, 2025 19:26:02.914798975 CEST	49679	443	192.168.2.16	52.182.143.211
Jun 10, 2025 19:26:03.215670109 CEST	49673	443	192.168.2.16	2.23.227.208
Jun 10, 2025 19:26:03.215708971 CEST	443	49673	2.23.227.208	192.168.2.16
Jun 10, 2025 19:26:04.125735044 CEST	49679	443	192.168.2.16	52.182.143.211
Jun 10, 2025 19:26:06.537760019 CEST	49679	443	192.168.2.16	52.182.143.211
Jun 10, 2025 19:26:11.351732969 CEST	49679	443	192.168.2.16	52.182.143.211
Jun 10, 2025 19:26:12.500788927 CEST	49671	443	192.168.2.16	204.79.197.203
Jun 10, 2025 19:26:20.961824894 CEST	49679	443	192.168.2.16	52.182.143.211
Jun 10, 2025 19:26:35.992063046 CEST	49692	80	192.168.2.16	172.217.165.131
Jun 10, 2025 19:26:35.992969036 CEST	49693	80	192.168.2.16	199.232.210.172
Jun 10, 2025 19:26:36.078279018 CEST	80	49692	172.217.165.131	192.168.2.16
Jun 10, 2025 19:26:36.078443050 CEST	49692	80	192.168.2.16	172.217.165.131
Jun 10, 2025 19:26:36.078609943 CEST	80	49693	199.232.210.172	192.168.2.16
Jun 10, 2025 19:26:36.078622103 CEST	80	49693	199.232.210.172	192.168.2.16
Jun 10, 2025 19:26:36.078726053 CEST	49693	80	192.168.2.16	199.232.210.172
Jun 10, 2025 19:26:37.500960112 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:37.501018047 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:37.501203060 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:37.501610994 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:37.501621962 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:37.917301893 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:37.917455912 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:37.919184923 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:37.919205904 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:37.919903994 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:37.921348095 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:37.921452999 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:37.922008038 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:37.922200918 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:37.922250986 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:37.923002005 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:37.968272924 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.060229063 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.115824938 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:38.191286087 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.191301107 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.191325903 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.191354036 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.191360950 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.191446066 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:38.191483974 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.191526890 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:38.191535950 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.191546917 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.191554070 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.191560984 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:38.191607952 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:38.191620111 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.194329023 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.194386959 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:38.216975927 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:38.217592001 CEST	443	49727	20.109.210.53	192.168.2.16
Jun 10, 2025 19:26:38.217663050 CEST	49727	443	192.168.2.16	20.109.210.53
Jun 10, 2025 19:26:40.700916052 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:40.700932980 CEST	443	49704	3.220.17.5	192.168.2.16
Jun 10, 2025 19:26:40.892853975 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:40.892880917 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:26:41.483843088 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:41.483875990 CEST	443	49712	3.220.17.5	192.168.2.16
Jun 10, 2025 19:26:43.892882109 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:26:43.892934084 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:26:44.132857084 CEST	49720	443	192.168.2.16	142.251.35.164
Jun 10, 2025 19:26:44.132880926 CEST	443	49720	142.251.35.164	192.168.2.16
Jun 10, 2025 19:26:44.576850891 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:26:44.576879025 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:26:45.103849888 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:26:45.103879929 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:26:45.373857021 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:45.373872042 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:26:45.979867935 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:26:45.979899883 CEST	443	49724	54.156.51.235	192.168.2.16
Jun 10, 2025 19:26:56.329823971 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:56.330235958 CEST	443	49704	3.220.17.5	192.168.2.16
Jun 10, 2025 19:26:56.330324888 CEST	49704	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:57.322062016 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:57.322530985 CEST	443	49712	3.220.17.5	192.168.2.16
Jun 10, 2025 19:26:57.322612047 CEST	49712	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:26:59.324980021 CEST	49720	443	192.168.2.16	142.251.35.164
Jun 10, 2025 19:26:59.325427055 CEST	443	49720	142.251.35.164	192.168.2.16
Jun 10, 2025 19:26:59.325527906 CEST	49720	443	192.168.2.16	142.251.35.164
Jun 10, 2025 19:27:25.906915903 CEST	49705	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:27:25.906940937 CEST	443	49705	3.220.17.5	192.168.2.16
Jun 10, 2025 19:27:28.907983065 CEST	49719	443	192.168.2.16	52.216.221.137
Jun 10, 2025 19:27:28.908016920 CEST	443	49719	52.216.221.137	192.168.2.16
Jun 10, 2025 19:27:29.578056097 CEST	49716	443	192.168.2.16	52.85.61.109
Jun 10, 2025 19:27:29.578074932 CEST	443	49716	52.85.61.109	192.168.2.16
Jun 10, 2025 19:27:30.104932070 CEST	49721	443	192.168.2.16	104.18.0.22
Jun 10, 2025 19:27:30.104960918 CEST	443	49721	104.18.0.22	192.168.2.16
Jun 10, 2025 19:27:30.375957012 CEST	49711	443	192.168.2.16	3.220.17.5
Jun 10, 2025 19:27:30.375976086 CEST	443	49711	3.220.17.5	192.168.2.16
Jun 10, 2025 19:27:30.981992006 CEST	49724	443	192.168.2.16	54.156.51.235
Jun 10, 2025 19:27:30.982038975 CEST	443	49724	54.156.51.235	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 10, 2025 19:25:54.226134062 CEST	53	51916	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:54.243338108 CEST	53	61449	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:54.855047941 CEST	53	64834	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:54.975055933 CEST	53	64097	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:55.183304071 CEST	49771	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:55.186986923 CEST	62533	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:55.277141094 CEST	53	49771	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:55.296566963 CEST	53	62533	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:55.945125103 CEST	62178	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:55.945384979 CEST	53798	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:56.032607079 CEST	53	53798	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:56.089333057 CEST	53	62178	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:58.456415892 CEST	60870	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:58.456573009 CEST	57251	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:58.456872940 CEST	64052	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:58.456994057 CEST	65111	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:58.543616056 CEST	53	65111	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:58.543818951 CEST	53	64052	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:58.548202038 CEST	53	60870	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:58.548358917 CEST	53	57251	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:58.837954998 CEST	65291	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:58.838036060 CEST	55531	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:58.924118042 CEST	53	55531	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:58.924474955 CEST	53	65291	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:59.565504074 CEST	59297	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:59.565715075 CEST	55228	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:25:59.651149035 CEST	53	59297	1.1.1.1	192.168.2.16
Jun 10, 2025 19:25:59.651647091 CEST	53	55228	1.1.1.1	192.168.2.16
Jun 10, 2025 19:26:00.411351919 CEST	52135	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:26:00.411546946 CEST	63714	53	192.168.2.16	1.1.1.1
Jun 10, 2025 19:26:00.553051949 CEST	53	63714	1.1.1.1	192.168.2.16
Jun 10, 2025 19:26:00.555438995 CEST	53	52135	1.1.1.1	192.168.2.16
Jun 10, 2025 19:26:11.886646986 CEST	53	60951	1.1.1.1	192.168.2.16
Jun 10, 2025 19:26:30.821521997 CEST	53	63602	1.1.1.1	192.168.2.16
Jun 10, 2025 19:26:53.686522961 CEST	53	63996	1.1.1.1	192.168.2.16
Jun 10, 2025 19:26:54.121074915 CEST	53	56414	1.1.1.1	192.168.2.16
Jun 10, 2025 19:26:59.613075972 CEST	138	138	192.168.2.16	192.168.2.255
Jun 10, 2025 19:27:23.923018932 CEST	53	52810	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 10, 2025 19:25:55.183304071 CEST	192.168.2.16	1.1.1.1	0x4ca1	Standard query (0)	2fa.com-token-auth.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:55.186986923 CEST	192.168.2.16	1.1.1.1	0x8cb9	Standard query (0)	2fa.com-token-auth.com	65	IN (0x0001)	false
Jun 10, 2025 19:25:55.945125103 CEST	192.168.2.16	1.1.1.1	0x85c0	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:55.945384979 CEST	192.168.2.16	1.1.1.1	0x38bf	Standard query (0)	secured-login.net	65	IN (0x0001)	false
Jun 10, 2025 19:25:58.456415892 CEST	192.168.2.16	1.1.1.1	0xcf0d	Standard query (0)	helpimg.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.456573009 CEST	192.168.2.16	1.1.1.1	0x8ebc	Standard query (0)	helpimg.s3.amazonaws.com	65	IN (0x0001)	false
Jun 10, 2025 19:25:58.456872940 CEST	192.168.2.16	1.1.1.1	0xe129	Standard query (0)	training.knowbe4.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.456994057 CEST	192.168.2.16	1.1.1.1	0xe155	Standard query (0)	training.knowbe4.com	65	IN (0x0001)	false
Jun 10, 2025 19:25:58.837954998 CEST	192.168.2.16	1.1.1.1	0x811a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.838036060 CEST	192.168.2.16	1.1.1.1	0x6b04	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 10, 2025 19:25:59.565504074 CEST	192.168.2.16	1.1.1.1	0x9c44	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:59.565715075 CEST	192.168.2.16	1.1.1.1	0x792e	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Jun 10, 2025 19:26:00.411351919 CEST	192.168.2.16	1.1.1.1	0xd9b2	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:26:00.411546946 CEST	192.168.2.16	1.1.1.1	0x995	Standard query (0)	secured-login.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jun 10, 2025 19:25:55.277141094 CEST	1.1.1.1	192.168.2.16	0x4ca1	No error (0)	2fa.com-token-auth.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:25:55.277141094 CEST	1.1.1.1	192.168.2.16	0x4ca1	No error (0)	landing.training.knowbe4.com		3.220.17.5	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:55.277141094 CEST	1.1.1.1	192.168.2.16	0x4ca1	No error (0)	landing.training.knowbe4.com		52.72.244.89	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:55.277141094 CEST	1.1.1.1	192.168.2.16	0x4ca1	No error (0)	landing.training.knowbe4.com		54.156.51.235	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:55.277141094 CEST	1.1.1.1	192.168.2.16	0x4ca1	No error (0)	landing.training.knowbe4.com		54.173.239.238	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:55.277141094 CEST	1.1.1.1	192.168.2.16	0x4ca1	No error (0)	landing.training.knowbe4.com		100.28.3.252	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:55.277141094 CEST	1.1.1.1	192.168.2.16	0x4ca1	No error (0)	landing.training.knowbe4.com		100.28.27.201	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:55.296566963 CEST	1.1.1.1	192.168.2.16	0x8cb9	No error (0)	2fa.com-token-auth.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:25:56.089333057 CEST	1.1.1.1	192.168.2.16	0x85c0	No error (0)	secured-login.net		3.220.17.5	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:56.089333057 CEST	1.1.1.1	192.168.2.16	0x85c0	No error (0)	secured-login.net		100.28.3.252	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:56.089333057 CEST	1.1.1.1	192.168.2.16	0x85c0	No error (0)	secured-login.net		54.173.239.238	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:56.089333057 CEST	1.1.1.1	192.168.2.16	0x85c0	No error (0)	secured-login.net		52.72.244.89	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:56.089333057 CEST	1.1.1.1	192.168.2.16	0x85c0	No error (0)	secured-login.net		100.28.27.201	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:56.089333057 CEST	1.1.1.1	192.168.2.16	0x85c0	No error (0)	secured-login.net		54.156.51.235	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.543818951 CEST	1.1.1.1	192.168.2.16	0xe129	No error (0)	training.knowbe4.com		52.85.61.109	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.543818951 CEST	1.1.1.1	192.168.2.16	0xe129	No error (0)	training.knowbe4.com		52.85.61.6	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.543818951 CEST	1.1.1.1	192.168.2.16	0xe129	No error (0)	training.knowbe4.com		52.85.61.20	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.543818951 CEST	1.1.1.1	192.168.2.16	0xe129	No error (0)	training.knowbe4.com		52.85.61.102	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	helpimg.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.221.137	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.172.153	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	s3-w.us-east-1.amazonaws.com		16.15.216.235	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.194	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.13.185	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.13.146	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	s3-w.us-east-1.amazonaws.com		16.15.176.226	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548202038 CEST	1.1.1.1	192.168.2.16	0xcf0d	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.6.143	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548358917 CEST	1.1.1.1	192.168.2.16	0x8ebc	No error (0)	helpimg.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:25:58.548358917 CEST	1.1.1.1	192.168.2.16	0x8ebc	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:25:58.924118042 CEST	1.1.1.1	192.168.2.16	0x6b04	No error (0)	www.google.com			65	IN (0x0001)	false
Jun 10, 2025 19:25:58.924474955 CEST	1.1.1.1	192.168.2.16	0x811a	No error (0)	www.google.com		142.251.35.164	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:59.651149035 CEST	1.1.1.1	192.168.2.16	0x9c44	No error (0)	unpkg.com		104.18.0.22	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:59.651149035 CEST	1.1.1.1	192.168.2.16	0x9c44	No error (0)	unpkg.com		104.18.1.22	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:25:59.651647091 CEST	1.1.1.1	192.168.2.16	0x792e	No error (0)	unpkg.com			65	IN (0x0001)	false
Jun 10, 2025 19:26:00.555438995 CEST	1.1.1.1	192.168.2.16	0xd9b2	No error (0)	secured-login.net		54.156.51.235	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:26:00.555438995 CEST	1.1.1.1	192.168.2.16	0xd9b2	No error (0)	secured-login.net		52.72.244.89	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:26:00.555438995 CEST	1.1.1.1	192.168.2.16	0xd9b2	No error (0)	secured-login.net		54.173.239.238	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:26:00.555438995 CEST	1.1.1.1	192.168.2.16	0xd9b2	No error (0)	secured-login.net		100.28.3.252	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:26:00.555438995 CEST	1.1.1.1	192.168.2.16	0xd9b2	No error (0)	secured-login.net		100.28.27.201	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:26:00.555438995 CEST	1.1.1.1	192.168.2.16	0xd9b2	No error (0)	secured-login.net		3.220.17.5	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

2fa.com-token-auth.com

secured-login.net

helpimg.s3.amazonaws.com

training.knowbe4.com

unpkg.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49705	3.220.17.5	443	2932	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:25:55 UTC	971	OUT	GET /XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09?cid=2559917548 HTTP/1.1 host: 2fa.com-token-auth.com sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-fetch-site: none sec-fetch-mode: navigate sec-fetch-user: ?1 sec-fetch-dest: document accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0, i
2025-06-10 17:25:55 UTC	555	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:25:55 GMT content-type: text/html; charset=utf-8 content-length: 452 x-frame-options: SAMEORIGIN x-xss-protection: 0 x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: no-referrer-when-downgrade etag: W/"1e29188ed567a0b5bed605bb44d7917c" cache-control: max-age=0, private, must-revalidate content-security-policy: x-request-id: 49ee8809-2b85-4235-8ed0-6896c8e6393c x-runtime: 0.172119 strict-transport-security: max-age=63113904; includeSubDomains; preload
2025-06-10 17:25:55 UTC	452	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 64 2d 6c 6f 67 69 6e 2e 6e 65 74 2f 70 61 67 65 73 2f 63 33 39 35 35 62 31 63 34 38 61 2f 58 55 6b 56 6e 62 45 68 44 63 44 42 76 53 54 5a 55 57 45 74 54 4d 31 42 75 57 6a 46 73 56 32 39 6a 4d 32 52 54 52 6d 70 46 5a 32 49 76 59 55 35 6d 4e 33 6c 72 4b 32 39 53 61 6d 68 5a 51 6d 63 72 61 31 70 48 5a 6d 39 43 59 55 63 76 52 6e 64 6b 4b 7a 68 72 62 6e 68 6e 53 6e 4e 6b 63 6b 52 71 57 45 6c 43 56 58 4e 31 4e 58 46 74 4f 47 74 55 55 6e 49 35 4c 30 74 5a 4f 48 56 74 57 57 63 72 55 33 6c 53 54 32 39 32 52 44 41 35 54 58 6b 35 4d 6c 5a 7a 4d 44 45 79 63 45 64 73 Data Ascii: <html> <head> <script>window.location.href = 'https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEds

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49711	3.220.17.5	443	2932	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:25:58 UTC	1317	OUT	GET /pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 HTTP/1.1 host: secured-login.net sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-fetch-site: cross-site sec-fetch-mode: navigate sec-fetch-dest: document referer: https://2fa.com-token-auth.com/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09?cid=2559917548 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0, i
2025-06-10 17:25:58 UTC	814	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:25:58 GMT content-type: text/html; charset=utf-8 content-length: 75074 x-frame-options: SAMEORIGIN x-xss-protection: 0 x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: no-referrer-when-downgrade link: </assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css>; rel=preload; as=style; nopush,</assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js>; rel=preload; as=script; nopush etag: W/"69feb31d20f8340079383eb02bd89606" cache-control: max-age=0, private, must-revalidate content-security-policy: x-request-id: 7a875ba8-f832-48f1-8c6b-4881943916a8 x-runtime: 1.834970 strict-transport-security: max-age=63113904; includeSubDomains; preload
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 49 4d 50 4f 52 54 41 4e 54 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 73 69 6d 75 6c 61 74 65 64 20 70 68 69 73 68 69 6e 67 20 61 74 74 61 63 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"> <meta name="IMPORTANT" content="This page is part of a simulated phishing attac
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 6f 77 2e 67 6f 6e 20 3d 20 7b 7d 3b 0a 09 09 09 67 6f 6e 2e 6c 6f 63 61 6c 65 20 3d 20 27 65 6e 2d 75 73 27 3b 0a 09 09 09 67 6f 6e 2e 77 61 74 65 72 6d 61 72 6b 20 3d 20 31 36 34 37 32 35 3b 0a 09 09 09 2f 2f 5d 5d 3e 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 70 6b 67 2e 63 6f 6d 2f 70 65 74 69 74 65 2d 76 75 65 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 73 74 79 6c 65 3e 0a 09 09 09 3a 72 6f 6f 74 20 7b 0a 09 09 09 09 2f 2a 20 43 75 73 74 6f 6d 20 76 61 72 69 61 62 6c 65 20 74 68 61 74 20 73 65 74 73 20 74 68 65 20 74 68 65 6d 65 20 63 6f 6c 6f 72 2e 20 43 68 61 6e 67 65 20 74 68 65 20 68 65 78 20 63 6f 64 65 20 76 61 6c 75 65 20 66 6f 72 20 61 20 64 69 Data Ascii: ow.gon = {};gon.locale = 'en-us';gon.watermark = 164725;//...</script><script src="https://unpkg.com/petite-vue" defer=""></script><style>:root {/* Custom variable that sets the theme color. Change the hex code value for a di
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 63 30 2e 32 31 2c 31 2e 37 37 2c 30 2e 33 36 2c 33 2e 39 37 2c 30 2e 34 37 2c 36 2e 36 32 63 30 2e 31 2c 32 2e 36 35 2c 30 2e 31 35 2c 34 2e 39 37 2c 30 2e 31 35 2c 36 2e 39 33 63 31 2e 30 36 2d 31 2e 37 37 2c 32 2e 34 34 2d 33 2e 35 35 2c 34 2e 31 34 2d 35 2e 33 37 0a 09 09 09 09 63 31 2e 37 2d 31 2e 38 33 2c 33 2e 36 39 2d 33 2e 34 37 2c 35 2e 39 37 2d 34 2e 39 35 63 32 2e 32 38 2d 31 2e 34 36 2c 34 2e 39 31 2d 32 2e 36 38 2c 37 2e 38 38 2d 33 2e 36 31 63 32 2e 39 38 2d 30 2e 39 33 2c 36 2e 32 31 2d 31 2e 34 2c 39 2e 37 31 2d 31 2e 34 63 39 2e 33 33 2c 30 2c 31 36 2e 31 32 2c 32 2e 35 39 2c 32 30 2e 33 37 2c 37 2e 37 33 0a 09 09 09 09 63 34 2e 32 35 2c 35 2e 31 35 2c 36 2e 33 37 2c 31 32 2e 33 39 2c 36 2e 33 37 2c 32 31 2e 37 34 76 34 37 2e 34 34 63 2d Data Ascii: c0.21,1.77,0.36,3.97,0.47,6.62c0.1,2.65,0.15,4.97,0.15,6.93c1.06-1.77,2.44-3.55,4.14-5.37c1.7-1.83,3.69-3.47,5.97-4.95c2.28-1.46,4.91-2.68,7.88-3.61c2.98-0.93,6.21-1.4,9.71-1.4c9.33,0,16.12,2.59,20.37,7.73c4.25,5.15,6.37,12.39,6.37,21.74v47.44c-
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 2c 36 2e 37 37 2d 30 2e 34 35 0a 09 09 09 09 63 32 2e 32 37 2d 30 2e 31 2c 34 2e 33 31 2d 30 2e 31 34 2c 36 2e 31 32 2d 30 2e 31 34 63 31 32 2e 35 32 2c 30 2c 32 32 2e 31 32 2c 32 2e 32 33 2c 32 38 2e 38 31 2c 36 2e 37 31 63 36 2e 36 37 2c 34 2e 34 36 2c 31 30 2e 30 32 2c 31 31 2e 34 31 2c 31 30 2e 30 32 2c 32 30 2e 38 34 63 30 2c 33 2e 30 36 2d 30 2e 34 39 2c 35 2e 38 34 2d 31 2e 35 31 2c 38 2e 33 32 0a 09 09 09 09 63 2d 31 2e 30 31 2c 32 2e 35 32 2d 32 2e 33 36 2c 34 2e 37 37 2d 34 2e 30 36 2c 36 2e 37 38 63 2d 31 2e 37 2c 32 2e 30 34 2d 33 2e 36 39 2c 33 2e 37 34 2d 35 2e 39 37 2c 35 2e 30 39 63 2d 32 2e 32 39 2c 31 2e 33 39 2d 34 2e 36 34 2c 32 2e 34 32 2d 37 2e 30 39 2c 33 2e 31 31 63 33 2e 32 39 2c 30 2e 33 38 2c 36 2e 34 37 2c 31 2e 32 2c 39 2e 35 Data Ascii: ,6.77-0.45c2.27-0.1,4.31-0.14,6.12-0.14c12.52,0,22.12,2.23,28.81,6.71c6.67,4.46,10.02,11.41,10.02,20.84c0,3.06-0.49,5.84-1.51,8.32c-1.01,2.52-2.36,4.77-4.06,6.78c-1.7,2.04-3.69,3.74-5.97,5.09c-2.29,1.39-4.64,2.42-7.09,3.11c3.29,0.38,6.47,1.2,9.5
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 30 32 63 2d 37 2c 30 2d 31 33 2e 30 32 2d 30 2e 39 35 2d 31 38 2e 30 34 2d 32 2e 38 37 63 2d 35 2e 30 35 2d 31 2e 39 31 2d 39 2e 31 38 2d 34 2e 35 38 2d 31 32 2e 34 31 2d 38 2e 30 32 63 2d 33 2e 32 36 2d 33 2e 34 35 2d 35 2e 36 34 2d 37 2e 35 35 2d 37 2e 31 38 2d 31 32 2e 33 0a 09 09 09 09 63 2d 31 2e 35 33 2d 34 2e 37 37 2d 32 2e 32 39 2d 31 30 2e 30 31 2d 32 2e 32 39 2d 31 35 2e 37 63 30 2d 35 2e 35 31 2c 30 2e 37 31 2d 31 30 2e 36 36 2c 32 2e 31 35 2d 31 35 2e 34 37 63 31 2e 34 31 2d 34 2e 38 32 2c 33 2e 35 38 2d 39 2e 30 35 2c 36 2e 35 31 2d 31 32 2e 36 38 63 32 2e 39 32 2d 33 2e 36 35 2c 36 2e 36 34 2d 36 2e 35 2c 31 31 2e 32 33 2d 38 2e 35 36 0a 09 09 09 09 63 34 2e 35 36 2d 32 2e 30 36 2c 31 30 2d 33 2e 30 38 2c 31 36 2e 34 2d 33 2e 30 38 63 35 2e Data Ascii: 02c-7,0-13.02-0.95-18.04-2.87c-5.05-1.91-9.18-4.58-12.41-8.02c-3.26-3.45-5.64-7.55-7.18-12.3c-1.53-4.77-2.29-10.01-2.29-15.7c0-5.51,0.71-10.66,2.15-15.47c1.41-4.82,3.58-9.05,6.51-12.68c2.92-3.65,6.64-6.5,11.23-8.56c4.56-2.06,10-3.08,16.4-3.08c5.
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 2c 36 2c 31 37 2e 32 36 63 2d 30 2e 33 37 2c 36 2e 33 37 2d 33 2e 32 2c 31 32 2e 32 31 2d 37 2e 39 35 2c 31 36 2e 34 35 0a 09 09 09 09 6c 34 2e 30 37 2c 34 2e 36 63 35 2e 39 39 2d 35 2e 33 33 2c 39 2e 35 35 2d 31 32 2e 36 38 2c 31 30 2e 30 31 2d 32 30 2e 36 38 43 32 33 31 2e 35 36 2c 36 32 2e 33 31 2c 32 32 38 2e 38 38 2c 35 34 2e 35 38 2c 32 32 33 2e 35 34 2c 34 38 2e 35 39 7a 22 3e 3c 2f 70 61 74 68 3e 0a 09 09 09 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 35 31 39 2e 37 2c 38 34 2e 36 34 6c 2d 31 2e 31 33 2d 31 2e 34 37 6c 34 37 2e 37 32 2d 38 31 2e 32 38 63 31 2e 39 39 2d 30 2e 36 37 2c 33 2e 35 31 2d 30 2e 39 34 2c 35 2e 31 38 2d 30 2e 39 32 63 33 2e 33 2c 30 2e 30 33 2c 34 2e 30 36 2c 30 2e 34 33 2c 35 2e 35 32 2c 30 Data Ascii: ,6,17.26c-0.37,6.37-3.2,12.21-7.95,16.45l4.07,4.6c5.99-5.33,9.55-12.68,10.01-20.68C231.56,62.31,228.88,54.58,223.54,48.59z"></path><path class="st0" d="M519.7,84.64l-1.13-1.47l47.72-81.28c1.99-0.67,3.51-0.94,5.18-0.92c3.3,0.03,4.06,0.43,5.52,0
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 2e 73 74 30 20 7b 0a 09 09 09 09 09 09 09 09 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 63 6c 72 2d 61 63 63 65 6e 74 29 3b 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 2e 73 74 31 20 7b 0a 09 09 09 09 09 09 09 09 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 09 09 09 09 09 09 09 09 63 6c 69 70 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 09 09 09 09 09 09 09 09 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 63 6c 72 2d 61 63 63 65 6e 74 29 3b 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 3c 2f 73 74 79 6c 65 3e 0a 09 09 09 09 09 09 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 3e 0a 09 09 09 09 09 09 09 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 36 22 3e 0a 09 09 09 09 09 09 09 09 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 35 22 20 74 72 61 6e 73 66 6f 72 6d Data Ascii: .st0 {fill: var(--clr-accent);}.st1 {fill-rule: evenodd;clip-rule: evenodd;fill: var(--clr-accent);}</style><g id="Page-1"><g id="Group-6"><g id="Group-5" transform
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 20 31 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 39 2e 35 30 30 30 30 30 2c 20 2d 32 35 2e 30 30 30 30 30 30 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2e 30 30 30 30 30 30 2c 20 31 34 2e 30 30 30 30 30 30 29 22 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 22 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 2e 37 2c 33 30 2e 37 63 2d 30 2e 35 2c 30 2e 35 2d 31 2e 34 2c 30 2e 35 2d 31 2e 39 2c 30 63 2d 30 2e 35 2d 30 2e 35 2d 30 2e 35 2d 31 2e 34 2c 30 2d 31 2e 39 6c 34 2e 36 2d 34 2e 36 63 30 2e 35 2d 30 2e 35 2c 31 2e 34 2d 30 2e 35 2c 31 2e 39 2c 30 0a 09 09 09 09 09 09 63 30 2e 35 2c 30 2e 35 2c 30 2e 35 2c 31 2e 34 2c 30 2c 31 2e 39 4c 31 2e 37 2c 33 30 2e 37 7a 22 3e 3c 2f 70 61 74 68 3e 0a 09 09 09 09 09 09 09 09 09 09 Data Ascii: 1) translate(-9.500000, -25.000000) translate(0.000000, 14.000000)"><path id="Path" class="st1" d="M1.7,30.7c-0.5,0.5-1.4,0.5-1.9,0c-0.5-0.5-0.5-1.4,0-1.9l4.6-4.6c0.5-0.5,1.4-0.5,1.9,0c0.5,0.5,0.5,1.4,0,1.9L1.7,30.7z"></path>
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 09 09 09 09 09 3c 70 20 76 2d 68 74 6d 6c 3d 22 73 74 6f 72 65 2e 67 65 74 53 74 72 69 6e 67 28 27 72 75 6c 65 32 27 29 22 20 3a 64 69 72 3d 22 73 74 6f 72 65 2e 67 65 74 44 69 72 28 29 22 3e 3c 2f 70 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 22 3e 0a 09 09 09 09 09 09 09 3c 68 33 3e 33 3c 2f 68 33 3e 0a 09 09 09 09 09 09 09 3c 70 20 76 2d 68 74 6d 6c 3d 22 73 74 6f 72 65 2e 67 65 74 53 74 72 69 6e 67 28 27 72 75 6c 65 33 27 29 22 20 3a 64 69 72 3d 22 73 74 6f 72 65 2e 67 65 74 44 69 72 28 29 22 3e 3c 2f 70 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 09 09 09 3c 70 20 76 2d 68 74 6d 6c 3d 22 73 74 6f 72 65 2e 67 65 74 53 74 72 69 6e 67 28 27 Data Ascii: <p v-html="store.getString('rule2')" :dir="store.getDir()"></p></div><div class="card"><h3>3</h3><p v-html="store.getString('rule3')" :dir="store.getDir()"></p></div></div><p v-html="store.getString('
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 7d 2c 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 69 64 3a 20 27 65 6e 5f 67 62 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 65 6e 67 6c 69 73 68 3a 20 27 45 6e 67 6c 69 73 68 20 28 47 72 65 61 74 20 42 72 69 74 61 69 6e 29 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 6c 6f 63 61 6c 69 7a 65 64 3a 20 27 45 6e 67 6c 69 73 68 20 28 47 72 65 61 74 20 42 72 69 74 61 69 6e 29 27 2c 0a 09 09 09 09 09 09 72 74 6c 3a 20 66 61 6c 73 65 2c 0a 09 09 09 09 09 7d 2c 0a 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 69 64 3a 20 27 65 73 5f 34 31 39 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 65 6e 67 6c 69 73 68 3a 20 27 53 70 61 6e 69 73 68 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 27 2c 0a 09 09 09 09 09 09 6e 61 6d 65 5f 6c 6f 63 61 6c 69 7a 65 64 3a 20 27 45 73 70 61 c3 b1 Data Ascii: },{id: 'en_gb',name_english: 'English (Great Britain)',name_louserzed: 'English (Great Britain)',rtl: false,},{id: 'es_419',name_english: 'Spanish (Latin America)',name_louserzed: 'Espa
2025-06-10 17:25:58 UTC	932	OUT	GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1 host: secured-login.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: text/css,/;q=0.1 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: style referer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0
2025-06-10 17:25:58 UTC	244	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:25:58 GMT content-type: text/css content-length: 1471 last-modified: Tue, 10 Jun 2025 14:17:51 GMT vary: accept-encoding strict-transport-security: max-age=63113904; includeSubDomains; preload
2025-06-10 17:25:58 UTC	911	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 host: secured-login.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:25:58 UTC	260	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:25:58 GMT content-type: application/javascript content-length: 380848 last-modified: Tue, 10 Jun 2025 14:17:51 GMT vary: accept-encoding strict-transport-security: max-age=63113904; includeSubDomains; preload
2025-06-10 17:26:00 UTC	899	OUT	GET /favicon.ico HTTP/1.1 host: secured-login.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:26:00 UTC	234	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:26:00 GMT content-type: image/vnd.microsoft.icon content-length: 0 last-modified: Tue, 10 Jun 2025 14:18:37 GMT strict-transport-security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49719	52.216.221.137	443	2932	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:25:58 UTC	932	OUT	GET /landing_pages/oops/styles.css HTTP/1.1 Host: helpimg.s3.amazonaws.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-06-10 17:25:58 UTC	483	IN	HTTP/1.1 200 OK x-amz-id-2: 66cYcTUW6Jwe1VFhwgZMyOZXOxtkkvwEs3Mibd1tdLQGQco4LVPt47VbcXNfivvdP7ysKAXpP0I= x-amz-request-id: 4CZ5Y667PC5E9DEJ Date: Tue, 10 Jun 2025 17:25:59 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 28 May 2025 19:50:52 GMT ETag: "583981782f408e2108f192fbb96c0fd8" x-amz-server-side-encryption: AES256 x-amz-version-id: 5p.WeHTQ4CAxgmmqoZhjv2toHbgHRYec Accept-Ranges: bytes Content-Type: text/css Content-Length: 5845 Server: AmazonS3
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 31 30 30 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 32 30 30 3a 20 23 66 35 66 35 66 35 3b 0a 20 20 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 33 30 30 3a 20 23 64 35 64 35 64 35 3b 0a 20 20 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 34 30 30 3a 20 23 61 62 61 62 61 62 3b 0a 20 20 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 35 30 30 3a 20 23 37 30 37 30 37 30 3b 0a 20 20 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 36 30 30 3a 20 23 32 63 32 63 32 63 3b 0a 0a 20 20 2f 2a 20 50 61 64 64 69 6e 67 20 2a 2f 0a 20 20 2d 2d 70 61 64 64 69 6e 67 2d 78 73 3a 20 63 6c 61 6d 70 28 30 2e 35 72 65 6d 2c 20 31 2e 35 25 2c 20 30 2e 37 35 72 65 6d 29 3b 0a 20 20 2d 2d Data Ascii: :root { --clr-neutral-100: #ffffff; --clr-neutral-200: #f5f5f5; --clr-neutral-300: #d5d5d5; --clr-neutral-400: #ababab; --clr-neutral-500: #707070; --clr-neutral-600: #2c2c2c; /* Padding */ --padding-xs: clamp(0.5rem, 1.5%, 0.75rem); --
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 35 70 78 20 30 70 78 20 76 61 72 28 2d 2d 63 6c 72 2d 61 63 63 65 6e 74 29 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 35 70 78 20 30 70 78 20 76 61 72 28 2d 2d 63 6c 72 2d 61 63 63 65 6e 74 29 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 35 70 78 20 30 70 78 20 76 61 72 28 2d 2d 63 6c 72 2d 61 63 63 65 6e 74 29 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6c 72 2d 61 63 63 65 6e 74 29 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 63 6c 72 2d 61 63 63 65 6e 74 29 3b 0a 7d 0a 0a 68 74 6d 6c 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b Data Ascii: sor: pointer; box-shadow: 0 0 5px 0px var(--clr-accent); -webkit-box-shadow: 0 0 5px 0px var(--clr-accent); -moz-box-shadow: 0 0 5px 0px var(--clr-accent); border-color: var(--clr-accent); outline: var(--clr-accent);}html { font-size: 100%;
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 68 65 72 69 74 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 35 30 30 29 3b 0a 7d 0a 0a 2f 2a 52 65 6d 6f 76 65 20 73 65 6c 65 63 74 20 61 72 72 6f 77 20 66 72 6f 6d 20 6c 6f 77 65 72 20 49 45 20 76 65 72 73 69 6f 6e 73 2a 2f 0a 2f 2a 20 73 65 6c 65 63 74 3a 3a 6d 73 2d 65 78 70 61 6e 64 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 20 2a 2f 0a 0a 2e 73 65 6c 65 63 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 31 35 63 68 3b 0a 20 20 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 20 32 35 63 68 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 2e 30 36 32 35 72 65 6d 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6c Data Ascii: herit; outline: none; color: var(--clr-neutral-500);}/Remove select arrow from lower IE versions//* select::ms-expand {display: none;} */.select { width: 100%; min-width: 15ch; max-inline-size: 25ch; border: 0.0625rem solid var(--cl
2025-06-10 17:25:58 UTC	1460	IN	Data Raw: 75 6d 6e 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 0a 20 20 70 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 20 76 61 72 28 2d 2d 62 6c 6f 63 6b 2d 66 6c 6f 77 2d 73 6d 29 3b 0a 20 20 7d 0a 0a 20 20 73 76 67 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 72 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 72 65 6d 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 30 65 6d 29 20 7b 0a 20 20 68 65 61 64 65 72 20 7b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 7d 0a 20 20 6d 61 69 6e 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b Data Ascii: umn; align-items: center; p { margin-block-start: var(--block-flow-sm); } svg { max-width: 10rem; margin-inline-end: 2rem; }}@media screen and (max-width: 40em) { header { align-items: center; } main { margin-block
2025-06-10 17:25:58 UTC	5	IN	Data Raw: 20 7d 0a 7d 0a Data Ascii: }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49716	52.85.61.109	443	2932	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:25:59 UTC	945	OUT	GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1 host: training.knowbe4.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:25:59 UTC	1460	IN	HTTP/1.1 200 OK content-type: text/javascript content-length: 51364 date: Tue, 10 Jun 2025 17:25:59 GMT last-modified: Thu, 23 May 2024 17:10:02 GMT etag: "bf2f96e6233de3d8c0346085ac28248a" x-amz-server-side-encryption: AES256 x-amz-version-id: RZAGGokfellBSB91hGWLp0WOKAUihfUC accept-ranges: bytes server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.knowbe4.com https://.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.co [TRUNCATED]
2025-06-10 17:25:59 UTC	1460	IN	Data Raw: 65 76 65 6c 6f 70 6d 65 6e 74 2e 75 70 6c 6f 61 64 73 2e 6b 6e 6f 77 62 65 34 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 68 65 6c 70 69 6d 67 2f 20 68 74 74 70 73 3a 2f 2f 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 68 65 6c 70 69 6d 67 2d 6b 6d 73 61 74 2d 64 65 76 65 6c 6f 70 6d 65 6e 74 2d 75 73 2d 65 61 73 74 2d 31 2f 20 68 74 74 70 73 3a 2f 2f 68 65 6c 70 69 6d 67 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 7a 65 6e 64 65 73 6b 2d 65 75 2e 6d 79 2e 73 65 6e 74 72 79 2e 69 6f 2f 20 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 36 31 36 37 35 30 32 38 38 38 32 33 39 31 30 34 2e 73 Data Ascii: evelopment.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.s
2025-06-10 17:25:59 UTC	1460	IN	Data Raw: 65 6e 74 2e 75 70 6c 6f 61 64 73 2e 6b 6e 6f 77 62 65 34 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 68 65 6c 70 69 6d 67 2f 20 68 74 74 70 73 3a 2f 2f 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 68 65 6c 70 69 6d 67 2d 6b 6d 73 61 74 2d 64 65 76 65 6c 6f 70 6d 65 6e 74 2d 75 73 2d 65 61 73 74 2d 31 2f 20 68 74 74 70 73 3a 2f 2f 68 65 6c 70 69 6d 67 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 7a 65 6e 64 65 73 6b 2d 65 75 2e 6d 79 2e 73 65 6e 74 72 79 2e 69 6f 2f 20 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 36 31 36 37 35 30 32 38 38 38 32 33 39 31 30 34 2e 73 74 6f 72 61 67 65 2e Data Ascii: ent.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.
2025-06-10 17:25:59 UTC	1460	IN	Data Raw: 6f 6e 61 77 73 2e 63 6f 6d 2f 68 65 6c 70 69 6d 67 2f 20 68 74 74 70 73 3a 2f 2f 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 68 65 6c 70 69 6d 67 2d 6b 6d 73 61 74 2d 64 65 76 65 6c 6f 70 6d 65 6e 74 2d 75 73 2d 65 61 73 74 2d 31 2f 20 68 74 74 70 73 3a 2f 2f 68 65 6c 70 69 6d 67 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 7a 65 6e 64 65 73 6b 2d 65 75 2e 6d 79 2e 73 65 6e 74 72 79 2e 69 6f 2f 20 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 36 31 36 37 35 30 32 38 38 38 32 33 39 31 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 20 77 73 73 3a 2f 2f 2a 2e 7a 6f 70 69 6d 2e 63 6f 6d 2f 20 77 73 73 3a 2f 2f Data Ascii: onaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://
2025-06-10 17:25:59 UTC	1460	IN	Data Raw: 69 2d 6a 73 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 68 69 67 68 63 68 61 72 74 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 2e 70 65 6e 64 6f 2e 69 6f 2f 20 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 6b 6e 6f 77 62 65 34 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 6b 6e 6f 77 62 65 34 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 65 6d 62 65 64 64 61 62 6c 65 2f 63 6f 6e 66 69 67 20 68 74 74 Data Ascii: i-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config htt
2025-06-10 17:25:59 UTC	1460	IN	Data Raw: 20 68 74 74 70 73 3a 2f 2f 61 70 69 2d 6a 73 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 68 69 67 68 63 68 61 72 74 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 2e 70 65 6e 64 6f 2e 69 6f 2f 20 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 6b 6e 6f 77 62 65 34 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 6b 6e 6f 77 62 65 34 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 65 6d 62 65 64 64 61 62 6c 65 Data Ascii: https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable
2025-06-10 17:25:59 UTC	1460	IN	Data Raw: 73 3a 2f 2f 2a 2e 6b 6e 6f 77 62 65 34 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 6b 62 34 6f 64 2e 72 75 6e 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 6b 65 64 69 74 6f 72 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 2a 2e 6c 61 75 6e 63 68 64 61 72 6b 6c 79 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 2a 2e 7a 6f 70 69 6d 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 61 70 69 2d 6a 73 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 68 69 67 68 63 68 61 72 74 73 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 2e 70 65 6e 64 6f 2e 69 6f 2f 20 68 74 74 70 73 3a 2f 2f Data Ascii: s://.knowbe4.com https://.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://
2025-06-10 17:25:59 UTC	1069	IN	Data Raw: 6d 20 68 65 6c 70 69 6d 67 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 20 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 20 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 74 77 69 74 74 65 72 2d 62 6f 6f 74 73 74 72 61 70 2f 20 70 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 36 31 36 37 35 30 32 38 38 38 32 33 39 31 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 20 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 68 65 6c 70 69 6d 67 2f 20 75 73 65 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 20 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 77 77 77 2e Data Ascii: m helpimg.s3.amazonaws.com cdnjs.cloudflare.com/ajax/libs/font-awesome/ cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/ p.typekit.net pendo-static-6167502888239104.storage.googleapis.com s3.amazonaws.com/helpimg/ use.fontawesome.com use.typekit.net www.
2025-06-10 17:25:59 UTC	1460	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 37 2e 31 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 0a 20 Data Ascii: /! Modernizr v2.7.1 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are available in
2025-06-10 17:25:59 UTC	1460	IN	Data Raw: 69 6e 70 75 74 45 6c 65 6d 20 2f 2a 3e 3e 69 6e 70 75 74 65 6c 65 6d 2a 2f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6e 70 75 74 27 29 20 2f 2a 3e 3e 69 6e 70 75 74 65 6c 65 6d 2a 2f 20 2c 0a 0a 20 20 20 20 2f 2a 3e 3e 73 6d 69 6c 65 2a 2f 0a 20 20 20 20 73 6d 69 6c 65 20 3d 20 27 3a 29 27 2c 0a 20 20 20 20 2f 2a 3e 3e 73 6d 69 6c 65 2a 2f 0a 0a 20 20 20 20 74 6f 53 74 72 69 6e 67 20 3d 20 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 0a 0a 20 20 20 20 2f 2f 20 54 4f 44 4f 20 3a 3a 20 6d 61 6b 65 20 74 68 65 20 70 72 65 66 69 78 65 73 20 6d 6f 72 65 20 67 72 61 6e 75 6c 61 72 0a 20 20 20 20 2f 2a 3e 3e 70 72 65 66 69 78 65 73 2a 2f 0a 20 20 20 20 2f 2f 20 4c 69 73 74 20 6f 66 20 70 72 6f 70 65 72 74 79 20 76 61 6c 75 65 73 Data Ascii: inputElem />>inputelem/ = document.createElement('input') />>inputelem/ , />>smile/ smile = ':)', />>smile/ toString = {}.toString, // TODO :: make the prefixes more granular />>prefixes/ // List of property values
2025-06-10 17:25:59 UTC	1460	IN	Data Raw: 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 2c 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 66 74 65 72 20 70 61 67 65 20 6c 6f 61 64 20 69 6e 6a 65 63 74 69 6e 67 20 61 20 66 61 6b 65 20 62 6f 64 79 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 73 6f 20 63 68 65 63 6b 20 69 66 20 62 6f 64 79 20 65 78 69 73 74 73 0a 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 45 36 20 61 6e 64 20 37 20 77 6f 6e 27 74 20 72 65 74 75 72 6e 20 6f 66 66 73 65 74 57 69 64 74 68 20 6f 72 20 6f 66 66 73 65 74 48 65 69 67 68 74 20 75 6e 6c 65 73 73 20 69 74 27 73 20 69 6e 20 74 68 65 20 62 6f 64 79 20 65 6c 65 6d 65 6e 74 2c 20 73 6f 20 77 65 20 66 61 6b 65 20 69 74 2e 0a 20 20 20 20 20 20 20 20 Data Ascii: lement('div'), // After page load injecting a fake body doesn't work so check if body exists body = document.body, // IE6 and 7 won't return offsetWidth or offsetHeight unless it's in the body element, so we fake it.
2025-06-10 17:25:59 UTC	947	OUT	GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1 host: training.knowbe4.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:25:59 UTC	1460	IN	HTTP/1.1 200 OK content-type: text/javascript content-length: 3205083 date: Tue, 10 Jun 2025 17:25:59 GMT last-modified: Thu, 23 May 2024 17:09:54 GMT etag: "f1232635b40cbfae664ca09ba03fc9c3" x-amz-server-side-encryption: AES256 x-amz-version-id: MxTxI9TWeFRUpLQRLfZiUis0G3owgsQP accept-ranges: bytes server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.knowbe4.com https://.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.co [TRUNCATED]
2025-06-10 17:25:59 UTC	900	OUT	GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1 host: training.knowbe4.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:25:59 UTC	1460	IN	HTTP/1.1 200 OK content-type: text/html content-length: 1762 last-modified: Tue, 10 Jun 2025 16:32:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: fWHY1yrnHhjRBlypxOvJnnErIQkzbJdA accept-ranges: bytes server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.knowbe4.com https://.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.co [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49721	104.18.0.22	443	2932	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:25:59 UTC	845	OUT	GET /petite-vue HTTP/1.1 host: unpkg.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 accept-encoding: identity accept-language: en-US,en;q=0.9
2025-06-10 17:25:59 UTC	506	IN	HTTP/1.1 302 Found date: Tue, 10 Jun 2025 17:25:59 GMT content-type: text/plain;charset=UTF-8 content-length: 56 location: /petite-vue@0.4.1/dist/petite-vue.iife.js access-control-allow-origin: * cache-control: public, max-age=60, s-maxage=300 cross-origin-resource-policy: cross-origin vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 94da92397b160fa1-EWR alt-svc: h3=":443"; ma=86400
2025-06-10 17:25:59 UTC	56	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 70 65 74 69 74 65 2d 76 75 65 40 30 2e 34 2e 31 2f 64 69 73 74 2f 70 65 74 69 74 65 2d 76 75 65 2e 69 69 66 65 2e 6a 73 Data Ascii: Redirecting to /petite-vue@0.4.1/dist/petite-vue.iife.js
2025-06-10 17:26:00 UTC	875	OUT	GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1 host: unpkg.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://secured-login.net/pages/c3955b1c48a/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09 accept-encoding: identity accept-language: en-US,en;q=0.9
2025-06-10 17:26:00 UTC	860	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:26:00 GMT content-type: text/javascript; charset=utf-8 content-length: 16901 cf-ray: 94da923a5bf10fa1-EWR cf-cache-status: HIT accept-ranges: bytes access-control-allow-origin: * age: 1646716 cache-control: public, max-age=31536000 expires: Wed, 10 Jun 2026 17:26:00 GMT last-modified: Tue, 29 Apr 2025 17:16:52 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding via: 1.1 fly.io, 1.1 fly.io access-control-allow-headers: * access-control-allow-methods: GET, HEAD, OPTIONS access-control-expose-headers: * content-digest: sha256=:d0u46IsJk2JGpX8N/tiKN1JYqCNbiTVhyWiAQR2rxNU=: cross-origin-resource-policy: cross-origin fly-request-id: 01JT18T0QQ88XA4N9S83WZCF90-ord x-content-type-options: nosniff server: cloudflare alt-svc: h3=":443"; ma=86400
2025-06-10 17:26:00 UTC	1460	IN	Data Raw: 76 61 72 20 70 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 68 6e 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 70 6e 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 2c 43 3d 28 65 2c 74 2c 6e 29 3d 3e 28 68 6e 28 65 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 74 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 2c 50 65 74 69 74 65 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 61 28 65 29 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 Data Ascii: var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length
2025-06-10 17:26:00 UTC	1460	IN	Data Raw: 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 65 3d 3e 76 2e 63 61 6c 6c 28 65 29 2c 62 3d 65 3d 3e 64 28 65 29 26 26 22 4e 61 4e 22 21 3d 3d 65 26 26 22 2d 22 21 3d 3d 65 5b 30 5d 26 26 22 22 2b 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3d 3d 3d 65 2c 78 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 6e 3d 3e 74 5b 6e 5d 7c 7c 28 74 5b 6e 5d 3d 65 28 6e 29 29 7d 2c 5f 3d 2f 2d 28 5c 77 29 2f 67 2c 77 3d 78 28 28 65 3d 3e 65 2e 72 65 70 6c 61 63 65 28 5f 2c 28 28 65 2c 74 29 3d 3e 74 3f 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 22 29 29 29 29 2c 24 3d 2f 5c 42 28 5b 41 2d 5a 5d 29 2f 67 2c 6b 3d 78 28 28 65 3d 3e 65 2e 72 65 70 6c 61 63 Data Ascii: Object.prototype.toString,y=e=>v.call(e),b=e=>d(e)&&"NaN"!==e&&"-"!==e[0]&&""+parseInt(e,10)===e,x=e=>{const t=Object.create(null);return n=>t[n]\|\|(t[n]=e(n))},_=/-(\w)/g,w=x((e=>e.replace(_,((e,t)=>t?t.toUpperCase():"")))),$=/\B([A-Z])/g,k=x((e=>e.replac
2025-06-10 17:26:00 UTC	1460	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 21 31 3b 52 3c 3d 33 30 3f 41 28 65 29 7c 7c 28 65 2e 6e 7c 3d 4e 2c 6e 3d 21 6a 28 65 29 29 3a 6e 3d 21 65 2e 68 61 73 28 4d 29 2c 6e 26 26 28 65 2e 61 64 64 28 4d 29 2c 4d 2e 64 65 70 73 2e 70 75 73 68 28 65 29 29 7d 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 2c 6e 2c 73 2c 72 2c 69 29 7b 63 6f 6e 73 74 20 6f 3d 50 2e 67 65 74 28 65 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 3b 6c 65 74 20 63 3d 5b 5d 3b 69 66 28 22 63 6c 65 61 72 22 3d 3d 3d 74 29 63 3d 5b 2e 2e 2e 6f 2e 76 61 6c 75 65 73 28 29 5d 3b 65 6c 73 65 20 69 66 28 22 6c 65 6e 67 74 68 22 3d 3d 3d 6e 26 26 61 28 65 29 29 6f 2e 66 6f 72 45 61 63 68 28 28 28 65 2c 74 29 3d 3e 7b 28 22 6c 65 6e 67 74 68 22 3d 3d 3d 74 7c 7c 74 3e 3d 73 Data Ascii: ction(e,t){let n=!1;R<=30?A(e)\|\|(e.n\|=N,n=!j(e)):n=!e.has(M),n&&(e.add(M),M.deps.push(e))}(r)}function J(e,t,n,s,r,i){const o=P.get(e);if(!o)return;let c=[];if("clear"===t)c=[...o.values()];else if("length"===n&&a(e))o.forEach(((e,t)=>{("length"===t\|\|t>=s
2025-06-10 17:26:00 UTC	1460	IN	Data Raw: 5f 76 5f 72 61 77 22 3d 3d 3d 73 26 26 72 3d 3d 3d 28 65 3f 74 3f 72 65 3a 73 65 3a 74 3f 6e 65 3a 74 65 29 2e 67 65 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 63 6f 6e 73 74 20 69 3d 61 28 6e 29 3b 69 66 28 21 65 26 26 69 26 26 75 28 51 2c 73 29 29 72 65 74 75 72 6e 20 52 65 66 6c 65 63 74 2e 67 65 74 28 51 2c 73 2c 72 29 3b 63 6f 6e 73 74 20 6f 3d 52 65 66 6c 65 63 74 2e 67 65 74 28 6e 2c 73 2c 72 29 3b 72 65 74 75 72 6e 28 6d 28 73 29 3f 44 2e 68 61 73 28 73 29 3a 71 28 73 29 29 7c 7c 28 65 7c 7c 48 28 6e 2c 30 2c 73 29 2c 74 29 3f 6f 3a 66 65 28 6f 29 3f 69 26 26 62 28 73 29 3f 6f 3a 6f 2e 76 61 6c 75 65 3a 67 28 6f 29 3f 65 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 65 28 65 2c 21 30 2c 65 65 2c 6e 75 6c 6c 2c 73 65 29 7d 28 6f 29 Data Ascii: _v_raw"===s&&r===(e?t?re:se:t?ne:te).get(n))return n;const i=a(n);if(!e&&i&&u(Q,s))return Reflect.get(Q,s,r);const o=Reflect.get(n,s,r);return(m(s)?D.has(s):q(s))\|\|(e\|\|H(n,0,s),t)?o:fe(o)?i&&b(s)?o:o.value:g(o)?e?function(e){return ce(e,!0,ee,null,se)}(o)
2025-06-10 17:26:00 UTC	1460	IN	Data Raw: 63 29 2c 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 26 26 65 2e 5f 5f 76 5f 72 61 77 3b 72 65 74 75 72 6e 20 74 3f 6c 65 28 74 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 21 30 3d 3d 3d 65 2e 5f 5f 76 5f 69 73 52 65 66 29 7d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 6c 65 74 20 75 65 3d 21 31 3b 63 6f 6e 73 74 20 61 65 3d 5b 5d 2c 70 65 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2c 68 65 3d 65 3d 3e 70 65 2e 74 68 65 6e 28 65 29 2c 64 65 3d 65 3d 3e 7b 61 65 2e 69 6e 63 6c 75 64 65 73 28 65 29 7c 7c 61 65 2e 70 75 73 68 28 65 29 2c 75 65 7c 7c 28 75 65 3d 21 30 2c 68 65 28 6d 65 29 29 7d 2c 6d 65 3d 28 29 3d 3e 7b 66 6f 72 28 63 6f Data Ascii: c),c}function le(e){const t=e&&e.__v_raw;return t?le(t):e}function fe(e){return Boolean(e&&!0===e.__v_isRef)}Promise.resolve();let ue=!1;const ae=[],pe=Promise.resolve(),he=e=>pe.then(e),de=e=>{ae.includes(e)\|\|ae.push(e),ue\|\|(ue=!0,he(me))},me=()=>{for(co
2025-06-10 17:26:00 UTC	1460	IN	Data Raw: 29 2a 24 2f 2c 6b 65 3d 5b 22 63 74 72 6c 22 2c 22 73 68 69 66 74 22 2c 22 61 6c 74 22 2c 22 6d 65 74 61 22 5d 2c 4f 65 3d 7b 73 74 6f 70 3a 65 3d 3e 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 70 72 65 76 65 6e 74 3a 65 3d 3e 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 73 65 6c 66 3a 65 3d 3e 65 2e 74 61 72 67 65 74 21 3d 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 63 74 72 6c 3a 65 3d 3e 21 65 2e 63 74 72 6c 4b 65 79 2c 73 68 69 66 74 3a 65 3d 3e 21 65 2e 73 68 69 66 74 4b 65 79 2c 61 6c 74 3a 65 3d 3e 21 65 2e 61 6c 74 4b 65 79 2c 6d 65 74 61 3a 65 3d 3e 21 65 2e 6d 65 74 61 4b 65 79 2c 6c 65 66 74 3a 65 3d 3e 22 62 75 74 74 6f 6e 22 69 6e 20 65 26 26 30 21 3d 3d 65 2e 62 75 74 74 6f 6e 2c 6d 69 64 64 6c 65 3a 65 3d Data Ascii: )*$/,ke=["ctrl","shift","alt","meta"],Oe={stop:e=>e.stopPropagation(),prevent:e=>e.preventDefault(),self:e=>e.target!==e.currentTarget,ctrl:e=>!e.ctrlKey,shift:e=>!e.shiftKey,alt:e=>!e.altKey,meta:e=>!e.metaKey,left:e=>"button"in e&&0!==e.button,middle:e=
2025-06-10 17:26:00 UTC	1460	IN	Data Raw: 7d 2c 57 65 3d 7b 62 69 6e 64 3a 76 65 2c 6f 6e 3a 53 65 2c 73 68 6f 77 3a 28 7b 65 6c 3a 65 2c 67 65 74 3a 74 2c 65 66 66 65 63 74 3a 6e 7d 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3b 6e 28 28 28 29 3d 3e 7b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 74 28 29 3f 73 3a 22 6e 6f 6e 65 22 7d 29 29 7d 2c 74 65 78 74 3a 45 65 2c 68 74 6d 6c 3a 28 7b 65 6c 3a 65 2c 67 65 74 3a 74 2c 65 66 66 65 63 74 3a 6e 7d 29 3d 3e 7b 6e 28 28 28 29 3d 3e 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 28 29 7d 29 29 7d 2c 6d 6f 64 65 6c 3a 28 7b 65 6c 3a 65 2c 65 78 70 3a 74 2c 67 65 74 3a 6e 2c 65 66 66 65 63 74 3a 73 2c 6d 6f 64 69 66 69 65 72 73 3a 72 7d 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 65 2e 74 79 70 65 2c 6c 3d 6e 28 60 28 76 Data Ascii: },We={bind:ve,on:Se,show:({el:e,get:t,effect:n})=>{const s=e.style.display;n((()=>{e.style.display=t()?s:"none"}))},text:Ee,html:({el:e,get:t,effect:n})=>{n((()=>{e.innerHTML=t()}))},model:({el:e,exp:t,get:n,effect:s,modifiers:r})=>{const i=e.type,l=n(`(v
2025-06-10 17:26:00 UTC	1460	IN	Data Raw: 65 6d 65 6e 74 3d 3d 3d 65 26 26 74 28 73 29 3d 3d 3d 72 7c 7c 73 21 3d 3d 72 26 26 28 65 2e 76 61 6c 75 65 3d 72 29 7d 29 29 7d 7d 2c 65 66 66 65 63 74 3a 28 7b 65 6c 3a 65 2c 63 74 78 3a 74 2c 65 78 70 3a 6e 2c 65 66 66 65 63 74 3a 73 7d 29 3d 3e 7b 68 65 28 28 28 29 3d 3e 73 28 28 28 29 3d 3e 42 65 28 74 2e 73 63 6f 70 65 2c 6e 2c 65 29 29 29 29 29 7d 7d 2c 49 65 3d 2f 28 5b 5c 73 5c 53 5d 2a 3f 29 5c 73 2b 28 3f 3a 69 6e 7c 6f 66 29 5c 73 2b 28 5b 5c 73 5c 53 5d 2a 29 2f 2c 4b 65 3d 2f 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 28 3f 3a 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 29 3f 24 2f 2c 56 65 3d 2f 5e 5c 28 7c 5c 29 24 2f 67 2c 46 65 3d 2f 5e 5b 7b 5b 5d 5c 73 2a 28 28 3f 3a 5b 5c 77 5f 24 5d 2b 5c 73 2a 2c 3f 5c 73 2a 29 2b 29 5b 5c 5d 7d 5d 24 2f 2c 7a 65 Data Ascii: ement===e&&t(s)===r\|\|s!==r&&(e.value=r)}))}},effect:({el:e,ctx:t,exp:n,effect:s})=>{he((()=>s((()=>Be(t.scope,n,e)))))}},Ie=/([\s\S]?)\s+(?:in\|of)\s+([\s\S])/,Ke=/,([^,\}\]])(?:,([^,\}\]]))?$/,Ve=/^$\|$$/g,Fe=/^[{[]\s((?:[\w_$]+\s,?\s*)+)[\]}]$/,ze
2025-06-10 17:26:00 UTC	1460	IN	Data Raw: 6f 29 3a 28 66 3d 79 5b 6c 5d 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 66 2e 63 74 78 2e 73 63 6f 70 65 2c 63 2e 73 63 6f 70 65 29 2c 6c 21 3d 3d 72 26 26 28 79 5b 6c 2b 31 5d 21 3d 3d 6e 7c 7c 73 3d 3d 3d 6e 29 26 26 28 73 3d 66 2c 66 2e 69 6e 73 65 72 74 28 69 2c 6e 3f 6e 2e 65 6c 3a 6f 29 29 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 3d 66 29 7d 79 3d 65 7d 65 6c 73 65 20 79 3d 62 2e 6d 61 70 28 28 65 3d 3e 24 28 65 2c 6f 29 29 29 2c 5f 3d 21 30 7d 29 29 2c 72 7d 2c 48 65 3d 28 7b 65 6c 3a 65 2c 63 74 78 3a 7b 73 63 6f 70 65 3a 7b 24 72 65 66 73 3a 74 7d 7d 2c 67 65 74 3a 6e 2c 65 66 66 65 63 74 3a 73 7d 29 3d 3e 7b 6c 65 74 20 72 3b 72 65 74 75 72 6e 20 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 74 5b 73 5d 3d 65 2c 72 26 26 73 21 3d Data Ascii: o):(f=y[l],Object.assign(f.ctx.scope,c.scope),l!==r&&(y[l+1]!==n\|\|s===n)&&(s=f,f.insert(i,n?n.el:o))),e.unshift(n=f)}y=e}else y=b.map((e=>$(e,o))),_=!0})),r},He=({el:e,ctx:{scope:{$refs:t}},get:n,effect:s})=>{let r;return s((()=>{const s=n();t[s]=e,r&&s!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49724	54.156.51.235	443	2932	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:26:00 UTC	371	OUT	GET /favicon.ico HTTP/1.1 host: secured-login.net user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:26:00 UTC	234	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:26:00 GMT content-type: image/vnd.microsoft.icon content-length: 0 last-modified: Tue, 10 Jun 2025 14:18:37 GMT strict-transport-security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49723	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:26:01 UTC	309	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=X8RFSd9WVcxetbY&MD=zgW3LcFa HTTP/1.1 host: slscr.update.microsoft.com accept: / user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 accept-encoding: identity
2025-06-10 17:26:01 UTC	558	IN	HTTP/1.1 200 OK content-type: application/octet-stream date: Tue, 10 Jun 2025 17:26:00 GMT cache-control: no-cache etag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" expires: -1 last-modified: Mon, 01 Jan 0001 00:00:00 GMT pragma: no-cache content-length: 24490 slsversion: 2.0 ms-correlationid: 07e95902-138f-4625-90e1-67ec1410d168 ms-requestid: e6769c97-2224-4ede-85bf-a2c34a31e1b7 ms-cv: fhD7qjaozU2el62E.0 x-content-type-options: nosniff x-microsoft-slsclientcache: 2880 content-disposition: attachment; filename=environment.cab
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: c7 c3 8f 06 b6 24 05 3c f9 2c cb e0 99 86 1a f8 03 ca b3 04 d8 16 f0 f9 32 7f 28 14 e1 08 d8 03 b6 5f ca 00 2c ca e8 4f 1f 06 4e 31 f0 2f 3c 0e 0b 50 12 26 c4 00 85 7e 42 c0 00 c8 0f fa 0d c7 c3 a0 90 23 e5 21 63 33 1e a7 e6 2a f9 c3 ee 4b 69 ce 94 9b 68 c7 7b df ba c7 eb c3 55 b3 50 05 c8 b4 a7 ea a2 5e 5e cd 3a a2 aa 75 43 4b 97 f4 bd 25 ec 55 81 8f 48 6a d4 2b fb 61 52 86 d0 3b 01 14 b0 69 f4 31 7a b6 35 59 f1 51 9b 07 06 22 e9 3b 54 1f 1c 09 53 6c 08 99 9d 74 59 32 ad 33 42 5a f5 2c 05 bf b7 e9 cf 8f 5d 2c 89 c9 8a 5f 6c 65 4c 0c 6d 6a 3f 83 6c b8 bf a3 10 39 92 ad fd bc d8 94 f7 ca 6b ef 90 4b eb 87 76 34 1d 50 f6 0b 7d 4a 62 19 4b 92 ae d4 3f 79 3c 37 e1 2d 6c bc f7 fc 95 94 bd 9c f5 56 86 da 39 b9 b3 67 4c 1a 17 d4 27 59 97 fa bb 03 e7 1b 32 9c 5f Data Ascii: $<,2(_,ON1/<P&~B#!c3*Kih{UP^^:uCK%UHj+aR;i1z5YQ";TSltY23BZ,],_leLmj?l9kKv4P}JbK?y<7-lV9gL'Y2_
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: 99 5f f0 57 d3 49 7b b2 e4 e5 c0 9e f2 e2 b5 17 92 26 2b c1 a3 c2 60 60 5d 36 2c de 60 61 ea e8 98 df 55 7a a8 91 e4 a9 84 e0 3b 6e 95 89 91 fc a7 0f 95 af 35 36 d1 a7 99 9e 88 5e 1c 90 6f 76 55 35 c9 a6 7b 9c 57 31 1c 7d 98 8c a5 d0 5c 66 01 23 08 79 a0 ac fd 28 e3 66 c4 5d bc 06 ed c2 ac 2e 85 85 1d 2c f9 63 f9 ae 62 0a e0 dc fd 65 e4 07 da 27 83 27 db 54 2f 30 4f ab 57 35 d0 e3 25 bc 3a 8a 0f 18 ab 06 65 1d c3 c6 d7 dc 20 e5 92 42 df 59 3a dd 99 b4 1e 33 04 f5 9c 31 69 0f ec 13 9b b8 7c 93 51 3a 5b 90 33 78 d9 c2 f9 a0 e5 54 1d b7 41 12 7c ea 48 f9 8b 32 9d cb 22 59 19 02 65 dd 61 fc 1e b6 2d 6d 85 1b 49 c9 9e 9d a6 e3 15 82 bd e8 4e 07 0a 96 41 09 6c 7a 91 fe 23 c6 ec 81 c3 34 b3 bc bd 6d 1b a2 f9 9d 9a 55 ad 27 0b b3 da 0d 82 7c 98 8d 2d 3b d6 c6 13 Data Ascii: _WI{&+``]6,`aUz;n56^ovU5{W1}\f#y(f].,cbe''T/0OW5%:e BY:31i\|Q:[3xTA\|H2"Yea-mINAlz#4mU'\|-;
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: 2d 5f d0 00 d0 07 f4 72 f6 e6 e8 44 69 fd 25 5f 10 dc 3f 70 f7 40 41 25 f8 69 80 38 20 27 0e a0 36 fd 40 ab 6d 7e e0 7e 60 1f a0 bb cd 0f 54 fd d7 fc c0 df e9 fb c7 c8 07 c3 96 47 48 09 90 7f f5 08 49 7f e5 05 82 72 c3 a4 de 98 91 55 c3 ea 10 ce a3 13 c3 f7 12 97 f6 c4 ce d7 c2 d9 28 f3 83 ce ec 99 14 4b d4 be 03 9e 48 26 e8 06 e4 1c e3 a4 41 09 dd e2 d3 84 db 86 e8 d2 f6 fb 0d f2 bb 63 cb fd 6b 48 cc 83 a9 85 16 0a 62 17 34 a2 dc b2 5c 8e 5a 11 11 25 46 bc 99 aa 15 3b c9 46 0f 5f 5e b9 9a fd a8 03 36 50 d9 0b 10 d7 86 2a ed 8c d3 6e 1f ed e9 f0 96 84 f7 3b dc 1d 9e 09 6e c5 df da 17 74 23 13 af d2 ac 85 dd 4d 74 ea 15 fd 52 cf 64 7f b7 fa f3 19 03 d1 3c 1d f9 9e 49 c6 ae 97 08 66 b1 ba 94 91 c7 2a c7 ee c7 ef 55 45 e4 5e a7 ed 2e 5d 46 59 44 0d 4b 8d 93 Data Ascii: -_rDi%_?p@A%i8 '6@m~~`TGHIrU(KH&AckHb4\Z%F;F_^6Pn;nt#MtRd<IfUE^.]FYDK
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: f4 d2 5b 0d c4 46 f4 08 0d 64 b7 dd 0e 23 c4 4a be c6 2c 08 e4 15 96 43 0e 90 12 6e 83 93 e4 22 73 bf 9c 43 a3 72 7e 18 32 1c 87 83 10 55 1d 3d 13 70 78 a0 df ea 3e bc 8f 9c f3 c9 cd b2 63 9f 56 68 27 2f ce f2 f7 d1 be 1e 37 ef db 07 4d 38 19 d3 72 07 4b 21 bd e4 5a 22 2f df 9c d9 42 cd 28 ce 46 7d 02 5e c0 3a 7d 59 8f ba 2b d9 8a 6a ee ee 00 2f 1d b9 28 fd 40 78 e3 bc e0 27 36 dd fd 43 d9 6a 3e 0d 73 ca 91 ee 0f 3d a6 1a b5 25 8c d1 15 8a d7 f8 93 2e 54 ac df 56 e1 7f ed 19 54 17 27 34 90 14 e3 70 8c 6c 7f ff 7e 4f 51 14 1e 4e 05 72 47 b2 4d 89 4e f9 67 77 f4 77 a9 eb f6 50 12 1e aa 0b b0 6d 8f 25 51 7d 17 52 f8 55 b8 68 f5 90 ab 07 5f 36 1f f1 e4 1e e5 fb f3 73 97 9a e6 1d ab bb ee b9 59 5a f2 3c e8 6d 9f be 51 7b 02 c0 7d d8 d6 01 4c 12 85 7b 05 e0 5e Data Ascii: [Fd#J,Cn"sCr~2U=px>cVh'/7M8rK!Z"/B(F}^:}Y+j/(@x'6Cj>s=%.TVT'4pl~OQNrGMNgwwPm%Q}RUh_6sYZ<mQ{}L{^
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: 17 7a 50 e3 3d 37 50 78 c6 9b 00 9e b1 6c 93 1f 64 fc 47 28 e5 6f 7b 2c 3f 66 9c 1b c0 91 91 7f f1 eb 59 11 28 38 61 06 ff bf 92 d0 14 5f 4d 0f e8 d9 e9 00 5a 30 6e 48 2f 23 03 13 4d 57 f0 f8 e5 8d 51 9b 88 0d f9 1d 57 58 98 cf e8 0b 8c f6 eb 9c da ff e4 4a 13 15 29 0c 69 75 94 79 e3 95 50 e5 48 e0 90 99 54 fe c5 90 26 13 97 27 85 89 ed 99 b4 32 69 b3 23 07 e3 9e fb e7 e2 e9 27 ff d9 3c 6e 78 48 c3 3d 4c b0 78 83 47 97 43 99 4b fa 65 6a 2b a5 20 16 23 d3 dd e2 46 1d 6b 79 16 e2 7b e7 3e e7 71 eb 7f c8 e3 4a 49 a0 64 7e e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 ff ab f3 b8 5d a3 0e 92 5e 1d d9 33 07 9d b4 5a 5b 1f 36 94 07 fb 31 44 46 72 24 1d af 77 ba 94 e6 6b df 96 Data Ascii: zP=7PxldG(o{,?fY(8a_MZ0nH/#MWQWXJ)iuyPHT&'2i#'<nxH=LxGCKej+ #Fky{>qJId~qqqqqqqqqqqqqqq]^3Z[61DFr$wk
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: 72 61 74 69 6f 6e 73 20 50 75 65 72 74 6f 20 52 69 63 6f 31 16 30 14 06 03 55 04 05 13 0d 32 33 30 38 32 39 2b 34 35 34 32 33 37 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ad 94 76 8f 83 ad 0e 03 a3 e8 3b b0 d7 34 68 d4 79 3a 7d dc 30 60 06 03 55 1d 1f 04 59 30 57 30 55 a0 53 a0 51 86 4f 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 72 6c 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 55 70 64 61 74 65 25 32 30 53 69 67 6e 69 6e 67 25 32 30 43 41 25 32 30 32 2e 31 2e 63 72 6c 30 6d 06 08 2b 06 01 05 05 07 01 01 04 61 30 5f 30 5d 06 08 2b 06 01 05 05 07 30 02 86 51 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 65 72 74 73 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 55 Data Ascii: rations Puerto Rico10U230829+4542370U#0v;4hy:}0`UY0W0USQOhttp://www.microsoft.com/pkiops/crl/Microsoft%20Update%20Signing%20CA%202.1.crl0m+a0_0]+0Qhttp://www.microsoft.com/pkiops/certs/Microsoft%20U
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: 6c d5 21 c9 b8 50 68 05 c3 e4 09 c9 bd 51 c9 5f 6d 75 4f 8d 35 30 c5 8c c1 83 b2 1f 93 b5 72 6f d2 44 90 1d ed 7f 13 a9 7d 53 24 9c aa 46 c0 8f c5 c5 be bf c8 55 14 fe 87 35 fe cd d5 7e 02 d2 87 68 00 c9 b8 d7 44 cb 71 db a4 8b b3 e0 0e a6 0b ce 12 7d f6 68 dc c0 91 31 f8 59 2c 2c f5 d5 d1 2e 08 9d 2b 30 6a 6e aa ad 9e 16 4e 27 d0 ba 3b 1a 81 30 43 38 92 87 e1 6c 6f 43 3d 2d 4e 1f 0d 10 c1 f8 fa bc 84 c8 93 c3 9e 47 fc b6 fa d1 2f b6 af 39 3e 9c 3f 1c f1 4d a4 16 d3 0a e2 e7 4e f5 37 88 03 46 8e 1e cc 77 c1 47 d3 44 b7 e4 35 23 db eb 20 cb 2a f5 57 ae 2e 00 3b 6b e6 a3 6e 05 99 70 bb 76 3b d8 3c b4 76 f6 28 15 3a 25 d4 26 a4 08 9f d9 7e 7b 44 8a b7 15 8a c6 c5 78 2a 9d 32 c4 83 7b b9 6e 42 14 99 5d 49 7f 45 99 57 a7 33 77 44 1a ff 47 a3 71 b7 b0 b1 56 8a Data Ascii: l!PhQ_muO50roD}S$FU5~hDq}h1Y,,.+0jnN';0C8loC=-NG/9>?MN7FwGD5# W.;knpv;<v(:%&~{Dx2{nB]IEW3wDGqV
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: 42 06 0a 2b 06 01 04 01 82 37 02 01 0c 31 34 30 32 a0 14 80 12 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 a1 1a 80 18 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 04 82 01 00 3d cd 0e 0a 7b 43 82 69 14 76 9b c2 1b 25 6c 3f 01 d0 b8 bb 6f e9 4d 62 55 f3 7a 5b c4 05 04 2e 09 48 41 fd e9 13 24 1e f0 71 f0 79 9e 8e a7 ea d7 72 49 9f 71 e8 41 4c 0a 8e 69 71 3c 8f e9 56 c5 9d a0 e6 3c df 48 88 1c cf 7f eb a0 34 f3 ff 37 ca 6d 9f c7 86 eb 12 35 0a 45 a5 81 a8 f8 53 6d c6 11 4e ef 37 77 2a 73 bf 08 f9 ee ba 8d b8 48 1a 93 32 44 3a cd 7c 41 2d e3 20 7e 34 a2 7c 2b 93 92 2f 0a 5f 17 c8 65 98 79 74 bb e7 1c 1a e2 6c a4 15 db cf ae 5b 18 f9 9a 82 ab 98 f5 13 93 f3 0f 89 71 a4 2f c0 7e Data Ascii: B+71402Microsofthttp://www.microsoft.com0H={Civ%l?oMbUz[.HA$qyrIqALiq<V<H47m5ESmN7wsH2D:\|A- ~4\|+/_eytl[q/~
2025-06-10 17:26:01 UTC	1460	IN	Data Raw: a3 82 01 1b 30 82 01 17 30 1d 06 03 55 1d 0e 04 16 04 14 ec 97 76 68 29 fe 13 4f cd 74 c6 25 18 f2 00 7c da 7d d7 a7 30 1f 06 03 55 1d 23 04 18 30 16 80 14 d5 63 3a 5c 8a 31 90 f3 43 7b 7c 46 1b c5 33 68 5a 85 6d 55 30 56 06 03 55 1d 1f 04 4f 30 4d 30 4b a0 49 a0 47 86 45 68 74 74 70 3a 2f 2f 63 72 6c 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 2f 63 72 6c 2f 70 72 6f 64 75 63 74 73 2f 4d 69 63 54 69 6d 53 74 61 50 43 41 5f 32 30 31 30 2d 30 37 2d 30 31 2e 63 72 6c 30 5a 06 08 2b 06 01 05 05 07 01 01 04 4e 30 4c 30 4a 06 08 2b 06 01 05 05 07 30 02 86 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 2f 63 65 72 74 73 2f 4d 69 63 54 69 6d 53 74 61 50 43 41 5f 32 30 31 30 2d 30 37 2d 30 31 2e 63 72 74 30 0c 06 Data Ascii: 00Uvh)Ot%\|}0U#0c:\1C{\|F3hZmU0VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49727	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:26:38 UTC	309	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=X8RFSd9WVcxetbY&MD=zgW3LcFa HTTP/1.1 host: slscr.update.microsoft.com accept: / user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 accept-encoding: identity
2025-06-10 17:26:38 UTC	558	IN	HTTP/1.1 200 OK content-type: application/octet-stream date: Tue, 10 Jun 2025 17:26:38 GMT cache-control: no-cache etag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" expires: -1 last-modified: Mon, 01 Jan 0001 00:00:00 GMT pragma: no-cache content-length: 30005 slsversion: 2.0 ms-correlationid: 22363394-3f6b-4cc8-935b-af809dc567c6 ms-requestid: 83829af9-4516-4299-97dc-d6fe373afc92 ms-cv: Ej62d2iTIUix5JOY.0 x-content-type-options: nosniff x-microsoft-slsclientcache: 1440 content-disposition: attachment; filename=environment.cab
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: 25 dc 93 6a 9f d2 e0 c1 ea a0 79 31 c4 ab 34 9c e1 43 a8 b3 7e 55 3a 43 6e 5b 8c bc 1c ac b5 c5 db f6 d5 6b 9a 98 b7 61 91 ec 20 ed 8b 6b 6b 17 65 25 d4 6a aa b6 ca 84 bd 36 98 48 0e 5e cd 7c b0 80 4f 8a 29 1a bd 79 0a 95 15 94 2c 8d 46 d3 90 66 2a a1 20 71 50 9b 63 14 ba 66 53 25 93 57 c9 de 70 e3 0a f9 95 e5 f6 30 46 8b 99 e7 52 08 31 34 2a fb 7b 19 1f 7d d2 b0 1d 12 db 90 d7 13 2b 94 d3 2c 24 3c da 5c c7 eb 72 6a b9 b9 58 16 5c 90 d7 e5 cd 92 95 32 0d 6b cf 04 8d 4e 78 08 6b 05 10 2b 3f 35 f1 9b 05 cf 25 b3 f8 b8 80 45 47 a6 3f 98 fb 9d 6d bb 59 60 bf 35 2a 6a 71 da 05 32 46 9c 40 06 81 a2 d0 24 13 09 4e 44 ad c8 6d e0 34 6a 19 a9 18 60 e4 00 e9 b7 1d ae 08 07 c3 31 50 c7 68 68 e8 50 28 40 75 d8 01 17 46 0a 23 66 bd 70 60 ba 6d fe d2 9a c3 39 9c fb a0 Data Ascii: %jy14C~U:Cn[ka kke%j6H^\|O)y,Ff* qPcfS%Wp0FR14{}+,$<\rjX\2kNxk+?5%EG?mY`5jq2F@$NDm4j`1PhhP(@uF#fp`m9
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: 88 13 d2 ca b4 06 b4 39 d4 f9 dc 75 86 ec f8 71 28 61 7c 4c c7 63 c8 ea 15 e7 75 7d 6d 29 70 2a 71 c0 e4 ec e9 97 37 59 2c ef da 63 ae b1 f3 e5 0b 3b cf df 39 d7 39 fa 82 03 6e ce 5d df 9a 7e b1 21 8c f5 e5 b9 a1 86 fb 42 cd 8f 80 65 85 b7 9b da 6d 66 ca ea e3 34 46 3b 0d 3a b7 43 5e 3d 7a 57 67 f5 fc 5c 06 83 b4 c2 d8 63 75 21 29 ed dd c1 86 8d 5d 43 f3 49 fd 3d 76 02 f5 6a 5c 57 4b 0c 0f 16 4c dc ae 2c 6b d6 f7 77 f2 a8 5d 45 e3 67 7b 15 83 04 9a 73 32 62 e8 67 d8 7e c1 4c 27 14 66 da 01 f8 70 cc af 50 49 02 86 a1 cc 11 74 0c 24 7f 15 ad 28 be 9d 40 0c 81 9d a0 c6 02 69 80 3c 40 a6 20 29 90 04 80 7d 78 26 1e ec 70 98 20 80 f0 1b 08 60 00 70 d4 d7 e1 d0 c7 a1 d0 95 43 18 82 b8 25 55 45 8c a6 3c b1 98 db 86 78 7d 26 94 17 d0 3b 82 42 0d 40 0d 50 49 53 4a Data Ascii: 9uq(a\|Lcu}m)p*q7Y,c;99n]~!Bemf4F;:C^=zWg\cu!)]CI=vj\WKL,kw]Eg{s2bg~L'fpPIt$(@i<@ )}x&p `pC%UE<x}&;B@PISJ
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: 9e 4c 48 88 5f 1b 99 a2 79 07 02 1f 96 7e 0e 91 7d ff 94 85 f8 7a 67 50 22 aa 5f 9d b1 ea a1 e7 40 3d e0 af d4 09 80 e0 46 08 01 02 dc 7c 87 51 31 df 61 b4 fc b5 f8 5f f9 9c 7e 37 d4 2e 33 2b bb ab b5 2d 61 e9 d4 86 25 79 97 ff 9e 60 01 ae e6 85 4f 0d 70 27 cb 1c ca cd c6 bb 4c ee e3 f1 e7 bd 04 1a c4 ed 5f ae e6 74 15 34 ce df 79 d8 bc c2 5b 3a 92 70 aa 60 87 34 ac 37 4f 07 1b c3 55 5a 75 15 93 ac 8f 49 e2 e4 eb 89 76 36 16 f0 83 b7 d5 bb 9f 67 2f 58 2c 57 77 4a 51 b7 7d ea c5 74 6c 12 68 7c 96 77 f7 76 81 a8 ad 31 99 b2 9b a5 fe 82 2e a8 87 5d 00 c3 8c c5 2b de 55 90 4a db 4b 20 93 f0 89 59 6d 27 da 83 c9 06 97 5b cf e2 8c 3a da b1 f1 9f 15 df ae f8 48 9f 72 16 a2 76 86 7d ce 3a 98 57 9f df 1b d0 21 92 e5 7e 21 70 a6 89 08 f9 40 7b 4f 81 e4 ad 37 f1 88 Data Ascii: LH_y~}zgP"_@=F\|Q1a_~7.3+-a%y`Op'L_t4y[:p`47OUZuIv6g/X,WwJQ}tlh\|wv1.]+UJK Ym'[:Hrv}:W!~!p@{O7
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: ec 5b ba a1 ad f4 7e b4 36 22 6b 2a 3a ea b1 10 bb 5a d2 82 b3 0d ce 73 7e 0e e7 48 44 3b 1f 73 dd 54 69 30 7d cb f8 b3 28 bf 32 cd a8 91 6d 34 ad bb 0e d6 22 89 e7 eb 96 b3 8a bc 59 04 0a 5e bc 0b 94 99 3b ef f8 9c bb b7 31 08 30 50 61 9f 34 7d fc aa 6a 32 22 64 fa 76 01 58 be a6 de 25 8f 4c df ca 78 6c 2b 26 9a 9a 4a 74 8f a6 d3 ed aa 44 e2 79 8f 57 ad 97 78 47 09 43 fb f6 b2 69 ae fa ed 0e a6 c8 bc 2d 77 e5 1a be 7a c9 bf 7a 38 df 8f 7f 89 5f 71 93 cd f1 3e a1 da 7c 03 1a 34 f3 b5 5b 8e 92 80 7b dc 29 5e 24 de 2a fe 87 0a 59 f2 e5 dc f9 04 df 73 8a c3 c5 46 cd eb bd 03 6e a2 52 ca 4d 3c 42 8a 91 90 5a 49 6b 4e fc c5 eb 6a e7 27 5f d7 d9 92 eb 99 80 dd 9e 5b 65 18 f5 33 5f 86 4c f2 90 bb f6 e7 d2 ac 36 6f 13 62 f5 9b 39 9d 78 c6 6f 1e a6 9f 96 13 48 6b Data Ascii: [~6"k:Zs~HD;sTi0}(2m4"Y^;10Pa4}j2"dvX%Lxl+&JtDyWxGCi-wzz8_q>\|4[{)^$YsFnRM<BZIkNj'_[e3_L6ob9xoHk
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: e0 22 b7 3c 63 7a e6 a3 86 23 e7 30 2c a5 42 31 a2 ae 1d 00 01 77 ff 02 a6 f0 eb 0b 87 ba f9 f4 b0 9c 8b e6 cf 6e 16 c7 b8 4c f1 8c b4 47 9e 54 c6 be 45 47 91 4e 78 c0 25 c3 da 17 f4 70 5a ff 27 b0 83 21 21 a0 e4 ae fa e7 11 5b d1 a2 1b 58 46 ba 4f bb ee 07 59 6e f4 ab 0a 81 03 c1 db 6d e1 39 50 02 d9 13 3a ab 49 21 bc e7 4b f7 77 6a 95 6b 49 fb ce 2e 4c aa 8c 55 4e a9 ed f2 4b ba 33 65 99 89 da 5f 69 11 cd d0 da 26 9d ba bf 75 33 7c 68 ce 52 23 f7 6e bc 71 bd c0 f4 4c 0b 5d 99 f0 e8 ca 66 97 be 7a a9 35 72 a3 de 49 98 95 65 3a c9 e6 ee 0c cd 45 69 a7 49 e7 1e fb 4f 4f 15 f7 a3 06 9f 47 bd ab 57 ad de 78 c8 98 dc 16 dc f3 dc dc 55 83 32 68 7c fe e1 8e ea 62 90 73 ac a2 96 77 af 48 45 bf 78 17 b3 09 a7 a0 ca 83 66 1e 5a d1 e5 90 4f 7e a6 0b 01 21 3a 95 a5 Data Ascii: "<cz#0,B1wnLGTEGNx%pZ'!![XFOYnm9P:I!KwjkI.LUNK3e_i&u3\|hR#nqL]fz5rIe:EiIOOGWxU2h\|bswHExfZO~!:
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: 32 1b 0a 18 02 7a 78 07 ff b7 e4 2c d8 df 5c 0f 2a b6 bb 00 9c 87 d0 82 ba 63 31 84 2a c7 46 98 eb 69 7b ca ce 9c e6 4a 57 82 55 9d 16 93 e4 b5 57 d0 fa 9c 13 8a fb e0 26 aa cb 42 66 b1 8c b9 47 81 8f 78 e3 fb 48 3f d3 f1 e2 b2 3b da 37 b9 e7 72 09 2f 28 74 c5 3e 08 59 00 a5 23 c9 e2 00 24 d9 ad 9f 24 21 fe a8 3a df 1f 25 21 0e a8 2a 9b 7f 22 09 51 ff 59 12 22 01 43 82 45 51 0d 42 bf 2f 09 89 de 9f 4c c9 db 61 c0 ef 3e d3 70 fe f1 53 0b 5c 79 ac ed 1b 14 3c 55 e6 4d a6 39 95 45 ed 70 7c 08 dc 92 bb c1 42 6b e0 27 49 08 37 a7 00 02 f1 4d 12 f2 3a 2b a0 03 08 78 f1 a7 6c c7 af 6c 11 f6 71 b6 48 c2 c1 c2 15 65 9e c7 e2 24 04 13 c0 70 d4 8d da 51 c3 da c6 c2 de fc 1b fb 24 28 0d 00 1c 00 9f 0c c0 21 2d c4 2b f0 af 6b 41 16 01 24 3a 0d 80 44 c3 38 a6 05 59 7f Data Ascii: 2zx,\c1Fi{JWUW&BfGxH?;7r/(t>Y#$$!:%!*"QY"CEQB/La>pS\y<UM9Ep\|Bk'I7M:+xllqHe$pQ$(!-+kA$:D8Y
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: 7c 24 f8 a0 ce fd 7a 40 64 78 d4 ba d0 e2 f2 bf a4 fc f8 e2 50 c0 60 d0 a5 93 cd 3c de 94 69 0f 58 bd 36 18 c4 18 88 b1 82 8a 48 29 e9 2a 82 cf 65 09 86 26 8b dc 0b 7d bc be 1c f4 58 aa f5 29 c8 ea 5a 78 49 52 be 34 5b fd 1e 8f 4e 87 e0 ce 85 57 93 e2 f3 cf 81 d3 11 8f a5 b2 a4 79 d3 68 e4 07 e8 4e 36 bd 4c 8d 0d 77 9b 0b de f5 6b e4 6f e1 7f cd 83 97 50 96 71 e7 35 a7 8f 91 df 93 06 62 9c c9 b1 75 aa 1e 01 c3 a0 d1 c7 1f 72 06 82 e0 58 00 02 d7 0a cd a4 eb a5 3e 5d c7 86 55 ab e9 22 f1 63 09 2d 9d 13 3e 49 38 57 5c d8 83 67 c1 75 c5 48 f3 65 71 9a a2 b0 a6 47 e8 32 13 f5 41 d5 cc 6d 22 a3 c4 bb 85 55 d2 db 8a a2 79 30 ce 1e a7 f3 90 19 ec 12 95 c4 54 46 a6 8f 96 54 04 f3 6d 0c 27 c7 22 b3 1e f0 47 da b5 bb ec 28 a7 bb 79 3e 7f 40 cc 97 48 c3 94 f8 d8 df Data Ascii: \|$z@dxP`<iX6H)*e&}X)ZxIR4[NWyhN6LwkoPq5burX>]U"c->I8W\guHeqG2Am"Uy0TFTm'"G(y>@H
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 a9 9d 26 b6 7a 21 ff 73 7a 7d 44 18 6d a3 7f b8 a4 78 23 38 6f 6b cd 97 ef 3f 75 99 b5 f5 2a e7 7c f9 a2 de ed d8 f1 6e 7b d7 b0 43 9c ac ff 11 e2 94 7d 61 09 b5 51 4e 0f 1b 03 13 b4 e1 92 7e 9e 6b d5 a1 e0 c3 e3 f1 92 12 81 23 1d 9e 5b 8c 83 b9 a6 f2 ce fc 34 44 06 ee 97 6a 1a ad 7a 2a 89 47 bd 67 a2 d1 1b 21 b0 95 e8 29 23 38 98 10 56 c4 12 82 e9 48 03 14 04 7f bf 70 42 b6 d9 b6 04 1b 03 9c 67 15 67 02 d2 9d 6a ae 97 5b 7d 39 7e 4d a2 c1 ac 9f 7c 54 6e 51 8b bf 3d a5 80 c1 91 a9 64 bb 20 52 b5 85 97 b4 95 50 0a 41 6e 51 f1 ca cb 97 e4 bf 2a 74 93 cf a7 ba 48 88 0c 5f 19 af 70 7d 15 f1 9f 24 d6 9c 85 c7 06 de 82 3c 2b c3 8b fc 4e 4e e9 0e fa 79 68 26 98 fa e0 d5 Data Ascii: "0H0&z!sz}Dmx#8ok?u\|n{C}aQN~k#[4DjzGg!)#8VHpBggj[}9~M\|TnQ=d RPAnQtH_p}$<+NNyh&
2025-06-10 17:26:38 UTC	1460	IN	Data Raw: 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 28 30 26 06 03 55 04 03 13 1f 4d 69 63 72 6f 73 6f 66 74 20 55 70 64 61 74 65 20 53 69 67 6e 69 6e 67 20 43 41 20 32 2e 33 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 ac 39 80 cb 34 50 ca 26 3f 5d 76 26 ca d3 8c c1 1d 5c eb 30 97 c6 66 86 26 a6 d5 5d 5f 4f cd 80 4c 0f 67 ec 25 0c bb 39 11 3b 6e 86 fd c7 21 27 60 fc 80 7c 01 89 ad e8 6e cd bd d0 47 5f 58 6d 00 3b 46 57 99 7d 16 b3 76 12 8b ca 9d 86 6c 1d 70 9a 69 d4 45 fe ce 72 ea ca ca 94 60 9d 7c 73 Data Ascii: 10UUS10UWashington10URedmond10UMicrosoft Corporation1(0&UMicrosoft Update Signing CA 2.30"0*H094P&?]v&\0f&]_OLg%9;n!'`\|nG_Xm;FW}vlpiEr`\|s

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6044, Parent PID: 5968

General

Target ID:	0
Start time:	13:25:52
Start date:	10/06/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2932, Parent PID: 6044

General

Target ID:	1
Start time:	13:25:52
Start date:	10/06/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1280,i,14118492116032178447,3945001351059846368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6676, Parent PID: 5968

General

Target ID:	2
Start time:	13:25:54
Start date:	10/06/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://2fa.com-token-auth.com/XUkVnbEhDcDBvSTZUWEtTM1BuWjFsV29jM2RTRmpFZ2IvYU5mN3lrK29SamhZQmcra1pHZm9CYUcvRndkKzhrbnhnSnNkckRqWElCVXN1NXFtOGtUUnI5L0tZOHVtWWcrU3lST292RDA5TXk5MlZzMDEycEdsUzEvT2ppRkpIOXlVOHlENTU3UDJGRzZMYUY3MGNHK09BelI2eXMzall5N0hyV2RJRDNSSTAxaVczWExqNXlwRmU0PS0ta1dOcCtlamVxbFE1L1FEZy0taVc3dUxGbkxKQjNLYW1XNWtXZzZ5QT09?cid=2559917548"
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

AI Reasoning

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6044, Parent PID: 5968

General

Chronological Activities

Analysis Process: chrome.exePID: 2932, Parent PID: 6044

General