Edit tour

Windows Analysis Report
https://dhl4u.hu

Overview

General Information

Sample URL:	https://dhl4u.hu
Analysis ID:	1373591
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Creates files inside the system directory

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 1684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://dhl4u.hu/ MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 1560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1984 --field-trial-handle=2044,i,12554032650141021621,8251501547445686809,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 13.67.144.177
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.32.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 13.67.144.177
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 13.67.144.177
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.149&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.149Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=tVmukH+DLDuKbwp&MD=Wc3mbXkx HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=ht&oit=1&cp=2&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=htt&oit=1&cp=3&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https&oit=1&cp=5&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=tVmukH+DLDuKbwp&MD=Wc3mbXkx HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A&oit=4&cp=6&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F&oit=4&cp=8&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fd&oit=3&cp=9&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdh&oit=3&cp=10&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl&oit=3&cp=11&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4&oit=3&cp=12&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4yo&oit=3&cp=14&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you&oit=3&cp=15&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.&oit=3&cp=16&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.co&oit=3&cp=18&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.com&oit=3&cp=19&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.co&oit=3&cp=18&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.c&oit=3&cp=17&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.&oit=3&cp=16&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.hu&oit=3&cp=18&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hu/ HTTP/1.1Host: dhl4you.huConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/app-styles.9786b6ca.css HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/dhl.png HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/banner.jpg HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build//images/MyDHL.png HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/boxchoice2.jpg HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/boxchoice-shadow.png HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/runtime.5cbf859b.js HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/3449.9039d7ee.js HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/app.6a7fe505.js HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/dhl.png HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build//images/MyDHL.png HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/boxchoice-shadow.png HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/boxchoice2.jpg HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/banner.jpg HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/fonts/FrutigerCondensedCE.6ade4a0b.woff HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dhl4you.husec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dhl4you.hu/build/app-styles.9786b6ca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/fonts/FrutigerCE_bold.29fc1108.woff HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dhl4you.husec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dhl4you.hu/build/app-styles.9786b6ca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/fonts/FrutigerCondensedCE_bold.f46dde21.woff HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dhl4you.husec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dhl4you.hu/build/app-styles.9786b6ca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/fonts/FrutigerCE.ee271c87.woff HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dhl4you.husec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dhl4you.hu/build/app-styles.9786b6ca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/bg.3a028408.jpg HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dhl4you.hu/build/app-styles.9786b6ca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/images/bg.3a028408.jpg HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/dictionary_translations/user_interface HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/3734.447969d1.js HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/dictionary_translations/user_interface HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/favicon.ico HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-bar/close/accept_all HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie-bar-confirmed=1; cookie-bar-necessary=1
Source: global traffic	HTTP traffic detected: GET /favicon/favicon.ico HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie-bar-confirmed=1; cookie-bar-necessary=1
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mydhl.express.dhl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/78a4cb06-0cc4-4819-9e9a-43c38ef2e824/78a4cb06-0cc4-4819-9e9a-43c38ef2e824.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mydhl.express.dhlSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mydhl.express.dhl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1F,C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000001F19FD9567 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /consent/78a4cb06-0cc4-4819-9e9a-43c38ef2e824/78a4cb06-0cc4-4819-9e9a-43c38ef2e824.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://mydhl.express.dhlSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mydhl.express.dhl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.26.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mydhl.express.dhl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/78a4cb06-0cc4-4819-9e9a-43c38ef2e824/e3f265d8-9671-48e9-8cc0-bce11807b43a/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mydhl.express.dhlSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mydhl.express.dhl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/78a4cb06-0cc4-4819-9e9a-43c38ef2e824/e3f265d8-9671-48e9-8cc0-bce11807b43a/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.26.0/assets/otPcPanel.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mydhl.express.dhlSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mydhl.express.dhl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.26.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mydhl.express.dhlSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mydhl.express.dhl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.26.0/assets/otPcPanel.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.26.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mydhl.express.dhl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/ HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://dhl4you.hu/hu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie-bar-confirmed=1; cookie-bar-necessary=1
Source: global traffic	HTTP traffic detected: GET /api/dictionary_translations/user_interface HTTP/1.1Host: dhl4you.huConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://dhl4you.hu/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie-bar-confirmed=1; cookie-bar-necessary=1If-None-Match: "d9b6bd8d0396d544ce44971df31ae2ba"
Source: global traffic	HTTP traffic detected: GET /api/dictionary_translations/user_interface HTTP/1.1Host: dhl4you.huConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie-bar-confirmed=1; cookie-bar-necessary=1If-None-Match: "eb829e99067ca8260ea14a68f16ec982"

Source: chromecache_191.5.dr	String found in binary or memory: ["https",["https","https //quizlet.com live","https //www.gimkit.com join","https //www.gimkit.com login","https //kahoot..com","https //kahoot.it login","https //www.gimkit.com host","https://www.youtube.com","https://www.google.com","https://www.epicgames.com/activate"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[1300,600,554,553,552,551,550,402,401,400],"google:suggestsubtypes":[[512,433,131],[512],[512],[512],[512],[512,433,131],[512],[44],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":1300}] equals www.youtube.com (Youtube)
Source: chromecache_121.5.dr	String found in binary or memory: ["https://",["https //www.gimkit.com join","https //quizlet live","https //www.gimkit.com login","https //kahoot..com","https //kahoot.it login","https //www.gimkit.com host","https //kahoot.com join","https //kahoot.it join","https://www.youtube.com","https://www.epicgames.com/activate"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,555,554,553,552,551,550,401,400],"google:suggestsubtypes":[[512],[512],[512],[512],[512,433,131],[512],[512,650,433],[512],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":851}] equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: dhl4u.hu

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 12 Jan 2024 09:48:50 GMTServer: -X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINCache-Control: no-cache, privateStrict-Transport-Security: max-age=31536000X-XSS-Protection: 1; mode=blockReferrer-Policy: origin-when-cross-originUpgrade: h2Connection: Upgrade, closeTransfer-Encoding: chunkedContent-Type: application/problem+json; charset=utf-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 12 Jan 2024 09:49:05 GMTServer: -X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINCache-Control: no-cache, privateStrict-Transport-Security: max-age=31536000X-XSS-Protection: 1; mode=blockReferrer-Policy: origin-when-cross-originUpgrade: h2Connection: Upgrade, closeTransfer-Encoding: chunkedContent-Type: application/problem+json; charset=utf-8

Source: chromecache_156.5.dr	String found in binary or memory: http://angular-ui.github.com/
Source: chromecache_156.5.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_156.5.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_156.5.dr	String found in binary or memory: http://github.com/jrburke/almond
Source: chromecache_138.5.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_156.5.dr, chromecache_138.5.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_156.5.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_156.5.dr	String found in binary or memory: http://purl.eligrey.com/github/Blob.js/blob/master/Blob.js
Source: chromecache_156.5.dr	String found in binary or memory: http://revolunet.github.com/angular-carousel
Source: chromecache_138.5.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_156.5.dr	String found in binary or memory: http://visualcaptcha.net
Source: chromecache_125.5.dr	String found in binary or memory: http://www.5idhl.com
Source: chromecache_125.5.dr	String found in binary or memory: http://www.dhl.co.in/en/important_information/040314.htm
Source: chromecache_125.5.dr	String found in binary or memory: http://www.dhlindia-kyc.com/
Source: chromecache_125.5.dr	String found in binary or memory: http://www.e-to-china.com/
Source: chromecache_116.5.dr, chromecache_169.5.dr	String found in binary or memory: http://www.eci.org/eci/en/eciRGB.php
Source: chromecache_116.5.dr, chromecache_169.5.dr	String found in binary or memory: http://www.eci.org/eci/en/eciRGB.phpdesc
Source: chromecache_156.5.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_125.5.dr	String found in binary or memory: https://ace.cbp.dhs.gov
Source: chromecache_125.5.dr	String found in binary or memory: https://ace.cbp.dhs.gov/
Source: chromecache_125.5.dr	String found in binary or memory: https://address.gov.sa/en/
Source: chromecache_181.5.dr	String found in binary or memory: https://assets.adobedtm.com/cd52279ef3fa/2264c05d6e8f/b97231d079a3/RCe8adc4d7f06c42d79955daf6094f5a8
Source: chromecache_143.5.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.js
Source: chromecache_163.5.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_Acti
Source: chromecache_131.5.dr	String found in binary or memory: https://assets.adobedtm.com/launch-EN4beec7cc9b7a4e3bb4c409bc54b5fbc2.js
Source: chromecache_125.5.dr	String found in binary or memory: https://bit.ly/3hhkALn
Source: chromecache_125.5.dr	String found in binary or memory: https://cargox.io/
Source: chromecache_148.5.dr, chromecache_164.5.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_148.5.dr, chromecache_164.5.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_148.5.dr, chromecache_164.5.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_148.5.dr, chromecache_164.5.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_175.5.dr	String found in binary or memory: https://design.cricut.com
Source: chromecache_180.5.dr	String found in binary or memory: https://dhl-ecom.com/3c/signin.aspx
Source: chromecache_180.5.dr	String found in binary or memory: https://dhl-track-pack.com
Source: chromecache_180.5.dr	String found in binary or memory: https://dhl.com
Source: chromecache_180.5.dr	String found in binary or memory: https://dhl.de/finder
Source: chromecache_145.5.dr	String found in binary or memory: https://dhl4you.c
Source: chromecache_160.5.dr	String found in binary or memory: https://dhl4you.co
Source: chromecache_113.5.dr	String found in binary or memory: https://dhl4you.com
Source: chromecache_180.5.dr	String found in binary or memory: https://dhlpakets-verfolgung.net/
Source: chromecache_180.5.dr	String found in binary or memory: https://dhlsc.myview.zellis.com
Source: chromecache_180.5.dr	String found in binary or memory: https://dhlsc.myview.zellis.com/dashboard/
Source: chromecache_175.5.dr	String found in binary or memory: https://docs.google.com
Source: chromecache_175.5.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_175.5.dr	String found in binary or memory: https://duckduckgo.com
Source: chromecache_125.5.dr	String found in binary or memory: https://ec.europa.eu/taxation_customs/business/customs-procedures/general-overview/economic-operator
Source: chromecache_128.5.dr, chromecache_136.5.dr	String found in binary or memory: https://express-resource.dhl.com/NIK-customs.html
Source: chromecache_125.5.dr	String found in binary or memory: https://extranetpt.dhl.com/files/ess/DECL_BENS_CIRCULACAO.pdf
Source: chromecache_125.5.dr	String found in binary or memory: https://finder.eircode.ie/#/
Source: chromecache_125.5.dr	String found in binary or memory: https://forms.office.com/Pages/ResponsePage.aspx?id=DQSIkWdsW0yxEjajBLZtrQAAAAAAAAAAAAMAACiLqU9UREhX
Source: chromecache_148.5.dr, chromecache_164.5.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_139.5.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_156.5.dr	String found in binary or memory: https://github.com/Pasvaz/bindonce
Source: chromecache_156.5.dr	String found in binary or memory: https://github.com/angular-ui/ui-mask
Source: chromecache_156.5.dr	String found in binary or memory: https://github.com/fergaldoyle/modelOptions
Source: chromecache_156.5.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_156.5.dr	String found in binary or memory: https://github.com/ocombe/ocLazyLoad
Source: chromecache_139.5.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_125.5.dr	String found in binary or memory: https://info-aduaneiro.portaldasfinancas.gov.pt/pt/legislacao_aduaneira/Pages/default.aspx
Source: chromecache_125.5.dr	String found in binary or memory: https://locator.dhl.com/?l=en&countryCode=IN).
Source: chromecache_128.5.dr, chromecache_136.5.dr	String found in binary or memory: https://mydhl.express.dhl
Source: chromecache_125.5.dr	String found in binary or memory: https://www.acesso.gov.pt/jsp/loginRedirectForm.jsp?path=DocTransporte%2FemitirDocTranspForm.action&
Source: chromecache_125.5.dr	String found in binary or memory: https://www.cbsa-asfc.gc.ca/prog/cers-scde/portal-portail/menu-eng.html
Source: chromecache_125.5.dr	String found in binary or memory: https://www.cbsa-asfc.gc.ca/services/cers-scde/get-started-intro-eng.html
Source: chromecache_111.5.dr, chromecache_186.5.dr	String found in binary or memory: https://www.dhl.com/global-en/home/footer/global-privacy-notice.html
Source: chromecache_111.5.dr, chromecache_186.5.dr	String found in binary or memory: https://www.dhl.com/global-en/home/footer/legal-notice.html
Source: chromecache_125.5.dr	String found in binary or memory: https://www.douane.gouv.fr/fiche/postponed-accounting-import-vat
Source: chromecache_121.5.dr, chromecache_191.5.dr	String found in binary or memory: https://www.epicgames.com/activate
Source: chromecache_191.5.dr	String found in binary or memory: https://www.google.com
Source: chromecache_125.5.dr	String found in binary or memory: https://www.nafeza.gov.eg/en
Source: chromecache_121.5.dr, chromecache_191.5.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_125.5.dr	String found in binary or memory: https://www2.sagawa-exp.co.jp/information/detail/215/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.196.32.73:443 -> 192.168.2.17:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.196.32.73:443 -> 192.168.2.17:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.17:49728 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_1684_364399160

Jump to behavior

Source: classification engine

Classification label: mal48.win@21/92@45/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://dhl4u.hu/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1984 --field-trial-handle=2044,i,12554032650141021621,8251501547445686809,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1984 --field-trial-handle=2044,i,12554032650141021621,8251501547445686809,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://dhl4u.hu	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://dhlsc.myview.zellis.com	0%	Avira URL Cloud	safe
https://dhl4you.hu/build/app-styles.9786b6ca.css	100%	Avira URL Cloud	phishing
https://dhl4you.hu/favicon/favicon.ico	100%	Avira URL Cloud	phishing
https://dhl4you.c	0%	Avira URL Cloud	safe
https://dhlsc.myview.zellis.com	0%	Virustotal		Browse
https://dhl4you.hu/build//images/MyDHL.png	100%	Avira URL Cloud	phishing
https://dhl4you.hu/build/images/boxchoice2.jpg	100%	Avira URL Cloud	phishing
https://info-aduaneiro.portaldasfinancas.gov.pt/pt/legislacao_aduaneira/Pages/default.aspx	0%	Avira URL Cloud	safe
https://dhl4you.hu/build/runtime.5cbf859b.js	100%	Avira URL Cloud	phishing
https://dhl4you.hu/api/hashes/undefined/dhl-variable-values	100%	Avira URL Cloud	phishing
http://visualcaptcha.net	0%	Avira URL Cloud	safe
https://dhl4you.co	0%	Avira URL Cloud	safe
http://www.dhl.co.in/en/important_information/040314.htm	0%	Avira URL Cloud	safe
https://dhl4you.hu/api/dictionary_translations/user_interface	100%	Avira URL Cloud	phishing
https://www.cbsa-asfc.gc.ca/services/cers-scde/get-started-intro-eng.html	0%	Avira URL Cloud	safe
https://dhl4you.hu/cookie-bar/close/accept_all	100%	Avira URL Cloud	phishing
https://dhl4you.hu/build/3449.9039d7ee.js	100%	Avira URL Cloud	phishing
https://dhl4you.hu/build/images/bg.3a028408.jpg	100%	Avira URL Cloud	phishing
http://visualcaptcha.net	0%	Virustotal		Browse
https://dhl4you.hu/build/3734.447969d1.js	100%	Avira URL Cloud	phishing
https://dhl4you.hu/build/images/boxchoice-shadow.png	100%	Avira URL Cloud	phishing
http://www.dhl.co.in/en/important_information/040314.htm	0%	Virustotal		Browse
https://dhl4you.hu/build/fonts/FrutigerCondensedCE_bold.f46dde21.woff	100%	Avira URL Cloud	phishing
https://dhl4you.hu/build/fonts/FrutigerCE.ee271c87.woff	100%	Avira URL Cloud	phishing
https://dhl4you.com	0%	Avira URL Cloud	safe
https://www.acesso.gov.pt/jsp/loginRedirectForm.jsp?path=DocTransporte%2FemitirDocTranspForm.action&	0%	Avira URL Cloud	safe
https://dhl4you.hu/build/fonts/FrutigerCE_bold.29fc1108.woff	100%	Avira URL Cloud	phishing
https://www.douane.gouv.fr/fiche/postponed-accounting-import-vat	0%	Avira URL Cloud	safe
https://dhl4you.hu/build/fonts/FrutigerCondensedCE.6ade4a0b.woff	100%	Avira URL Cloud	phishing
https://dhl4you.hu/build/app.6a7fe505.js	100%	Avira URL Cloud	phishing
https://dhl4you.com	2%	Virustotal		Browse
https://www.nafeza.gov.eg/en	0%	Avira URL Cloud	safe
https://dhl4you.hu/build/images/banner.jpg	100%	Avira URL Cloud	phishing
https://www.cbsa-asfc.gc.ca/prog/cers-scde/portal-portail/menu-eng.html	0%	Avira URL Cloud	safe
https://www.cbsa-asfc.gc.ca/prog/cers-scde/portal-portail/menu-eng.html	0%	Virustotal		Browse
https://www.nafeza.gov.eg/en	0%	Virustotal		Browse

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.251.163.102	true	false	high
accounts.google.com	142.250.31.84	true	false	high
dhl4you.hu	83.167.238.180	true	false	unknown
www.google.com	172.253.63.106	true	false	high
clients.l.google.com	172.253.63.102	true	false	high
cdn.cookielaw.org	104.18.130.236	true	false	high
geolocation.onetrust.com	104.18.32.137	true	false	high
clients1.google.com	unknown	unknown	false	high
s.go-mpulse.net	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	high
dhl4u.hu	unknown	unknown	false	unknown
clients2.google.com	unknown	unknown	false	high
mydhl.express.dhl	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdh&oit=3&cp=10&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://dhl4you.hu/favicon/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://dhl4you.hu/build/app-styles.9786b6ca.css	false	Avira URL Cloud: phishing	unknown
about:blank	false	Avira URL Cloud: safe	low
https://dhl4you.hu/build//images/MyDHL.png	false	Avira URL Cloud: phishing	unknown
https://dhl4you.hu/build/images/boxchoice2.jpg	false	Avira URL Cloud: phishing	unknown
https://dhl4you.hu/en/	false		unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.c&oit=3&cp=17&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://dhl4you.hu/api/hashes/undefined/dhl-variable-values	false	Avira URL Cloud: phishing	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you&oit=3&cp=15&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://dhl4you.hu/build/runtime.5cbf859b.js	false	Avira URL Cloud: phishing	unknown
https://cdn.cookielaw.org/scripttemplates/6.26.0/assets/otPcPanel.json	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=htt&oit=1&cp=3&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=ht&oit=1&cp=2&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://dhl4you.hu/api/dictionary_translations/user_interface	false	Avira URL Cloud: phishing	unknown
https://cdn.cookielaw.org/logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG	false		high
https://dhl4you.hu/hu/	false		unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fd&oit=3&cp=9&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://dhl4you.hu/cookie-bar/close/accept_all	false	Avira URL Cloud: phishing	unknown
https://dhl4you.hu/build/3449.9039d7ee.js	false	Avira URL Cloud: phishing	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.hu&oit=3&cp=18&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.com&oit=3&cp=19&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl&oit=3&cp=11&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://dhl4you.hu/build/images/bg.3a028408.jpg	false	Avira URL Cloud: phishing	unknown
https://dhl4you.hu/build/3734.447969d1.js	false	Avira URL Cloud: phishing	unknown
https://dhl4you.hu/build/images/boxchoice-shadow.png	false	Avira URL Cloud: phishing	unknown
https://cdn.cookielaw.org/consent/78a4cb06-0cc4-4819-9e9a-43c38ef2e824/e3f265d8-9671-48e9-8cc0-bce11807b43a/en.json	false		high
https://dhl4you.hu/build/fonts/FrutigerCondensedCE_bold.f46dde21.woff	false	Avira URL Cloud: phishing	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.co&oit=3&cp=18&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false		high
https://dhl4you.hu/build/fonts/FrutigerCE.ee271c87.woff	false	Avira URL Cloud: phishing	unknown
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location	false		high
https://cdn.cookielaw.org/scripttemplates/6.26.0/otBannerSdk.js	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F&oit=4&cp=8&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://cdn.cookielaw.org/scripttemplates/6.26.0/assets/otCommonStyles.css	false		high
https://dhl4you.hu/build/fonts/FrutigerCE_bold.29fc1108.woff	false	Avira URL Cloud: phishing	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4&oit=3&cp=12&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://dhl4you.hu/build/app.6a7fe505.js	false	Avira URL Cloud: phishing	unknown
https://dhl4you.hu/build/fonts/FrutigerCondensedCE.6ade4a0b.woff	false	Avira URL Cloud: phishing	unknown
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1F,C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000001F19FD9567	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.&oit=3&cp=16&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A&oit=4&cp=6&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://dhl4you.hu/build/images/banner.jpg	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://dhlsc.myview.zellis.com	chromecache_180.5.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ace.cbp.dhs.gov/	chromecache_125.5.dr	false		high
https://dhl4you.c	chromecache_145.5.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com	chromecache_156.5.dr	false		high
http://purl.eligrey.com/github/Blob.js/blob/master/Blob.js	chromecache_156.5.dr	false		high
https://github.com/jquery/jquery-color	chromecache_156.5.dr	false		high
https://bit.ly/3hhkALn	chromecache_125.5.dr	false		high
http://www.eci.org/eci/en/eciRGB.php	chromecache_116.5.dr, chromecache_169.5.dr	false		high
https://www.youtube.com	chromecache_121.5.dr, chromecache_191.5.dr	false		high
https://extranetpt.dhl.com/files/ess/DECL_BENS_CIRCULACAO.pdf	chromecache_125.5.dr	false		high
https://www.google.com	chromecache_191.5.dr	false		high
http://www.dhlindia-kyc.com/	chromecache_125.5.dr	false		high
https://info-aduaneiro.portaldasfinancas.gov.pt/pt/legislacao_aduaneira/Pages/default.aspx	chromecache_125.5.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ocombe/ocLazyLoad	chromecache_156.5.dr	false		high
http://visualcaptcha.net	chromecache_156.5.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://dhl.com	chromecache_180.5.dr	false		high
https://dhl.de/finder	chromecache_180.5.dr	false		high
http://www.e-to-china.com/	chromecache_125.5.dr	false		high
https://dhl4you.co	chromecache_160.5.dr	false	Avira URL Cloud: safe	unknown
https://finder.eircode.ie/#/	chromecache_125.5.dr	false		high
https://design.cricut.com	chromecache_175.5.dr	false		high
https://www.dhl.com/global-en/home/footer/legal-notice.html	chromecache_111.5.dr, chromecache_186.5.dr	false		high
http://www.dhl.co.in/en/important_information/040314.htm	chromecache_125.5.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.cbsa-asfc.gc.ca/services/cers-scde/get-started-intro-eng.html	chromecache_125.5.dr	false	Avira URL Cloud: safe	unknown
http://revolunet.github.com/angular-carousel	chromecache_156.5.dr	false		high
https://ace.cbp.dhs.gov	chromecache_125.5.dr	false		high
http://www.5idhl.com	chromecache_125.5.dr	false		high
https://locator.dhl.com/?l=en&countryCode=IN).	chromecache_125.5.dr	false		high
http://www.opensource.org/licenses/MIT	chromecache_156.5.dr	false		high
https://drive.google.com	chromecache_175.5.dr	false		high
https://assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.js	chromecache_143.5.dr	false		high
https://docs.google.com	chromecache_175.5.dr	false		high
https://assets.adobedtm.com/launch-EN4beec7cc9b7a4e3bb4c409bc54b5fbc2.js	chromecache_131.5.dr	false		high
https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck	chromecache_148.5.dr, chromecache_164.5.dr	false	URL Reputation: safe	unknown
http://www.eci.org/eci/en/eciRGB.phpdesc	chromecache_116.5.dr, chromecache_169.5.dr	false		high
http://jquery.org/license	chromecache_156.5.dr, chromecache_138.5.dr	false		high
https://github.com/fergaldoyle/modelOptions	chromecache_156.5.dr	false		high
http://sizzlejs.com/	chromecache_138.5.dr	false		high
http://angular-ui.github.com/	chromecache_156.5.dr	false		high
https://dhl4you.com	chromecache_113.5.dr	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://forms.office.com/Pages/ResponsePage.aspx?id=DQSIkWdsW0yxEjajBLZtrQAAAAAAAAAAAAMAACiLqU9UREhX	chromecache_125.5.dr	false		high
https://github.com/Pasvaz/bindonce	chromecache_156.5.dr	false		high
https://www.acesso.gov.pt/jsp/loginRedirectForm.jsp?path=DocTransporte%2FemitirDocTranspForm.action&	chromecache_125.5.dr	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_148.5.dr, chromecache_164.5.dr	false		high
https://github.com/angular-ui/ui-mask	chromecache_156.5.dr	false		high
https://www.douane.gouv.fr/fiche/postponed-accounting-import-vat	chromecache_125.5.dr	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/vendorlist/iabData.json	chromecache_148.5.dr, chromecache_164.5.dr	false		high
https://cargox.io/	chromecache_125.5.dr	false		high
http://angularjs.org	chromecache_156.5.dr	false		high
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_148.5.dr, chromecache_164.5.dr	false		high
https://ec.europa.eu/taxation_customs/business/customs-procedures/general-overview/economic-operator	chromecache_125.5.dr	false		high
https://www.dhl.com/global-en/home/footer/global-privacy-notice.html	chromecache_111.5.dr, chromecache_186.5.dr	false		high
https://www.nafeza.gov.eg/en	chromecache_125.5.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://dhl-ecom.com/3c/signin.aspx	chromecache_180.5.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_139.5.dr	false		high
https://www.cbsa-asfc.gc.ca/prog/cers-scde/portal-portail/menu-eng.html	chromecache_125.5.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
83.167.238.180	dhl4you.hu	Czech Republic	24971	MASTER-ASCzechRepublicwwwmasterczCZ	false
104.18.130.236	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
172.253.63.106	www.google.com	United States	15169	GOOGLEUS	false
172.253.63.102	clients.l.google.com	United States	15169	GOOGLEUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
172.253.115.139	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
142.250.31.84	accounts.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1373591
Start date and time:	2024-01-12 10:47:01 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://dhl4u.hu
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@21/92@45/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, ShellExperienceHost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.122.94, 34.104.35.123, 23.205.104.34, 172.253.122.138, 172.253.122.139, 172.253.122.101, 172.253.122.102, 172.253.122.113, 172.253.122.100, 142.251.16.94, 23.218.131.112, 23.196.33.35, 184.25.45.46, 23.220.132.139, 23.219.12.131, 142.250.31.95, 172.253.62.95, 142.251.163.95, 142.251.16.95, 142.251.167.95, 142.251.111.95, 172.253.122.95, 172.253.63.95, 172.253.115.95, 104.87.84.133
Excluded domains from analysis (whitelisted): ip46.go-mpulse.net.edgekey.net, fs.microsoft.com, mydhl.express.dhl.new.edgekey.net, content-autofill.googleapis.com, slscr.update.microsoft.com, encrypted-tbn0.gstatic.com, e9324.a.akamaiedge.net, cn-assets.adobedtm.com.edgekey.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, e4518.dscapi7.akamaiedge.net, edgedl.me.gvt1.com, e7808.dscg.akamaiedge.net, wildcard46.go-mpulse.net.edgekey.net, evoke-windowsservices-tas.msedge.net, update.googleapis.com, e4518.dscx.akamaiedge.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 12 08:47:31 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9904311982898606
Encrypted:	false
SSDEEP:	48:8cxdrTk73JfSH9idAKZdA1JehwiZUklqehHy+3:8cngwAy
MD5:	0B8696C7272D2ED51F20B1D0EF538D03
SHA1:	68CACB761DCD03FC8F7236EE858959E7C7348EB1
SHA-256:	1094003199755A2E7A5CEDD002F1CEAF914848BC339AA2D9B9361E2A825E50BE
SHA-512:	37EE38438774AFD8C88C438EB2D5CFE41F9319BE5DD5A019FA607C080B53902323EF5BEB77109E6D0391FDD6B03EEAABEDE637D8011FBAAD3E87B3BC375F7C9D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....@.\<E......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I,X.M....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V,X.M....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V,X.M....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V,X.M...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V,X.M...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Source: https://dhl4you.hu/build/app-styles.9786b6ca.css	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/favicon/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build//images/MyDHL.png	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/images/boxchoice2.jpg	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/runtime.5cbf859b.js	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/api/hashes/undefined/dhl-variable-values	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/api/dictionary_translations/user_interface	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/cookie-bar/close/accept_all	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/3449.9039d7ee.js	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/images/bg.3a028408.jpg	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/3734.447969d1.js	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/images/boxchoice-shadow.png	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/fonts/FrutigerCondensedCE_bold.f46dde21.woff	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/fonts/FrutigerCE.ee271c87.woff	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/fonts/FrutigerCE_bold.29fc1108.woff	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/fonts/FrutigerCondensedCE.6ade4a0b.woff	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/app.6a7fe505.js	Avira URL Cloud: Label: phishing
Source: https://dhl4you.hu/build/images/banner.jpg	Avira URL Cloud: Label: phishing

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 12, 2024 10:47:30.713980913 CET	62006	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:30.714283943 CET	49801	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:30.727020025 CET	65123	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:30.727458000 CET	59053	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:30.728094101 CET	50470	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:30.728317022 CET	49948	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:30.792246103 CET	53	60344	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:30.822861910 CET	53	65123	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:30.823441029 CET	53	59053	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:30.823791027 CET	53	49948	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:30.823936939 CET	53	50470	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:30.888205051 CET	53	62006	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:30.912919044 CET	53	49801	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:30.929059029 CET	50888	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:31.127605915 CET	53	50888	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:31.216713905 CET	63553	53	192.168.2.17	8.8.8.8
Jan 12, 2024 10:47:31.217392921 CET	60833	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:31.313638926 CET	53	60833	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:31.325376034 CET	53	63553	8.8.8.8	192.168.2.17
Jan 12, 2024 10:47:31.515630007 CET	53	58009	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:32.222057104 CET	62717	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:32.222321987 CET	60629	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:32.396388054 CET	53	62717	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:32.422178984 CET	53	60629	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:34.796140909 CET	64797	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:34.796272993 CET	51203	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:34.891238928 CET	53	64797	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:34.891491890 CET	53	51203	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:37.433868885 CET	63135	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:37.434561014 CET	58686	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:37.530529022 CET	53	58686	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:37.536880970 CET	53	63135	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:37.537851095 CET	64559	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:47:37.711054087 CET	53	64559	1.1.1.1	192.168.2.17
Jan 12, 2024 10:47:48.476469994 CET	53	59622	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:07.202054024 CET	53	61951	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:07.736428022 CET	60201	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:07.736550093 CET	52115	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:07.839713097 CET	53	60201	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:07.873967886 CET	49362	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:07.911725044 CET	53	52115	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:08.072604895 CET	53	49362	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:21.990130901 CET	53	56587	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:27.362345934 CET	138	138	192.168.2.17	192.168.2.255
Jan 12, 2024 10:48:30.149554968 CET	53	50625	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:30.194144964 CET	53	53566	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:37.736751080 CET	65327	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:37.736885071 CET	64805	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:38.152731895 CET	53	65327	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:38.155198097 CET	53	64805	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:41.045084000 CET	60290	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:41.045408010 CET	60923	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:41.472023964 CET	53	60923	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:41.572887897 CET	53	60290	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:56.379661083 CET	60653	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:56.380368948 CET	56918	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:57.563081026 CET	54939	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:57.563393116 CET	57917	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:57.568159103 CET	50550	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:57.568577051 CET	65181	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:57.663060904 CET	53	50550	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:57.663288116 CET	53	65181	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:57.853005886 CET	53	55840	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:58.801099062 CET	62725	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:58.801460981 CET	55739	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:58.933336973 CET	64997	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:58.933547974 CET	58619	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:59.795911074 CET	52696	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:59.796312094 CET	63722	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:48:59.891031981 CET	53	52696	1.1.1.1	192.168.2.17
Jan 12, 2024 10:48:59.891390085 CET	53	63722	1.1.1.1	192.168.2.17
Jan 12, 2024 10:49:00.139161110 CET	58742	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.139338017 CET	51442	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.159548998 CET	61875	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.159708023 CET	62456	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.220772028 CET	65333	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.220936060 CET	59224	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.255182981 CET	53	61875	1.1.1.1	192.168.2.17
Jan 12, 2024 10:49:00.255203962 CET	53	62456	1.1.1.1	192.168.2.17
Jan 12, 2024 10:49:00.316056013 CET	53	65333	1.1.1.1	192.168.2.17
Jan 12, 2024 10:49:00.316267014 CET	53	59224	1.1.1.1	192.168.2.17
Jan 12, 2024 10:49:00.317730904 CET	53	58652	1.1.1.1	192.168.2.17
Jan 12, 2024 10:49:00.678009987 CET	55992	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.678534031 CET	56354	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.779119968 CET	51530	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.779314041 CET	58602	53	192.168.2.17	1.1.1.1
Jan 12, 2024 10:49:00.873966932 CET	53	51530	1.1.1.1	192.168.2.17
Jan 12, 2024 10:49:00.874697924 CET	53	58602	1.1.1.1	192.168.2.17

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 12, 2024 10:48:07.911998987 CET	192.168.2.17	1.1.1.1	c220	(Port unreachable)	Destination Unreachable
Jan 12, 2024 10:48:56.668086052 CET	192.168.2.17	1.1.1.1	c281	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:47:27 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-12 09:47:27 UTC	495	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=52257 Date: Fri, 12 Jan 2024 09:47:27 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:47:27 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-12 09:47:27 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=52240 Date: Fri, 12 Jan 2024 09:47:27 GMT Content-Length: 55 Connection: close X-CID: 2
2024-01-12 09:47:27 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:47:31 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-01-12 09:47:31 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-12 09:47:31 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 12 Jan 2024 09:47:31 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-dntm8eCWvl6A4ejDhxGa8Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:47:31 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-12 09:47:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:47:31 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.149&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.149 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:47:31 UTC	731	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-m-1AbdE2ChMPRz_tzuSehQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 12 Jan 2024 09:47:31 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6220 X-Daystart: 6451 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:47:31 UTC	521	IN	Data Raw: 32 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 32 30 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 36 34 35 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 20 Data Ascii: 2c8<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6220" elapsed_seconds="6451"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-01-12 09:47:31 UTC	198	IN	Data Raw: 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 3f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-01-12 09:47:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:47:45 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=tVmukH+DLDuKbwp&MD=Wc3mbXkx HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-01-12 09:47:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 427f9226-ff99-4d27-9ee4-8ebc8adf3ad8 MS-RequestId: 0ccf18a5-1487-4b6a-b33e-4150fc12e7bf MS-CV: FE8c23JpWEaxq7AZ.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 12 Jan 2024 09:47:44 GMT Connection: close Content-Length: 24490
2024-01-12 09:47:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-01-12 09:47:45 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:18 UTC	802	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-01-12 09:48:18 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:18 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MfNapBsF6JNF64KlCkC7rg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:48:18 UTC	811	IN	Data Raw: 33 32 34 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6d 69 61 6d 69 20 64 61 64 65 20 6e 61 76 61 72 72 6f 22 2c 22 77 61 6c 6c 20 73 74 72 65 65 74 20 77 6f 6e 64 65 72 73 20 6d 6f 6e 6f 70 6f 6c 79 20 67 6f 20 72 65 77 61 72 64 73 22 2c 22 61 72 63 74 69 63 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 20 70 6f 6c 61 72 20 76 6f 72 74 65 78 22 2c 22 61 69 72 63 72 61 66 74 20 62 6f 65 69 6e 67 20 37 33 37 22 2c 22 62 65 61 72 73 20 6f 66 66 65 6e 73 69 76 65 20 63 6f 6f 72 64 69 6e 61 74 6f 72 22 2c 22 6e 79 74 20 63 72 6f 73 73 77 6f 72 64 20 63 6c 75 65 73 22 2c 22 6c 6f 74 74 65 72 79 20 6d 65 67 61 20 6d 69 6c 6c 69 6f 6e 73 20 70 6f 77 65 72 62 61 6c 6c 20 6a 61 63 6b 70 6f 74 22 2c 22 6d 61 69 6e 65 20 6c 69 67 68 74 68 6f 75 73 65 20 73 74 6f 72 6d 20 64 61 6d Data Ascii: 324)]}'["",["miami dade navarro","wall street wonders monopoly go rewards","arctic oscillation polar vortex","aircraft boeing 737","bears offensive coordinator","nyt crossword clues","lottery mega millions powerball jackpot","maine lighthouse storm dam
2024-01-12 09:48:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:18 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-01-12 09:48:18 UTC	433	IN	HTTP/1.1 200 OK Content-Length: 7136 Content-Type: application/json; charset=utf-8 ETag: -1181707621_685285635 Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-ExP-TrackingId: 7db0e9e8-2469-442e-a3e2-fb78cd178370 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 03D142AC444941DA9AF96292D4C280C1 Ref B: BL2EDGE2218 Ref C: 2024-01-12T09:48:18Z Date: Fri, 12 Jan 2024 09:48:18 GMT Connection: close
2024-01-12 09:48:18 UTC	1024	IN	Data Raw: 7b 22 46 65 61 74 75 72 65 73 22 3a 5b 22 68 69 67 68 71 75 61 6c 69 74 79 63 61 70 74 75 72 65 63 22 2c 22 79 6f 61 6c 77 39 38 30 31 63 66 22 2c 22 79 6f 63 33 37 32 31 22 2c 22 61 61 74 65 73 31 32 31 22 2c 22 79 6f 63 61 6c 38 33 30 22 2c 22 65 6d 70 72 6f 37 30 32 22 2c 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 79 6f 73 75 72 33 32 36 22 2c 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 79 6f 79 70 70 31 31 37 22 2c 22 79 6f 79 70 70 35 36 31 22 2c 22 79 6f 70 68 6f 31 35 36 22 2c 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 79 6f 79 70 70 39 35 31 22 2c 22 79 6f 72 65 6d 37 38 32 22 2c 22 79 6f 72 65 6d 33 32 35 22 2c 22 79 6f 72 6f 6d 39 33 39 22 2c 22 79 6f 79 70 70 36 33 38 22 2c 22 79 6f 61 61 6f 77 63 34 36 63 66 22 2c 22 79 6f 35 35 Data Ascii: {"Features":["highqualitycapturec","yoalw9801cf","yoc3721","aates121","yocal830","empro702","yonon248","yosur326","contactsv2synconly","yoypp117","yoypp561","yopho156","ypromeless","yoypp951","yorem782","yorem325","yorom939","yoypp638","yoaaowc46cf","yo55
2024-01-12 09:48:18 UTC	1024	IN	Data Raw: 31 38 66 7a 22 3a 22 79 6f 63 61 6c 38 33 30 22 2c 22 31 68 6a 65 22 3a 22 65 6d 70 72 6f 37 30 32 22 2c 22 31 71 61 38 22 3a 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 31 74 6f 62 22 3a 22 79 6f 73 75 72 33 32 36 22 2c 22 31 77 6d 74 22 3a 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 32 69 77 6a 22 3a 22 79 6f 79 70 70 31 31 37 22 2c 22 32 6a 36 61 22 3a 22 79 6f 79 70 70 35 36 31 22 2c 22 32 6b 71 32 22 3a 22 79 6f 70 68 6f 31 35 36 22 2c 22 32 6c 61 64 22 3a 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 32 6d 7a 73 22 3a 22 79 6f 79 70 70 39 35 31 22 2c 22 32 6f 63 64 22 3a 22 79 6f 72 65 6d 37 38 32 22 2c 22 32 72 65 6b 22 3a 22 79 6f 72 65 6d 33 32 35 22 2c 22 32 73 63 78 22 3a 22 79 6f 72 6f 6d 39 33 39 22 2c 22 32 74 70 33 22 3a 22 79 6f Data Ascii: 18fz":"yocal830","1hje":"empro702","1qa8":"yonon248","1tob":"yosur326","1wmt":"contactsv2synconly","2iwj":"yoypp117","2j6a":"yoypp561","2kq2":"yopho156","2lad":"ypromeless","2mzs":"yoypp951","2ocd":"yorem782","2rek":"yorem325","2scx":"yorom939","2tp3":"yo
2024-01-12 09:48:18 UTC	1024	IN	Data Raw: 32 36 34 22 2c 22 35 39 30 71 22 3a 22 34 61 33 30 64 34 35 35 22 2c 22 35 39 67 67 22 3a 22 32 69 32 68 65 31 31 38 22 2c 22 35 39 67 6a 22 3a 22 34 64 65 35 67 35 34 32 22 2c 22 35 39 76 7a 22 3a 22 62 65 63 34 34 37 35 37 22 2c 22 35 61 39 73 22 3a 22 39 38 34 65 39 37 37 34 22 2c 22 35 61 74 6b 22 3a 22 35 35 35 64 37 39 37 38 22 2c 22 35 62 61 74 22 3a 22 65 6a 66 34 36 37 39 35 22 2c 22 35 63 70 66 22 3a 22 34 39 62 34 67 31 33 33 22 2c 22 35 63 72 73 22 3a 22 33 62 66 39 67 38 35 35 22 2c 22 35 64 77 37 22 3a 22 69 34 37 62 65 31 37 38 22 2c 22 35 65 74 36 22 3a 22 32 34 38 66 61 31 38 36 22 2c 22 35 66 6c 32 22 3a 22 68 35 31 66 30 33 34 32 22 2c 22 35 66 79 6f 22 3a 22 68 64 65 31 67 32 36 37 22 2c 22 35 66 79 71 22 3a 22 34 6a 6a 66 62 37 36 38 Data Ascii: 264","590q":"4a30d455","59gg":"2i2he118","59gj":"4de5g542","59vz":"bec44757","5a9s":"984e9774","5atk":"555d7978","5bat":"ejf46795","5cpf":"49b4g133","5crs":"3bf9g855","5dw7":"i47be178","5et6":"248fa186","5fl2":"h51f0342","5fyo":"hde1g267","5fyq":"4jjfb768
2024-01-12 09:48:18 UTC	1024	IN	Data Raw: 74 61 74 75 73 22 3a 74 72 75 65 2c 22 41 75 74 6f 48 79 64 72 61 74 65 64 49 6d 61 67 65 73 43 6f 75 6e 74 22 3a 30 2c 22 43 61 6c 6c 69 6e 67 45 78 69 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 4f 53 53 65 72 76 69 63 69 6e 67 46 69 78 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 53 68 61 72 65 64 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 53 68 61 72 65 64 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 4d 61 63 6b 69 6e 61 63 22 3a 74 72 75 65 2c 22 43 6f 6e 6e 65 63 74 57 68 65 6e 55 73 65 72 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 43 6f 6e 74 61 63 74 73 4e 6f 64 65 22 3a 66 61 6c 73 65 2c 22 43 6f 6e 74 61 63 74 73 56 32 53 79 6e 63 22 3a 74 72 75 65 2c 22 Data Ascii: tatus":true,"AutoHydratedImagesCount":0,"CallingExitConfirmation":true,"CallingOSServicingFix":true,"CallingSharedBluetoothPairing":true,"CallingSharedBluetoothPairingMackinac":true,"ConnectWhenUserActive":true,"ContactsNode":false,"ContactsV2Sync":true,"
2024-01-12 09:48:18 UTC	1024	IN	Data Raw: 4d 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 50 69 6e 6e 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 61 72 63 68 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 6e 64 41 6e 64 52 65 63 65 69 76 65 41 6e 69 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 6e 74 53 74 61 74 75 73 49 6e 64 69 63 61 74 6f 72 22 3a 74 72 75 65 2c 22 4e 6f 6e 44 65 66 61 75 6c 74 55 73 65 72 50 72 6f 66 69 6c 65 48 61 6d 6d 65 72 22 3a 74 72 75 65 2c 22 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 43 61 72 64 55 70 64 61 74 65 22 3a 74 72 75 65 2c 22 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 48 65 6c 69 78 49 6e 6c 69 6e 65 52 65 70 6c 79 22 3a 74 72 75 65 2c 22 4e 6f 74 69 66 69 63 61 74 Data Ascii: Muting":true,"MessagingEnablePinning":true,"MessagingSearch":true,"MessagingSendAndReceiveAnimation":true,"MessagingSentStatusIndicator":true,"NonDefaultUserProfileHammer":true,"NotificationsCardUpdate":true,"NotificationsHelixInlineReply":true,"Notificat
2024-01-12 09:48:18 UTC	1024	IN	Data Raw: 68 50 61 69 72 69 6e 67 22 3a 74 72 75 65 2c 22 57 68 61 74 73 4e 65 77 43 4e 22 3a 74 72 75 65 2c 22 59 50 50 43 61 74 61 73 74 72 6f 70 68 69 63 45 72 72 6f 72 41 75 74 6f 52 65 73 65 74 22 3a 74 72 75 65 2c 22 59 50 50 43 6f 6e 73 65 63 75 74 69 76 65 41 63 6b 54 69 6d 65 6f 75 74 73 46 6f 72 50 61 72 74 6e 65 72 44 69 73 63 6f 6e 6e 65 63 74 22 3a 35 2c 22 59 50 50 43 72 79 70 74 6f 54 72 75 73 74 53 74 6f 72 61 67 65 52 65 73 69 6c 69 65 6e 74 46 69 6c 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 59 50 50 44 65 76 69 63 65 73 22 3a 74 72 75 65 2c 22 59 50 50 45 6e 66 6f 72 63 65 56 65 72 73 69 6f 6e 22 3a 74 72 75 65 2c 22 59 50 50 48 65 61 72 74 42 65 61 74 46 6c 6f 77 22 3a 66 61 6c 73 65 2c 22 59 50 50 48 75 62 52 65 63 65 69 76 65 4d 65 73 73 Data Ascii: hPairing":true,"WhatsNewCN":true,"YPPCatastrophicErrorAutoReset":true,"YPPConsecutiveAckTimeoutsForPartnerDisconnect":5,"YPPCryptoTrustStorageResilientFileEnabled":true,"YPPDevices":true,"YPPEnforceVersion":true,"YPPHeartBeatFlow":false,"YPPHubReceiveMess
2024-01-12 09:48:18 UTC	992	IN	Data Raw: 35 32 35 38 36 38 3b 79 6f 72 65 6d 31 34 31 3a 33 30 34 38 36 33 35 33 3b 79 6f 79 70 70 36 35 32 3a 33 30 35 31 35 34 38 33 3b 79 6f 35 32 35 3a 33 30 35 35 33 39 38 35 3b 79 6f 36 30 36 3a 33 30 35 32 37 38 35 30 3b 79 6f 6e 6f 74 36 33 33 3a 33 30 36 32 36 30 37 38 3b 79 6f 79 70 70 38 35 39 3a 33 30 36 38 37 38 35 39 3b 79 6f 69 6e 64 36 36 35 3a 33 30 35 39 35 31 36 33 3b 79 6f 64 63 67 38 33 30 3a 33 30 37 31 32 39 34 39 3b 6f 6e 6c 79 5f 74 6f 61 73 74 63 6f 6e 74 65 78 74 6d 65 6e 75 3a 33 30 36 34 38 30 38 31 3b 61 6a 35 34 35 34 36 35 3a 33 30 38 39 37 37 35 35 3b 62 68 34 32 33 39 33 39 3a 33 30 37 35 35 36 35 33 3b 64 6a 65 65 36 39 35 39 3a 33 30 37 36 33 31 39 39 3b 36 36 63 61 31 36 36 36 3a 33 30 36 32 39 34 36 37 3b 66 63 66 68 62 36 30 Data Ascii: 525868;yorem141:30486353;yoypp652:30515483;yo525:30553985;yo606:30527850;yonot633:30626078;yoypp859:30687859;yoind665:30595163;yodcg830:30712949;only_toastcontextmenu:30648081;aj545465:30897755;bh423939:30755653;djee6959:30763199;66ca1666:30629467;fcfhb60

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:21 UTC	837	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=ht&oit=1&cp=2&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-01-12 09:48:21 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:21 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-4_c_6f2MhKlXTCymamhhGQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:48:21 UTC	1354	IN	Data Raw: 35 34 33 0d 0a 29 5d 7d 27 0a 5b 22 68 74 22 2c 5b 22 68 74 69 22 2c 22 68 74 69 22 2c 22 68 74 6d 6c 22 2c 22 68 74 62 22 2c 22 68 74 74 70 73 20 2f 2f 71 75 69 7a 6c 65 74 2e 63 6f 6d 20 6c 69 76 65 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 67 69 6d 6b 69 74 2e 63 6f 6d 20 6a 6f 69 6e 22 2c 22 68 74 6d 6c 20 63 6f 6c 6f 72 20 63 6f 64 65 73 22 2c 22 68 74 6d 6c 20 65 64 69 74 6f 72 22 2c 22 68 74 74 70 20 2f 2f 31 39 32 2e 31 36 38 2e 6c 2e 32 35 34 22 2c 22 68 74 62 20 62 61 6e 6b 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c Data Ascii: 543)]}'["ht",["hti","hti","html","htb","https //quizlet.com live","https //www.gimkit.com join","html color codes","html editor","http //192.168.l.254","htb bank"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"googl
2024-01-12 09:48:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:22 UTC	840	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https&oit=1&cp=5&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-01-12 09:48:23 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:23 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ltbHKIVIXx9TI9B7LJkWjA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:48:23 UTC	687	IN	Data Raw: 32 61 38 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 22 2c 5b 22 68 74 74 70 73 22 2c 22 68 74 74 70 73 20 2f 2f 71 75 69 7a 6c 65 74 2e 63 6f 6d 20 6c 69 76 65 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 67 69 6d 6b 69 74 2e 63 6f 6d 20 6a 6f 69 6e 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 67 69 6d 6b 69 74 2e 63 6f 6d 20 6c 6f 67 69 6e 22 2c 22 68 74 74 70 73 20 2f 2f 6b 61 68 6f 6f 74 2e 2e 63 6f 6d 22 2c 22 68 74 74 70 73 20 2f 2f 6b 61 68 6f 6f 74 2e 69 74 20 6c 6f 67 69 6e 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 67 69 6d 6b 69 74 2e 63 6f 6d 20 68 6f 73 74 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 77 Data Ascii: 2a8)]}'["https",["https","https //quizlet.com live","https //www.gimkit.com join","https //www.gimkit.com login","https //kahoot..com","https //kahoot.it login","https //www.gimkit.com host","https://www.youtube.com","https://www.google.com","https://w
2024-01-12 09:48:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:23 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=tVmukH+DLDuKbwp&MD=Wc3mbXkx HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-01-12 09:48:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: af502657-55c6-4b1b-9388-3b4bb6a674d0 MS-RequestId: 9cd8b609-bc89-4a32-9333-cd194bb15da9 MS-CV: BVL1u1O4J0Oamimw.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 12 Jan 2024 09:48:23 GMT Connection: close Content-Length: 25457
2024-01-12 09:48:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-01-12 09:48:24 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:25 UTC	850	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fd&oit=3&cp=9&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-01-12 09:48:25 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:25 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-AKI7UdcPy4edCBpFoilojQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:48:25 UTC	757	IN	Data Raw: 32 65 65 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 64 22 2c 5b 22 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 73 69 67 6e 2e 63 72 69 63 75 74 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 75 63 6b 64 75 63 6b 67 6f 2e 63 6f 6d 22 2c 22 68 74 74 70 73 20 2f 2f 64 69 73 63 6f 72 64 2e 63 6f 6d 20 6c 6f 67 69 6e 22 2c 22 68 74 74 70 73 20 2f 2f 64 6f 63 73 2e 6f 72 61 63 6c 65 2e 63 6f 6d 2f 6a 61 76 61 73 65 2f 38 2f 64 6f 63 73 2f 61 70 69 2f 6a 61 76 61 2f 75 74 69 6c 2f 20 68 61 73 68 6d 61 70 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 20 2f 2f 64 69 73 63 6f 72 64 2e 63 6f 6d 20 73 69 67 6e 20 75 70 22 Data Ascii: 2ee)]}'["https://d",["https://docs.google.com","https://design.cricut.com","https://drive.google.com","https://duckduckgo.com","https //discord.com login","https //docs.oracle.com/javase/8/docs/api/java/util/ hashmap.html","https //discord.com sign up"
2024-01-12 09:48:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:25 UTC	853	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl&oit=3&cp=11&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-01-12 09:48:26 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:26 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-C4AXEsYq53ClLLVLAYc5KA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:48:26 UTC	721	IN	Data Raw: 32 63 61 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 64 68 6c 22 2c 5b 22 68 74 74 70 73 3a 2f 2f 64 68 6c 2d 65 63 6f 6d 2e 63 6f 6d 2f 33 63 2f 73 69 67 6e 69 6e 2e 61 73 70 78 22 2c 22 68 74 74 70 73 3a 2f 2f 64 68 6c 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 68 6c 2d 74 72 61 63 6b 2d 70 61 63 6b 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 68 6c 2e 64 65 2f 66 69 6e 64 65 72 22 2c 22 68 74 74 70 73 3a 2f 2f 64 68 6c 70 61 6b 65 74 73 2d 76 65 72 66 6f 6c 67 75 6e 67 2e 6e 65 74 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 64 68 6c 73 63 2e 6d 79 76 69 65 77 2e 7a 65 6c 6c 69 73 2e 63 6f 6d 2f 64 61 73 68 62 6f 61 72 64 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 64 68 6c 73 63 2e 6d 79 76 69 65 77 2e 7a 65 6c 6c 69 73 2e 63 6f 6d 22 2c 22 68 74 74 70 Data Ascii: 2ca)]}'["https://dhl",["https://dhl-ecom.com/3c/signin.aspx","https://dhl.com","https://dhl-track-pack.com","https://dhl.de/finder","https://dhlpakets-verfolgung.net/","https://dhlsc.myview.zellis.com/dashboard/","https://dhlsc.myview.zellis.com","http
2024-01-12 09:48:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:33 UTC	854	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4&oit=3&cp=12&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-01-12 09:48:33 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:33 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Q82Tq3f9LdThhicIEVxzgg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:48:33 UTC	551	IN	Data Raw: 32 32 30 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 64 68 6c 34 22 2c 5b 22 64 68 6c 34 70 70 22 2c 22 64 68 6c 20 34 22 2c 22 64 68 6c 34 70 2d 70 76 22 2c 22 64 68 6c 20 34 30 31 22 2c 22 64 68 6c 34 79 6f 75 22 2c 22 64 68 6c 34 33 2d 66 36 30 30 22 2c 22 64 68 6c 34 79 6f 75 20 6c 65 67 69 74 22 2c 22 64 68 6c 34 79 6f 75 2e 72 6f 22 2c 22 64 68 6c 34 68 65 72 22 2c 22 64 68 6c 34 79 6f 75 2e 6c 74 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 38 35 30 2c 36 Data Ascii: 220)]}'["https://dhl4",["dhl4pp","dhl 4","dhl4p-pv","dhl 401","dhl4you","dhl43-f600","dhl4you legit","dhl4you.ro","dhl4her","dhl4you.lt"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[850,6
2024-01-12 09:48:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:34 UTC	858	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.&oit=3&cp=16&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-01-12 09:48:35 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:35 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-nyA2RDlZXWHg77eMHogx5w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:48:35 UTC	389	IN	Data Raw: 31 37 65 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 64 68 6c 34 79 6f 75 2e 22 2c 5b 22 68 74 74 70 73 20 2f 2f 64 68 6c 34 79 6f 75 2e 63 6f 6d 22 2c 22 68 74 74 70 73 20 2f 2f 64 68 6c 34 79 6f 75 2e 63 6f 6d 20 66 6e 61 66 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 2f 2f 64 68 6c 34 79 6f 75 2e 63 6f 6d 22 7d 2c 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 2f 2f 64 68 6c 34 79 6f 75 2e 63 6f 6d 20 66 6e 61 66 22 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 Data Ascii: 17e)]}'["https://dhl4you.",["https //dhl4you.com","https //dhl4you.com fnaf"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"mp":"\u2026 ","t":"//dhl4you.com"},{"mp":"\u2026 ","t":"//dhl4you.com fnaf"}],"google:sugg
2024-01-12 09:48:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:36 UTC	860	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fdhl4you.co&oit=3&cp=18&pgcl=4&gs_rn=42&psi=3sQ6fHoX43G5GOek&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-01-12 09:48:36 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:36 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Q4Yx6MPRZP1NWraCkRZYEg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-12 09:48:36 UTC	144	IN	Data Raw: 38 61 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 64 68 6c 34 79 6f 75 2e 63 6f 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 8a)]}'["https://dhl4you.co",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-01-12 09:48:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:38 UTC	653	OUT	GET / HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:38 UTC	412	IN	HTTP/1.1 302 Found Date: Fri, 12 Jan 2024 09:48:38 GMT Server: - Cache-Control: no-cache, private Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Location: /hu/ Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-01-12 09:48:38 UTC	274	IN	Data Raw: 31 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 2f 68 75 2f 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 68 75 2f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 68 75 2f 22 3e 2f 68 75 2f 3c 2f 61 3e 2e 0a 20 20 20 20 3c 2f 62 Data Ascii: 106<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='/hu/'" /> <title>Redirecting to /hu/</title> </head> <body> Redirecting to <a href="/hu/">/hu/</a>. </b

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:38 UTC	656	OUT	GET /hu/ HTTP/1.1 Host: dhl4you.hu Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:40 UTC	416	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:39 GMT Server: - Cache-Control: no-cache, private Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-01-12 09:48:40 UTC	7776	IN	Data Raw: 31 66 38 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 68 75 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 4d 65 74 61 20 54 61 67 73 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: 1f87<!DOCTYPE html><html lang="hu"> <head> ... Meta Tags --> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta http-equiv="X-UA-Compatible" content="
2024-01-12 09:48:40 UTC	301	IN	Data Raw: 61 20 74 c3 b6 72 6c 69 20 61 20 63 6f 6f 6b 69 65 2d 6b 61 74 2c 20 61 6b 6b 6f 72 20 c3 ba 6a 72 61 20 6d 65 67 20 6b 65 6c 6c 20 61 64 6e 69 61 20 61 20 62 65 c3 a1 6c 6c c3 ad 74 c3 a1 73 61 69 74 3b 20 c3 a9 73 3c 2f 70 3e 20 3c 70 3e 32 29 20 68 61 20 6d c3 a1 73 69 6b 20 65 73 7a 6b c3 b6 7a 74 2c 20 76 61 67 79 20 62 c3 b6 6e 67 c3 a9 73 7a c5 91 74 20 68 61 73 7a 6e c3 a1 6c 2c 20 c3 ba 6a 72 61 20 6d 65 67 20 6b 65 6c 6c 20 61 64 6e 69 61 20 61 20 62 65 c3 a1 6c 6c c3 ad 74 c3 a1 73 61 69 74 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6f 6b 69 65 2d 62 61 72 2d 73 65 74 74 69 6e 67 73 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: a trli a cookie-kat, akkor jra meg kell adnia a belltsait; s</p> <p>2) ha msik eszkzt, vagy bngszt hasznl, jra meg kell adnia a belltsait</p></div> </div> <div class="cookie-bar-settings">
2024-01-12 09:48:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-01-12 09:48:40 UTC	3019	IN	Data Raw: 62 62 66 0d 0a 66 69 65 6c 64 2d 66 6f 72 6d 5f 63 68 65 63 6b 62 6f 78 20 63 6f 6f 6b 69 65 2d 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 65 6c 64 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 64 61 74 61 2d 61 73 79 66 2d 63 6f 6f 6b 69 65 2d 68 72 65 66 3d 22 2f 63 6f 6f 6b 69 65 2d 62 61 72 2f 73 65 74 2d 63 6f 6f 6b 69 65 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: bbffield-form_checkbox cookie-row"> <div class="field-wrapper"> <input data-asyf-cookie-href="/cookie-bar/set-cookies" type="checkbox"

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dhl4u.hu

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
https://dhl4u.hu

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:40 UTC	551	OUT	GET /build/app-styles.9786b6ca.css HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dhl4you.hu/hu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:41 UTC	588	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:40 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "410ab-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 266411 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:40 GMT Vary: Accept-Encoding Content-Type: text/css
2024-01-12 09:48:41 UTC	7604	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d 70 75 Data Ascii: /! Bootstrap v4.5.3 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--pu
2024-01-12 09:48:41 UTC	16384	IN	Data Raw: 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 37 34 38 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 38 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 35 30 30 30 70 78 29 7b 2e Data Ascii: -left:auto;margin-right:auto;padding-left:15px;padding-right:15px;width:100%}@media (min-width:768px){.container,.container-sm{max-width:748px}}@media (min-width:1200px){.container,.container-md,.container-sm{max-width:1180px}}@media (min-width:15000px){.
2024-01-12 09:48:41 UTC	16384	IN	Data Raw: 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 32 35 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 33 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 64 69 73 61 62 6c 65 64 7e 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 2c 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 7e 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 Data Ascii: adding-right:5px}.form-check{display:block;padding-left:1.25rem;position:relative}.form-check-input{margin-left:-1.25rem;margin-top:.3rem;position:absolute}.form-check-input:disabled~.form-check-label,.form-check-input[disabled]~.form-check-label{color:#6
2024-01-12 09:48:41 UTC	16384	IN	Data Raw: 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 68 73 6c 61 28 32 30 38 2c 37 25 2c 34 36 25 2c 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 Data Ascii: ox-shadow:0 0 0 .2rem hsla(208,7%,46%,.5)}.btn-outline-secondary.disabled,.btn-outline-secondary:disabled{background-color:transparent;color:#6c757d}.btn-outline-secondary:not(:disabled):not(.disabled).active,.btn-outline-secondary:not(:disabled):not(.dis
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 67 68 74 3a 31 2e 32 35 72 65 6d 3b 6c 65 66 74 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 72 65 6d 3b 7a 2d 69 6e 64 65 78 3a 2d 31 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 66 6f 63 75 73 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 Data Ascii: ght:1.25rem;left:0;opacity:0;position:absolute;width:1rem;z-index:-1}.custom-control-input:checked~.custom-control-label:before{background-color:#007bff;border-color:#007bff;color:#fff}.custom-control-input:focus~.custom-control-label:before{box-shadow:0
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 35 29 7d 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 2e 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 32 35 29 7d 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 61 63 74 69 76 65 3e 2e 6e 61 76 2d 6c 69 6e 6b 2c 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 2e 61 63 74 69 76 65 2c 2e 6e 61 76 62 Data Ascii: .navbar-nav .nav-link:focus,.navbar-dark .navbar-nav .nav-link:hover{color:hsla(0,0%,100%,.75)}.navbar-dark .navbar-nav .nav-link.disabled{color:hsla(0,0%,100%,.25)}.navbar-dark .navbar-nav .active>.nav-link,.navbar-dark .navbar-nav .nav-link.active,.navb
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 62 64 64 65 35 3b 63 6f 6c 6f 72 3a 23 30 63 35 34 36 30 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 2e 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 63 35 34 36 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 63 35 34 36 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 65 65 62 61 3b 63 6f 6c 6f 72 3a 23 38 35 36 34 30 34 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 Data Ascii: -item-action:hover{background-color:#abdde5;color:#0c5460}.list-group-item-info.list-group-item-action.active{background-color:#0c5460;border-color:#0c5460;color:#fff}.list-group-item-warning{background-color:#ffeeba;color:#856404}.list-group-item-warning
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 64 74 68 3a 2e 35 72 65 6d 20 2e 35 72 65 6d 20 2e 35 72 65 6d 20 30 3b 6c 65 66 74 3a 30 7d 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 72 69 67 68 74 5d 3e 2e 61 72 72 6f 77 3a 61 66 74 65 72 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 72 69 67 68 74 3e 2e 61 72 72 6f 77 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 2e 35 72 65 6d 20 2e 35 72 65 6d 20 2e 35 72 65 6d 20 30 3b 6c 65 66 74 3a 31 70 78 7d 2e 62 2d 70 6f 70 6f 76 65 72 2d 64 61 6e 67 65 72 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 62 6f 74 74 6f 6d 5d 2c 2e 62 2d 70 6f 70 6f 76 65 72 2d 64 61 72 6b 2e 62 73 2d 70 6f 70 Data Ascii: dth:.5rem .5rem .5rem 0;left:0}.bs-popover-auto[x-placement^=right]>.arrow:after,.bs-popover-right>.arrow:after{border-right-color:#fff;border-width:.5rem .5rem .5rem 0;left:1px}.b-popover-danger.bs-popover-auto[x-placement^=bottom],.b-popover-dark.bs-pop
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 73 74 61 72 74 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 65 6e 64 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 63 65 6e 74 65 72 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 62 65 74 77 65 65 6e 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: rtant}.justify-content-md-start{justify-content:flex-start!important}.justify-content-md-end{justify-content:flex-end!important}.justify-content-md-center{justify-content:center!important}.justify-content-md-between{justify-content:space-between!important
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 2d 32 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 74 2d 6d 64 2d 32 2c 2e 70 79 2d 6d 64 2d 32 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 72 2d 6d 64 2d 32 2c 2e 70 78 2d 6d 64 2d 32 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 6d 64 2d 32 2c 2e 70 79 2d 6d 64 2d 32 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6c 2d 6d 64 2d 32 2c 2e 70 78 2d 6d 64 2d 32 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 6d 64 2d 33 7b 70 61 64 64 69 6e 67 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 74 2d 6d 64 2d Data Ascii: -2{padding:.5rem!important}.pt-md-2,.py-md-2{padding-top:.5rem!important}.pr-md-2,.px-md-2{padding-right:.5rem!important}.pb-md-2,.py-md-2{padding-bottom:.5rem!important}.pl-md-2,.px-md-2{padding-left:.5rem!important}.p-md-3{padding:1rem!important}.pt-md-

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:40 UTC	588	OUT	GET /build/images/dhl.png HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dhl4you.hu/hu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:41 UTC	562	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:40 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "8dd-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 2269 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:40 GMT Content-Type: image/png
2024-01-12 09:48:41 UTC	2269	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a4 00 00 00 18 08 06 00 00 00 74 bd 56 4f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRtVOtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:40 UTC	591	OUT	GET /build/images/banner.jpg HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dhl4you.hu/hu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:41 UTC	565	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:40 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "e57a-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 58746 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:40 GMT Content-Type: image/jpeg
2024-01-12 09:48:41 UTC	7627	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 00 d8 02 d3 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 07 08 02 03 04 05 09 01 0a ff c4 00 1d 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee Data Ascii: JFIFCC
2024-01-12 09:48:41 UTC	8000	IN	Data Raw: b3 e5 6f be 5f 05 e5 4e e4 c2 c7 f3 1a f1 dd f0 ee d1 66 09 6b a6 f9 3a d8 9e ef 25 3f a1 eb 23 fe f6 b5 a8 9e 29 e1 bb 9f db b5 82 65 40 46 9b 5c 3e a2 d9 fb 56 e7 06 af 24 0c 92 d3 73 82 b2 e8 7a 57 5a ed 84 fe 32 ee 2b 75 ba d6 d2 0b 0c a4 6b db dd 75 f1 7d bd f3 fc 44 04 5b 42 2b 27 8b e2 75 44 95 ef 2f 2b f7 3a eb 0a 29 2f 18 07 c4 ca e2 8d 60 86 6e db 11 2e da 1b 1b 77 53 e9 ac c5 ac b7 b3 b9 de a3 d7 c9 ed e9 47 bd 8d 74 31 45 e5 4e e1 ad 0b 7b 2d 94 db df 0b bb 00 b9 be 6c 25 3f 66 6c 0c a7 b2 ee f5 b1 59 66 8c ab f8 de c3 3f b4 ba f4 90 a8 a5 fe d3 ea 3b 5a 1c c9 f7 90 63 d6 d3 64 82 5f 8a 15 50 be 1e ab ed b6 aa 80 48 c9 9e 8b e2 15 6d c1 a9 5c 41 9b f0 15 f7 53 d4 17 b9 ee 72 5b 56 0b e8 34 bb 9e f1 4c d5 fd 15 c9 a3 49 61 74 4e 65 18 2c c6 57 Data Ascii: o_Nfk:%?#)e@F\>V$szWZ2+uku}D[B+'uD/+:)/`n.wSGt1EN{-l%?flYf?;Zcd_PHm\ASr[V4LIatNe,W
2024-01-12 09:48:41 UTC	8000	IN	Data Raw: f0 6a b6 5c 25 14 7f 96 0e 3d d5 43 1c 91 0b 58 40 9b 45 0b 47 18 37 28 0f 45 b3 e3 8e 59 3b f2 0b 66 eb 66 c4 07 35 f8 a4 cd de 5b 2e 20 8e 7f cd 06 6e f2 d9 5f df 89 70 a0 05 b2 43 d2 61 0d 65 0e 61 54 e3 20 3e a2 6c b6 74 50 e2 d5 c0 56 cf 8f d2 7f 9d 6c d4 42 60 5a 89 32 a3 08 45 de ee c1 ed 23 e5 f1 ed 6b 09 dd 75 5a c5 25 d7 bc 0d da 6d 7b 5e f0 e4 b5 6c 9d 7c 93 f3 c3 ca 5d b7 e5 f0 de ea 46 44 bd c1 ba 6c 94 6e 41 33 e5 6e 8a 6b bf 82 74 e9 d3 ee 7e cc ec 0f 24 8e c7 70 67 e8 bd 1e 6a 79 ed 85 99 9b fd 94 e3 14 52 06 2b 9b aa f8 e6 b6 b8 09 6d 68 7d 47 e7 73 77 55 50 4b 1b fb e0 eb 6b 8f 1e 1b 5f 82 7c c2 ab 5d f3 2c 52 cc 7e 6b 6a c3 29 fe 91 25 b7 69 d9 d9 f3 6c 4a b6 32 83 f9 b7 c9 6d 28 a5 21 d4 40 96 d2 8b 8e 2d 72 8b 16 6c ab e0 97 8b 27 37 Data Ascii: j\%=CX@EG7(EY;ff5[. n_pCaeaT >ltPVlB`Z2E#kuZ%m{^l\|]FDlnA3nkt~$pgjyR+mh}GswUPKk_\|],R~kj)%ilJ2m(!@-rl'7
2024-01-12 09:48:41 UTC	8000	IN	Data Raw: 1d 92 67 32 dd 21 0b 76 86 92 4a ca ac 2f 1c 6f 0f 91 24 93 42 46 a3 7e 84 37 ea be 76 2e 61 fe 93 5a d6 b5 ad 6b 5a d6 b5 ad 6b 5a d6 b5 ad 6b 5a d6 b5 ad 6b 5a d2 ce 4b 0f a6 5e 98 f4 61 d3 24 9e 49 03 55 d1 3d 48 53 0a df 82 4f 32 9a ec e6 f4 20 2d e1 92 9f a2 00 f5 4e 25 4e e8 cd dc c1 21 b2 3d 11 f9 3a 20 df 0f 39 89 ca 36 13 1f 1e 7c b6 6a fb f4 65 78 fc 04 d3 62 0f 9c 37 fd 28 66 68 6a 6a 4a 88 bc 0d c6 dd 0b cf b8 d5 c2 71 7e b2 4a 3b 11 7a 5d 70 d1 0a fb 1e a1 25 f9 15 a4 d5 ab 03 d1 2c a1 26 da 79 a5 84 ef 45 6d d1 c7 e8 48 45 f7 c9 e2 41 32 5e f5 40 fe 20 38 62 5b dc 84 c5 09 0e 0f e0 83 03 26 b5 73 62 63 4a dc 6d f9 e2 0d 1f aa 7e 04 c3 99 49 45 95 f2 9b b1 ec a9 61 ca 32 08 14 d0 50 4a 99 22 99 df 40 f0 ca 3a 26 0d 63 f5 f9 3e 92 96 5f 4a 26 Data Ascii: g2!vJ/o$BF~7v.aZkZkZkZkZK^a$IU=HSO2 -N%N!=: 96\|jexb7(fhjjJq~J;z]p%,&yEmHEA2^@ 8b[&sbcJm~IEa2PJ"@:&c>_J&
2024-01-12 09:48:41 UTC	8000	IN	Data Raw: 53 1c c0 12 ec 90 e2 e1 1f ce 5b c8 b1 08 3b c3 c2 1b f0 86 5a 68 a1 4c 8d cd d5 45 ec bc fe 4b 98 e8 34 94 c5 2e 71 01 01 d0 84 88 cd 1b 38 71 0d 77 88 00 64 21 c3 9e 66 29 c7 f7 32 3f 41 0d bf 64 c4 de f1 67 d6 23 87 40 3b b2 47 54 ca 01 92 e2 bc 6d cc 0b 4b 71 21 27 b3 15 32 bb 6d 23 cd 40 86 b4 f7 12 c8 66 a0 3c ac d4 62 00 50 31 2e 71 d6 28 60 3d 20 81 a3 10 df 6c 0d a2 8a 2a 89 87 15 f3 80 06 b9 18 79 a6 03 15 29 7b 66 c2 08 61 1c 1d 35 ea 1b 97 7f ea 12 d7 6a 3f 81 8a c0 3b 62 f7 8f 9f f6 7f 3e 87 74 b7 65 36 0b 9c 79 19 7f 4c c6 98 05 b6 33 0c 6a b2 25 45 2f 94 01 c0 c2 b7 64 c3 91 05 2a df 6f 64 15 ed 2c 24 6e 32 9d 90 aa b0 09 01 14 52 cb 81 b1 f2 70 30 09 64 16 26 16 ca 02 d8 12 5a 48 d6 e8 40 2a 67 30 e3 36 ff 00 a3 9b 10 f0 6a ed ee c0 94 67 Data Ascii: S[;ZhLEK4.q8qwd!f)2?Adg#@;GTmKq!'2m#@f<bP1.q(`= ly){fa5j?;b>te6yL3j%E/dod,$n2Rp0d&ZH@*g06jg
2024-01-12 09:48:41 UTC	8000	IN	Data Raw: 29 fa 46 2d 05 04 57 4d 14 91 48 ae f4 29 18 65 84 ec 4d 8c 98 24 9b 6a 68 63 4d a2 1a 17 41 51 d5 3a 5c 54 db 4a 25 d7 72 49 64 d2 49 2e 49 34 de 92 5c 5a 58 8d aa ac 5a 22 a8 8a 20 81 2a 58 62 21 34 48 a8 9d c9 e8 64 42 54 4e 06 12 87 45 a5 55 3a 2d 6a 88 db 42 d4 88 36 15 15 51 83 71 d5 69 74 82 28 ae 65 11 62 0b 12 c5 c9 25 ab 26 6a eb bd 1a 1e b4 2a e3 40 d1 8d 59 c1 77 76 42 68 a2 fb 3b 15 62 92 5c 97 59 ea 3c 18 0b 07 a7 43 15 54 61 44 0d a5 4b 70 8b f0 c3 86 c1 13 45 47 49 26 92 49 24 92 49 34 91 31 1b d1 1b 92 49 24 92 26 49 22 e8 b1 13 59 11 26 44 25 22 47 51 1c 18 11 d1 23 02 a6 e3 08 35 58 42 17 ce e4 9b 2e c1 30 88 a2 a3 d7 b8 85 8d 0c db 42 37 a2 c1 b6 8d c6 2e 8b d3 8a a2 05 81 f4 55 62 99 0b 0a 91 1a 6d ab 63 22 25 0e 8b de 02 b1 12 31 28 Data Ascii: )F-WMH)eM$jhcMAQ:\TJ%rIdI.I4\ZXZ" Xb!4HdBTNEU:-jB6Qqit(eb%&j@YwvBh;b\Y<CTaDKpEGI&I$I41I$&I"Y&D%"GQ#5XB.0B7.Ubmc"%1(
2024-01-12 09:48:41 UTC	8000	IN	Data Raw: eb dd 66 e0 43 0f ae 2d 46 eb aa 17 0e 2f 17 35 95 b4 b6 e9 81 6d 53 dd 49 f3 e6 84 77 77 44 16 9f 1e 22 64 c6 33 50 bd 8c 6b 2b 64 bb 7c 68 87 03 48 c1 b9 cf 5b 2e ec 41 7f 2d c6 6e 07 4e 46 e4 56 04 5e fd a7 72 58 e8 2a 6a 29 0a d5 37 af a1 16 26 a5 84 bf 00 a2 ea b0 f7 f3 20 a4 ed 71 51 c2 d0 05 70 87 bf 85 c9 39 54 83 be 20 38 97 8b c0 79 75 5e 11 e3 bf db 6e 6a ab e2 5c a6 5c e3 5f 63 92 cf 4b 06 92 c9 96 aa 9a 27 5e 70 69 ef 00 02 1f ac e0 0c ab 1e ae 9c 95 a1 60 b1 0c 2a e2 00 f7 98 b1 2d 8b b4 75 6f de 18 7b b0 41 5e 91 83 7d f6 a9 a8 2b f5 5c b0 4c c7 0a d0 44 3d c5 b6 ea ad a7 17 06 aa fb 5c ca ea 81 92 56 88 2c f1 38 61 4e 76 d4 3b 06 b5 0d bd 62 45 b7 ec 19 6c 8d 91 83 7a e6 f3 52 8b 2a 87 06 a5 cc 84 58 9b 78 72 99 61 f9 65 b3 0a 31 a3 c9 fd Data Ascii: fC-F/5mSIwwD"d3Pk+d\|hH[.A-nNFV^rXj)7& qQp9T 8yu^nj\\_cK'^pi`-uo{A^}+\LD=\V,8aNv;bElzR*Xxrae1
2024-01-12 09:48:41 UTC	3119	IN	Data Raw: e3 18 50 8d d6 08 dd 9a 9b 89 42 0d c4 73 dc 30 38 db 84 b9 45 54 ad 4a 44 19 45 40 04 32 b8 02 e0 09 4a a9 a5 4a 94 80 2e 50 25 2a a6 95 02 88 01 01 98 00 65 08 20 94 55 40 12 97 7c 00 fd a9 b9 52 ea 1a e4 4e e1 b6 a6 37 2d 10 6d 88 41 c4 6a 58 43 85 8d 19 77 0d e6 27 88 20 cc 2f 28 8d 45 8b 8e f3 88 0d 4b 85 cd 4c 9c 0d 4b e0 40 c4 1a 32 91 28 28 41 1e 09 5e 16 c2 00 b8 d2 9c 25 0b 48 f6 08 a6 44 24 28 c2 a9 69 c6 dc 24 96 09 4a b8 23 01 98 36 46 d7 1f 68 5e 56 09 50 0f 1a c1 b2 77 51 6a 26 5b 84 56 da e0 59 7f e0 f6 8e 78 68 2f 83 10 b6 e2 1b e0 5d 4c a8 12 92 ee 6f 30 08 77 fa 56 15 57 06 d6 18 86 f0 61 21 0a 66 04 10 63 73 71 4e a5 e4 15 71 a4 15 c9 32 e9 29 ac ca 31 37 64 a1 45 e2 5b bb 66 c0 b6 39 44 e3 ba c9 42 58 b1 67 d7 11 17 c6 dc f3 a7 83 70 Data Ascii: PBs08ETJDE@2JJ.P%*e U@\|RN7-mAjXCw' /(EKLK@2((A^%HD$(i$J#6Fh^VPwQj&[VYxh/]Lo0wVWa!fcsqNq2)17dE[f9DBXgp

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:40 UTC	591	OUT	GET /build//images/MyDHL.png HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dhl4you.hu/hu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:41 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:40 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "2ad9-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 10969 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:40 GMT Content-Type: image/png
2024-01-12 09:48:41 UTC	7628	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6b 00 00 00 3d 08 06 00 00 00 aa 68 97 e6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRk=htEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-01-12 09:48:41 UTC	3341	IN	Data Raw: 48 49 82 50 a3 3b 41 2c 35 c9 35 05 5d 40 f4 27 f9 bd 56 db f4 22 78 05 cd 1c 7d e8 4e 41 d7 cc 8a 1b db 28 9f c6 cf 0b 66 bd 60 b5 8a 07 03 b3 4e 21 d0 cc d6 15 67 a9 5e 07 da 0d ab 3d ca be 77 b2 9e 6f 2d 04 bd a3 45 fa 89 10 c5 0d 6d f4 78 ff 28 6c a3 b8 a5 ad 27 2a fb 73 05 b3 46 2f de 6b 33 30 bf 67 b1 6c fe 16 5e bc be 8e 5b 0a e6 77 42 78 4e 6f ac ad 03 14 75 56 3d ca ab 9a 60 e2 f3 aa 7f 95 99 8b da c2 cd c4 e8 56 6c 3d be 5b 27 0d fe b4 b8 b1 79 4e 69 cb e2 fb ab cf a9 eb 2a b3 8e 7d e3 9a a0 ff c9 b7 f1 78 e3 40 f5 bc 08 4b 3f 00 66 fe 12 98 bb 1f 18 3d bb 83 91 e7 d7 75 7d aa b1 af 83 f2 d6 15 f4 57 1a 88 fa 4d 94 36 fa ba f7 a0 df 5b 40 67 a1 8e d1 17 92 21 fd 22 7a c7 8a 28 6e 22 71 cf 9a a7 33 5d 44 f3 c7 0d 12 b8 8e ca 19 75 14 d7 92 31 35 Data Ascii: HIP;A,55]@'V"x}NA(f`N!g^=wo-Emx(l'sF/k30gl^[wBxNouV=`Vl=['yNi}x@K?f=u}WM6[@g!"z(n"q3]Du15

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:40 UTC	595	OUT	GET /build/images/boxchoice2.jpg HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dhl4you.hu/hu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:41 UTC	565	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:40 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "5fd1-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 24529 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:40 GMT Content-Type: image/jpeg
2024-01-12 09:48:41 UTC	7627	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-01-12 09:48:41 UTC	8000	IN	Data Raw: 12 00 df 77 42 4c 89 f3 2a 4b ab 42 1f 6e aa e1 51 70 43 c4 52 27 90 dd 84 37 12 db df 17 86 a1 9d 04 d0 41 25 5d 5c c3 20 d3 e7 e9 a4 86 a5 00 a6 79 09 05 4f 37 2b 2b 35 b8 9d 16 df b7 bd c6 20 b9 96 ea 24 44 8c 40 2b de 8d 63 d0 ca 34 f5 f3 7c e5 88 f9 b2 c0 92 0a 88 50 24 17 6b 63 69 6d 65 6b 15 ca 33 a5 bf 65 6e 20 22 5f bb 20 3b 28 20 d0 16 4c eb e6 a1 5c 86 22 ea 34 78 db 5e df 6b 6f 03 db 6d 76 49 68 96 fd cb 4b b9 12 39 a5 92 e2 59 05 61 06 45 22 91 83 dc 1d cc b3 f6 8c 4d a2 29 80 93 6e 5b 1b e9 65 16 70 2d b5 da 0b c6 b7 82 14 7b 58 60 89 16 3d 0e 64 50 80 3b a9 0f d3 e6 26 b9 61 d5 80 44 db 76 d3 74 0d b4 7b 6e d4 62 b8 98 d8 cb 35 bc 4a f3 24 a6 2f 2b 6b 74 0d 9b 15 a3 1f e0 e7 4e a6 2f 01 a2 aa f4 bb d3 2d cb 91 ed 3c 96 6e 3f 72 f6 db f4 9b Data Ascii: wBL*KBnQpCR'7A%]\ yO7++5 $D@+c4\|P$kcimek3en "_ ;( L\"4x^komvIhK9YaE"M)n[ep-{X`=dP;&aDvt{nb5J$/+ktN/-<n?r
2024-01-12 09:48:41 UTC	8000	IN	Data Raw: d1 3a 0c ee 5b fd 44 a5 48 4d d1 53 e6 c3 dd 43 a1 b0 da 3e a3 79 ed a2 f4 b8 ad 4d b5 55 4c bc 71 1a 9f f1 5b ca ee 2d c5 cd 9f 1c da ed 91 97 50 ee 4d 73 31 1e c0 68 50 63 d4 c7 a2 ed d7 e6 7e da 7d 87 a0 5f 49 41 49 46 57 64 df 64 55 30 f1 22 92 fe 2d bd 4c b8 80 4b 6f 69 b4 5b ea 15 14 b5 92 4f e7 ca 71 7c 7a 36 d7 f2 bf e6 66 eb 7f 48 6d 9a ab b9 37 e0 be c1 23 fe 2b 7d 57 2b a5 9f 6b 1d c1 42 45 88 1a 41 ca bf 3f 86 25 fe 1f 6a b1 d1 ef 7f 79 6b fa 47 68 97 cd 73 f9 97 dc 3b 72 ff 00 c4 57 2e e2 bb fd c7 1e e1 7b 86 d3 b8 f1 db 48 e0 fa 6b f5 b7 17 22 47 92 14 79 69 26 a1 a8 07 66 1d 31 87 67 d3 2c de b4 a5 7a dd 24 eb 5a d5 3c f8 d1 f2 31 6c be 9c b5 ba b7 ea 5d 73 84 9d 70 cb 27 45 c3 91 1e 4f c5 8f ab 0a ec 19 f6 b7 0a 68 15 ac 40 fe 63 a9 c6 89 Data Ascii: :[DHMSC>yMULq[-PMs1hPc~}_IAIFWddU0"-LKoi[Oq\|z6fHm7#+}W+kBEA?%jykGhs;rW.{Hk"Gyi&f1g,z$Z<1l]sp'EOh@c
2024-01-12 09:48:41 UTC	902	IN	Data Raw: f7 6b b7 c3 1c 86 38 96 f9 97 54 70 a0 00 97 f3 8e 80 1a 67 e1 8e 6d 8d 2a da 74 3a f7 d4 e7 79 c5 3a b3 e7 bd eb 17 bc 9d 98 69 2d 23 12 be ca 9f 76 3a 29 d5 1c bb 91 71 93 4f 34 10 09 06 a3 22 3a 1c 32 07 12 49 24 e6 4e 64 e0 03 b0 00 64 52 2c 66 a5 03 9f 00 dd 3f 26 00 0e fa f9 95 42 c6 a8 80 74 d2 82 bf 9e b8 75 15 02 64 b8 9a 5f e9 1c 91 ec e8 3f 36 1e a6 14 41 60 90 6a 32 3e dc 44 62 b8 77 3d ce df fd de f2 78 bf d9 ca eb fa 0e 20 e1 17 c0 96 b9 73 17 c3 cb f9 65 bd 3b 1b ee e1 1d 3a 05 bb 98 0f e7 e2 0e cd b7 f8 57 81 25 76 6b 8b 1c a0 f5 3f d4 2b 60 16 2e 4b 7e 14 74 0d 3b 38 ff 00 2a b8 ad ed 2c bf c2 89 fe a2 e7 31 74 5e b2 7a 99 17 4e 43 33 8a d6 92 24 2f fc e4 38 8b d9 59 fc a4 bf 53 73 98 e1 07 af 1e a4 43 d6 fe 09 7d bd cb 58 4d 7f 22 8c 56 Data Ascii: k8Tpgmt:y:i-#v:)qO4":2I$NddR,f?&Btud_?6A`j2>Dbw=x se;:W%vk?+`.K~t;8,1t^zNC3$/8YSsC}XM"V

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:40 UTC	601	OUT	GET /build/images/boxchoice-shadow.png HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dhl4you.hu/hu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:41 UTC	562	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:41 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "86d-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 2157 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:41 GMT Content-Type: image/png
2024-01-12 09:48:41 UTC	2157	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f9 00 00 00 1e 08 06 00 00 00 ee 0e b8 aa 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:41 UTC	533	OUT	GET /build/runtime.5cbf859b.js HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dhl4you.hu/hu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:41 UTC	598	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:41 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "f24-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 3876 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:41 GMT Vary: Accept-Encoding Content-Type: application/javascript
2024-01-12 09:48:41 UTC	3876	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 6f 2c 6e 3d 7b 7d 2c 66 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 72 3d 66 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 66 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 61 29 2c 74 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 6e 2c 65 3d 5b 5d 2c 61 2e 4f 3d 28 72 2c 74 2c 6f 2c 6e 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 66 3d 31 2f 30 3b 66 6f 72 28 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 74 2c 6f 2c 6e 5d Data Ascii: (()=>{"use strict";var e,r,t,o,n={},f={};function a(e){var r=f[e];if(void 0!==r)return r.exports;var t=f[e]={exports:{}};return n[e].call(t.exports,t,t.exports,a),t.exports}a.m=n,e=[],a.O=(r,t,o,n)=>{if(!t){var f=1/0;for(l=0;l<e.length;l++){for(var[t,o,n]

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:41 UTC	530	OUT	GET /build/3449.9039d7ee.js HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dhl4you.hu/hu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:41 UTC	604	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:41 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "1c62ee-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 1860334 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:41 GMT Vary: Accept-Encoding Content-Type: application/javascript
2024-01-12 09:48:41 UTC	7588	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 33 34 34 39 2e 39 30 33 39 64 37 65 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 34 39 5d 2c 7b 39 36 36 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 35 31 36 30 39 29 7d 2c 35 35 34 34 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 72 28 36 34 38 36 37 29 2c 6e 3d 72 28 33 36 30 32 36 29 2c 69 3d 72 28 34 33 37 32 29 2c 6f 3d 72 28 31 35 33 32 37 29 2c 6c 3d 72 28 39 34 30 39 37 29 2c 73 3d 72 28 38 34 Data Ascii: /! For license information please see 3449.9039d7ee.js.LICENSE.txt /(self.webpackChunk=self.webpackChunk\|\|[]).push([[3449],{9669:(e,t,r)=>{e.exports=r(51609)},55448:(e,t,r)=>{"use strict";var a=r(64867),n=r(36026),i=r(4372),o=r(15327),l=r(94097),s=r(84
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 3d 7b 61 64 61 70 74 65 72 3a 28 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 26 26 22 5b 6f 62 6a 65 63 74 20 70 72 6f 63 65 73 73 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 70 72 6f 63 65 73 73 29 29 26 26 28 6c 3d 72 28 35 35 34 34 38 29 29 2c 6c 29 2c 74 72 61 6e 73 66 6f 72 6d 52 65 71 75 65 73 74 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 2c 22 41 63 63 65 70 74 22 29 2c 6e 28 74 2c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 2c 61 2e 69 73 46 6f 72 6d 44 61 74 61 28 65 29 7c 7c 61 2e 69 73 41 72 72 61 79 Data Ascii: ={adapter:(("undefined"!=typeof XMLHttpRequest\|\|"undefined"!=typeof process&&"[object process]"===Object.prototype.toString.call(process))&&(l=r(55448)),l),transformRequest:[function(e,t){return n(t,"Accept"),n(t,"Content-Type"),a.isFormData(e)\|\|a.isArray
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 47 53 74 72 69 6e 67 4c 69 73 74 2c 53 56 47 54 72 61 6e 73 66 6f 72 6d 4c 69 73 74 2c 53 6f 75 72 63 65 42 75 66 66 65 72 4c 69 73 74 2c 53 74 79 6c 65 53 68 65 65 74 4c 69 73 74 2c 54 65 78 74 54 72 61 63 6b 43 75 65 4c 69 73 74 2c 54 65 78 74 54 72 61 63 6b 4c 69 73 74 2c 54 6f 75 63 68 4c 69 73 74 22 2e 73 70 6c 69 74 28 22 2c 22 29 2c 73 3d 30 3b 73 3c 6c 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 63 3d 6c 5b 73 5d 2c 75 3d 61 5b 63 5d 2c 68 3d 75 26 26 75 2e 70 72 6f 74 6f 74 79 70 65 3b 68 26 26 21 68 5b 6f 5d 26 26 6e 28 68 2c 6f 2c 63 29 2c 69 5b 63 5d 3d 69 2e 41 72 72 61 79 7d 7d 2c 37 39 37 34 32 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 62 79 74 65 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: GStringList,SVGTransformList,SourceBufferList,StyleSheetList,TextTrackCueList,TextTrackList,TouchList".split(","),s=0;s<l.length;s++){var c=l[s],u=a[c],h=u&&u.prototype;h&&!h[o]&&n(h,o,c),i[c]=i.Array}},79742:(e,t)=>{"use strict";t.byteLength=function(e){
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 4f 39 3a 28 29 3d 3e 57 75 2c 73 4e 6f 3a 28 29 3d 3e 59 75 2c 44 59 52 3a 28 29 3d 3e 4b 75 2c 65 55 41 3a 28 29 3d 3e 4a 75 2c 59 6e 62 3a 28 29 3d 3e 58 75 2c 6a 65 72 3a 28 29 3d 3e 51 75 2c 71 24 67 3a 28 29 3d 3e 65 68 2c 78 58 39 3a 28 29 3d 3e 74 68 2c 47 55 63 3a 28 29 3d 3e 72 68 2c 52 4c 45 3a 28 29 3d 3e 61 68 2c 79 35 3a 28 29 3d 3e 6e 68 2c 59 4f 52 3a 28 29 3d 3e 69 68 2c 79 4b 75 3a 28 29 3d 3e 6f 68 2c 70 30 64 3a 28 29 3d 3e 6c 68 2c 68 4d 31 3a 28 29 3d 3e 73 68 2c 6f 55 6e 3a 28 29 3d 3e 63 68 2c 4a 79 70 3a 28 29 3d 3e 75 68 2c 78 4c 7a 3a 28 29 3d 3e 68 68 2c 55 4e 55 3a 28 29 3d 3e 64 68 2c 79 58 71 3a 28 29 3d 3e 66 68 2c 6d 41 50 3a 28 29 3d 3e 70 68 2c 61 6a 76 3a 28 29 3d 3e 76 68 2c 6f 71 57 3a 28 29 3d 3e 6d 68 2c 59 59 48 3a Data Ascii: O9:()=>Wu,sNo:()=>Yu,DYR:()=>Ku,eUA:()=>Ju,Ynb:()=>Xu,jer:()=>Qu,q$g:()=>eh,xX9:()=>th,GUc:()=>rh,RLE:()=>ah,y5:()=>nh,YOR:()=>ih,yKu:()=>oh,p0d:()=>lh,hM1:()=>sh,oUn:()=>ch,Jyp:()=>uh,xLz:()=>hh,UNU:()=>dh,yXq:()=>fh,mAP:()=>ph,ajv:()=>vh,oqW:()=>mh,YYH:
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 30 38 2e 37 30 38 6c 2d 33 20 33 61 2e 35 2e 35 20 30 20 30 20 31 2d 2e 37 30 38 20 30 6c 2d 33 2d 33 61 2e 35 2e 35 20 30 20 31 20 31 20 2e 37 30 38 2d 2e 37 30 38 4c 37 2e 35 20 31 30 2e 32 39 33 56 34 2e 35 41 2e 35 2e 35 20 30 20 30 20 31 20 38 20 34 7a 22 2f 3e 27 29 2c 4b 3d 75 28 22 41 72 72 6f 77 44 6f 77 6e 53 71 75 61 72 65 46 69 6c 6c 22 2c 27 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 20 30 61 32 20 32 20 30 20 30 20 30 2d 32 20 32 76 31 32 61 32 20 32 20 30 20 30 20 30 20 32 20 32 68 31 32 61 32 20 32 20 30 20 30 20 30 20 32 2d 32 56 32 61 32 20 32 20 30 20 30 20 30 2d 32 2d 32 48 32 7a 6d 36 2e 35 20 34 2e 35 61 2e 35 2e 35 20 30 20 30 20 30 2d 31 20 30 Data Ascii: .5.5 0 0 1 .708.708l-3 3a.5.5 0 0 1-.708 0l-3-3a.5.5 0 1 1 .708-.708L7.5 10.293V4.5A.5.5 0 0 1 8 4z"/>'),K=u("ArrowDownSquareFill",'<path fill-rule="evenodd" d="M2 0a2 2 0 0 0-2 2v12a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V2a2 2 0 0 0-2-2H2zm6.5 4.5a.5.5 0 0 0-1 0
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 61 64 67 65 34 6b 22 2c 27 3c 70 61 74 68 20 64 3d 22 4d 34 2e 38 30 37 20 35 2e 30 30 31 43 34 2e 30 32 31 20 36 2e 32 39 38 20 33 2e 32 30 33 20 37 2e 36 20 32 2e 35 20 38 2e 39 31 37 76 2e 39 37 31 68 32 2e 39 30 35 56 31 31 68 31 2e 31 31 32 56 39 2e 38 38 38 68 2e 37 33 33 56 38 2e 39 33 68 2d 2e 37 33 33 56 35 2e 30 30 31 68 2d 31 2e 37 31 7a 6d 2d 31 2e 32 33 20 33 2e 39 33 76 2d 2e 30 33 32 61 34 36 2e 37 38 31 20 34 36 2e 37 38 31 20 30 20 30 20 31 20 31 2e 37 36 36 2d 33 2e 30 30 31 68 2e 30 36 32 56 38 2e 39 33 48 33 2e 35 37 37 7a 6d 39 2e 38 33 31 2d 33 2e 39 33 68 2d 31 2e 33 30 36 4c 39 2e 38 33 35 20 37 2e 36 38 37 68 2d 2e 30 35 37 56 35 48 38 2e 35 39 76 36 68 31 2e 31 38 37 56 39 2e 30 37 35 6c 2e 36 31 35 2d 2e 36 39 39 4c 31 32 2e 30 Data Ascii: adge4k",'<path d="M4.807 5.001C4.021 6.298 3.203 7.6 2.5 8.917v.971h2.905V11h1.112V9.888h.733V8.93h-.733V5.001h-1.71zm-1.23 3.93v-.032a46.781 46.781 0 0 1 1.766-3.001h.062V8.93H3.577zm9.831-3.93h-1.306L9.835 7.687h-.057V5H8.59v6h1.187V9.075l.615-.699L12.0
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 4d 38 20 31 36 61 32 20 32 20 30 20 30 20 30 20 32 2d 32 48 36 61 32 20 32 20 30 20 30 20 30 20 32 20 32 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 38 20 31 2e 39 31 38 6c 2d 2e 37 39 37 2e 31 36 31 41 34 2e 30 30 32 20 34 2e 30 30 32 20 30 20 30 20 30 20 34 20 36 63 30 20 2e 36 32 38 2d 2e 31 33 34 20 32 2e 31 39 37 2d 2e 34 35 39 20 33 2e 37 34 32 2d 2e 31 36 2e 37 36 37 2d 2e 33 37 36 20 31 2e 35 36 36 2d 2e 36 36 33 20 32 2e 32 35 38 68 31 30 2e 32 34 34 63 2d 2e 32 38 37 2d 2e 36 39 32 2d 2e 35 30 32 2d 31 2e 34 39 2d 2e 36 36 33 2d 32 2e 32 35 38 43 31 32 2e 31 33 34 20 38 2e 31 39 37 20 31 32 20 36 2e 36 32 38 20 31 32 20 36 61 34 2e 30 30 32 20 34 2e 30 30 32 20 30 20 30 20 30 2d 33 2e 32 Data Ascii: M8 16a2 2 0 0 0 2-2H6a2 2 0 0 0 2 2z"/><path fill-rule="evenodd" d="M8 1.918l-.797.161A4.002 4.002 0 0 0 4 6c0 .628-.134 2.197-.459 3.742-.16.767-.376 1.566-.663 2.258h10.244c-.287-.692-.502-1.49-.663-2.258C12.134 8.197 12 6.628 12 6a4.002 4.002 0 0 0-3.2
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 33 37 76 38 2e 31 32 36 63 2e 37 30 33 2e 31 38 20 31 2e 32 35 36 2e 37 33 34 20 31 2e 34 33 37 20 31 2e 34 33 37 68 38 2e 31 32 36 61 32 2e 30 30 34 20 32 2e 30 30 34 20 30 20 30 20 31 20 31 2e 34 33 37 2d 31 2e 34 33 37 56 33 2e 39 33 37 41 32 2e 30 30 34 20 32 2e 30 30 34 20 30 20 30 20 31 20 31 32 2e 30 36 33 20 32 2e 35 48 33 2e 39 33 37 41 32 2e 30 30 34 20 32 2e 30 30 34 20 30 20 30 20 31 20 32 2e 35 20 33 2e 39 33 37 7a 4d 31 34 20 31 61 31 20 31 20 30 20 31 20 30 20 30 20 32 20 31 20 31 20 30 20 30 20 30 20 30 2d 32 7a 4d 32 20 31 33 61 31 20 31 20 30 20 31 20 30 20 30 20 32 20 31 20 31 20 30 20 30 20 30 20 30 2d 32 7a 6d 31 32 20 30 61 31 20 31 20 30 20 31 20 30 20 30 20 32 20 31 20 31 20 30 20 30 20 30 20 30 2d 32 7a 22 2f 3e 27 29 2c 70 72 3d Data Ascii: 37v8.126c.703.18 1.256.734 1.437 1.437h8.126a2.004 2.004 0 0 1 1.437-1.437V3.937A2.004 2.004 0 0 1 12.063 2.5H3.937A2.004 2.004 0 0 1 2.5 3.937zM14 1a1 1 0 1 0 0 2 1 1 0 0 0 0-2zM2 13a1 1 0 1 0 0 2 1 1 0 0 0 0-2zm12 0a1 1 0 1 0 0 2 1 1 0 0 0 0-2z"/>'),pr=
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 39 33 2d 2e 31 39 37 2e 36 32 35 2d 2e 34 35 33 2e 38 36 37 2d 2e 38 32 36 2e 30 39 34 2d 2e 31 34 34 2e 31 38 34 2d 2e 32 39 37 2e 32 38 37 2d 2e 34 37 32 6c 2e 31 31 37 2d 2e 31 39 38 63 2e 31 35 31 2d 2e 32 35 35 2e 33 32 36 2d 2e 35 34 2e 35 34 36 2d 2e 38 34 38 2e 35 32 38 2d 2e 37 33 39 20 31 2e 32 2d 2e 39 32 35 20 31 2e 37 34 36 2d 2e 38 39 36 2e 31 32 36 2e 30 30 37 2e 32 34 33 2e 30 32 35 2e 33 34 38 2e 30 34 38 2e 30 36 32 2d 2e 31 37 32 2e 31 34 32 2d 2e 33 38 2e 32 33 38 2d 2e 36 30 38 2e 32 36 31 2d 2e 36 31 39 2e 36 35 38 2d 31 2e 34 31 39 20 31 2e 31 38 37 2d 32 2e 30 36 39 20 32 2e 31 37 35 2d 32 2e 36 37 20 36 2e 31 38 2d 36 2e 32 30 36 20 39 2e 31 31 37 2d 38 2e 31 30 34 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 35 39 36 2e 30 34 7a 22 2f Data Ascii: 93-.197.625-.453.867-.826.094-.144.184-.297.287-.472l.117-.198c.151-.255.326-.54.546-.848.528-.739 1.2-.925 1.746-.896.126.007.243.025.348.048.062-.172.142-.38.238-.608.261-.619.658-1.419 1.187-2.069 2.175-2.67 6.18-6.206 9.117-8.104a.5.5 0 0 1 .596.04z"/
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 35 2e 35 20 30 20 30 20 30 2d 2e 35 2d 2e 35 68 2d 31 7a 22 2f 3e 27 29 2c 5f 61 3d 75 28 22 43 61 6c 65 6e 64 61 72 32 58 22 2c 27 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 2e 35 20 30 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 35 2e 35 56 31 68 38 56 2e 35 61 2e 35 2e 35 20 30 20 30 20 31 20 31 20 30 56 31 68 31 61 32 20 32 20 30 20 30 20 31 20 32 20 32 76 31 31 61 32 20 32 20 30 20 30 20 31 2d 32 20 32 48 32 61 32 20 32 20 30 20 30 20 31 2d 32 2d 32 56 33 61 32 20 32 20 30 20 30 20 31 20 32 2d 32 68 31 56 2e 35 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 35 2d 2e 35 7a 4d 32 20 32 61 31 20 31 20 30 20 30 20 30 2d 31 20 31 76 31 31 61 31 20 31 20 30 20 30 20 30 20 31 20 31 68 31 32 61 31 20 31 20 30 20 30 20 30 Data Ascii: 5.5 0 0 0-.5-.5h-1z"/>'),_a=u("Calendar2X",'<path fill-rule="evenodd" d="M3.5 0a.5.5 0 0 1 .5.5V1h8V.5a.5.5 0 0 1 1 0V1h1a2 2 0 0 1 2 2v11a2 2 0 0 1-2 2H2a2 2 0 0 1-2-2V3a2 2 0 0 1 2-2h1V.5a.5.5 0 0 1 .5-.5zM2 2a1 1 0 0 0-1 1v11a1 1 0 0 0 1 1h12a1 1 0 0 0

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:41 UTC	529	OUT	GET /build/app.6a7fe505.js HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dhl4you.hu/hu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:42 UTC	602	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:41 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "5a4b6-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 369846 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:41 GMT Vary: Accept-Encoding Content-Type: application/javascript
2024-01-12 09:48:42 UTC	7590	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 36 61 37 66 65 35 30 35 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 34 33 5d 2c 7b 32 36 35 38 37 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 28 36 36 39 39 32 29 2c 72 28 34 31 35 33 39 29 2c 72 28 38 38 36 37 34 29 2c 72 28 37 38 37 38 33 29 2c 72 28 33 33 39 34 38 29 2c 72 28 38 39 35 35 34 29 2c 72 28 35 34 37 34 37 29 2c 72 28 34 37 39 34 31 29 2c 72 28 37 34 39 31 36 29 2c 72 28 32 33 31 32 33 29 2c 72 28 32 31 32 34 39 29 2c 72 Data Ascii: /! For license information please see app.6a7fe505.js.LICENSE.txt /(self.webpackChunk=self.webpackChunk\|\|[]).push([[2143],{26587:(t,e,r)=>{"use strict";r(66992),r(41539),r(88674),r(78783),r(33948),r(89554),r(54747),r(47941),r(74916),r(23123),r(21249),r
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 3d 69 7d 7d 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 20 70 2e 70 72 6f 74 6f 74 79 70 65 3d 68 2c 73 28 79 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 68 29 2c 73 28 68 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 70 29 2c 70 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 73 28 68 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 2c 74 2e 69 73 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d Data Ascii: =i}}return{next:k}}function k(){return{value:void 0,done:!0}}return p.prototype=h,s(y,"constructor",h),s(h,"constructor",p),p.displayName=s(h,a,"GeneratorFunction"),t.isGeneratorFunction=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e=
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 74 72 73 3a 7b 74 6f 3a 74 2e 69 73 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 44 69 73 61 62 6c 65 64 28 65 29 3f 7b 70 61 74 68 3a 22 23 22 2c 6e 61 6d 65 3a 22 23 22 7d 3a 74 2e 67 65 74 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 4c 6f 63 61 74 69 6f 6e 28 65 29 2c 65 78 61 63 74 3a 22 22 7d 7d 2c 5b 74 2e 5f 76 28 22 5c 6e 20 20 20 20 20 20 20 20 22 2b 74 2e 5f 73 28 74 2e 67 65 74 54 72 61 6e 73 6c 61 74 65 64 4e 61 76 69 67 61 74 69 6f 6e 4c 61 62 65 6c 28 65 29 29 2b 22 5c 6e 20 20 20 20 22 29 5d 29 7d 29 29 2c 31 29 3a 74 2e 5f 65 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 57 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b Data Ascii: trs:{to:t.isNavigationItemDisabled(e)?{path:"#",name:"#"}:t.getNavigationItemLocation(e),exact:""}},[t._v("\n "+t._s(t.getTranslatedNavigationLabel(e))+"\n ")])})),1):t._e()};function W(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){
2024-01-12 09:48:42 UTC	16384	IN	Data Raw: 3d 6e 65 77 20 62 28 63 28 65 2c 72 2c 6e 2c 6f 29 2c 69 29 3b 72 65 74 75 72 6e 20 74 2e 69 73 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 28 72 29 3f 61 3a 61 2e 6e 65 78 74 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 64 6f 6e 65 3f 74 2e 76 61 6c 75 65 3a 61 2e 6e 65 78 74 28 29 7d 29 29 7d 2c 67 28 79 29 2c 73 28 79 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 22 29 2c 73 28 79 2c 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 73 28 79 2c 22 74 6f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 22 7d 29 29 2c 74 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 Data Ascii: =new b(c(e,r,n,o),i);return t.isGeneratorFunction(r)?a:a.next().then((function(t){return t.done?t.value:a.next()}))},g(y),s(y,a,"Generator"),s(y,o,(function(){return this})),s(y,"toString",(function(){return"[object Generator]"})),t.keys=function(t){var e
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 77 20 45 72 72 6f 72 28 22 74 72 79 20 73 74 61 74 65 6d 65 6e 74 20 77 69 74 68 6f 75 74 20 63 61 74 63 68 20 6f 72 20 66 69 6e 61 6c 6c 79 22 29 3b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 72 65 74 75 72 6e 20 6e 28 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7d 7d 7d 7d 2c 61 62 72 75 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 2d 2d 6e 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 6e 5d 3b 69 66 28 6f 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 72 2e 63 61 6c 6c 28 6f 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 Data Ascii: w Error("try statement without catch or finally");if(this.prev<i.finallyLoc)return n(i.finallyLoc)}}}},abrupt:function(t,e){for(var n=this.tryEntries.length-1;n>=0;--n){var o=this.tryEntries[n];if(o.tryLoc<=this.prev&&r.call(o,"finallyLoc")&&this.prev<o.f
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 73 2e 64 6f 6e 65 3d 21 31 2c 74 68 69 73 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 2e 61 72 67 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 66 6f 72 45 61 63 68 28 78 29 2c 21 74 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 74 68 69 73 29 22 74 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 26 26 21 69 73 4e 61 4e 28 2b 65 2e 73 6c 69 63 65 28 31 29 29 26 26 28 74 68 69 73 5b 65 5d 3d 76 6f 69 64 20 30 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 6f 6e 65 3d 21 30 3b 76 61 72 20 74 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 30 5d 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 Data Ascii: s.done=!1,this.delegate=null,this.method="next",this.arg=void 0,this.tryEntries.forEach(x),!t)for(var e in this)"t"===e.charAt(0)&&r.call(this,e)&&!isNaN(+e.slice(1))&&(this[e]=void 0)},stop:function(){this.done=!0;var t=this.tryEntries[0].completion;if("
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 50 65 28 74 29 7d 76 61 72 20 44 65 3d 5b 22 72 65 71 75 69 72 65 64 5f 69 66 5f 65 6d 70 74 79 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 49 65 28 74 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d Data Ascii: n"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},Pe(t)}var De=["required_if_empty"];function Ie(t,e){if(null==
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 2c 65 2e 64 6f 6e 65 3d 21 30 2c 65 7d 3b 72 65 74 75 72 6e 20 69 2e 6e 65 78 74 3d 69 7d 7d 72 65 74 75 72 6e 7b 6e 65 78 74 3a 45 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 20 70 2e 70 72 6f 74 6f 74 79 70 65 3d 68 2c 73 28 79 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 68 29 2c 73 28 68 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 70 29 2c 70 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 73 28 68 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 2c 74 2e 69 73 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 Data Ascii: ,e.done=!0,e};return i.next=i}}return{next:E}}function E(){return{value:void 0,done:!0}}return p.prototype=h,s(y,"constructor",h),s(h,"constructor",p),p.displayName=s(h,a,"GeneratorFunction"),t.isGeneratorFunction=function(t){var e="function"==typeof t&&t
2024-01-12 09:48:43 UTC	16384	IN	Data Raw: 65 22 29 3f 74 2e 24 74 28 22 66 69 6c 65 73 2e 66 69 6c 65 4e 61 6d 65 22 29 3a 22 46 69 6c 65 20 6e 61 6d 65 22 29 2b 22 3a 22 29 5d 29 2c 74 2e 5f 76 28 22 20 22 29 2c 72 28 22 62 72 22 29 2c 74 2e 5f 76 28 22 20 22 29 2c 72 28 22 73 70 61 6e 22 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 65 2e 66 69 6c 65 4e 61 6d 65 29 29 5d 29 5d 29 2c 74 2e 5f 76 28 22 20 22 29 2c 72 28 22 70 22 2c 5b 72 28 22 62 22 2c 5b 74 2e 5f 76 28 74 2e 5f 73 28 74 2e 24 74 65 28 22 66 69 6c 65 73 2e 66 69 6c 65 53 69 7a 65 22 29 3f 74 2e 24 74 28 22 66 69 6c 65 73 2e 66 69 6c 65 53 69 7a 65 22 29 3a 22 46 69 6c 65 20 73 69 7a 65 22 29 2b 22 3a 22 29 5d 29 2c 74 2e 5f 76 28 22 20 22 29 2c 72 28 22 62 72 22 29 2c 74 2e 5f 76 28 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: e")?t.$t("files.fileName"):"File name")+":")]),t._v(" "),r("br"),t._v(" "),r("span",[t._v(t._s(e.fileName))])]),t._v(" "),r("p",[r("b",[t._v(t._s(t.$te("files.fileSize")?t.$t("files.fileSize"):"File size")+":")]),t._v(" "),r("br"),t._v("\n
2024-01-12 09:48:44 UTC	16384	IN	Data Raw: 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 61 3d 21 30 29 3b 7d 63 61 74 63 68 28 74 29 7b 73 3d 21 30 2c 6f 3d 74 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 61 7c 7c 6e 75 6c 6c 3d 3d 72 2e 72 65 74 75 72 6e 7c 7c 72 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 73 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 69 7d 28 74 2c 65 29 7c 7c 4f 72 28 74 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 Data Ascii: length!==e);a=!0);}catch(t){s=!0,o=t}finally{try{a\|\|null==r.return\|\|r.return()}finally{if(s)throw o}}return i}(t,e)\|\|Or(t,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects

Timestamp	Bytes transferred	Direction	Data
2024-01-12 09:48:44 UTC	602	OUT	GET /build/fonts/FrutigerCondensedCE.6ade4a0b.woff HTTP/1.1 Host: dhl4you.hu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dhl4you.hu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dhl4you.hu/build/app-styles.9786b6ca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-12 09:48:44 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 12 Jan 2024 09:48:44 GMT Server: - Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 05 Jan 2024 13:13:27 GMT ETag: "44d8-60e329d17cbc0" Accept-Ranges: bytes Content-Length: 17624 Cache-Control: max-age=86400, s-maxage=86400, public, must-revalidate, proxy-revalidate Expires: Sat, 13 Jan 2024 09:48:44 GMT Content-Type: font/woff
2024-01-12 09:48:44 UTC	7628	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 44 d8 00 0f 00 00 00 00 8a a4 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 58 00 00 00 1a 00 00 00 1c 51 d2 bd 23 47 44 45 46 00 00 01 74 00 00 00 3d 00 00 00 48 05 00 05 e6 47 50 4f 53 00 00 01 b4 00 00 05 91 00 00 09 dc 7e a2 2c bf 47 53 55 42 00 00 07 48 00 00 01 52 00 00 02 f8 74 f1 82 f9 4f 53 2f 32 00 00 08 9c 00 00 00 5b 00 00 00 60 7d 0b 8a 77 63 6d 61 70 00 00 08 f8 00 00 03 42 00 00 04 8e 80 48 e8 c4 67 61 73 70 00 00 0c 3c 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 0c 44 00 00 2b 1a 00 00 5b 9c 70 0d 7b 45 68 65 61 64 00 00 37 60 00 00 00 35 00 00 00 36 06 8a fb b8 68 68 65 61 00 00 37 98 00 00 00 21 00 00 00 24 06 b8 03 e5 68 6d 74 78 00 00 37 bc 00 00 02 Data Ascii: wOFFDFFTMXQ#GDEFt=HGPOS~,GSUBHRtOS/2[`}wcmapBHgasp<glyfD+[p{Ehead7`56hhea7!$hmtx7
2024-01-12 09:48:44 UTC	8000	IN	Data Raw: d3 9d 77 de b9 db d9 e2 44 8b f9 3f 22 33 7f 0f bc dd 0d 78 b7 7a bb 41 9e 7e 2e cc 0b b1 83 54 aa dc ee 5f a2 f9 fc 03 e8 3c b9 13 fa 6a bd 1b d0 fd c0 ab 42 ce 4e 62 48 a2 66 0b 8c a1 8b ea 2d 13 b1 8c 82 b0 d3 50 c2 a6 83 6e 34 e4 b5 51 95 ed a5 e5 25 57 f7 1a ac 0d 83 5d e9 3d f1 51 95 96 7c 8b 79 b0 d2 54 96 91 a9 5f 3a ab 33 c6 de 5d e4 68 b1 cd 9f 55 58 9c 5b 94 de 64 6e 33 b8 0c fa ae da 01 65 54 87 2e 5f 9f 9b 55 6e 28 2f 36 b6 69 54 36 53 db 00 3a a2 73 e4 17 da 75 15 86 02 c0 cf 7b 0e 2f e1 3e c0 c7 19 1d 24 be 45 a2 c9 89 5d 5d 5d 78 c9 62 f8 a1 31 41 31 2e 94 0c f2 95 07 bc 0b 0c fd 68 f4 74 33 c7 5c cf b0 78 7b 16 18 a2 2c 31 23 81 e3 ab 62 87 eb 87 af 59 3d d2 b4 30 aa 2a a2 d6 e4 6a ef ac 37 55 f3 d9 27 50 ee 89 13 fc 7b bb 0e 7e 7d f0 e0 Data Ascii: wD?"3xzA~.T_<jBNbHf-Pn4Q%W]=Q\|yT_:3]hUX[dn3eT._Un(/6iT6S:su{/>$E]]]xb1A1.ht3\x{,1#bY=0*j7U'P{~}
2024-01-12 09:48:44 UTC	1996	IN	Data Raw: 19 ee 0a 00 be ae ad 42 0d aa bf 3d 38 0b 74 0d 56 e0 af 40 d7 61 b1 b6 10 e8 06 b4 6b bf 04 7a 0e 1e d7 fe 09 f4 3d 58 a8 7f 13 e8 79 78 5c 3f 09 f4 02 1c 35 be 08 f4 7d f8 aa f1 53 a0 97 1a 3b 4b 2b 81 7e 00 2b cb a3 40 3f 84 c5 e5 df c8 4b 6d 6e 91 9e 1c 7b f4 74 0d d6 e0 8f 40 d7 e1 11 fc 1d e8 06 fc 58 7b 18 e8 39 58 ad fd 19 e8 7b f0 65 fd 71 a0 e7 61 b5 fe 6d a0 17 e0 d7 7a 3f d0 f7 21 6a fc 10 e8 a5 f9 bc f1 7b a0 1f c0 da f2 41 a0 1f c2 a3 e5 9f a1 03 6f 61 03 5a 10 41 0c eb 80 d0 84 5d fa 6f 12 d5 86 14 34 74 41 12 7d 02 23 b0 14 b3 84 21 dd 11 5e 43 0e 09 e9 78 8d 2d d2 8c c9 02 c2 11 94 24 91 93 9c a2 15 49 b2 20 0b 19 c9 21 6b 19 a2 34 5d d0 79 bb d1 8a e2 75 6c ee ee 36 b1 9d ea ae c4 93 91 75 72 68 f1 75 9e 44 eb b8 15 c7 2d 3c 2a 65 ee 54 Data Ascii: B=8tV@akz=Xyx\?5}S;K+~+@?Kmn{t@X{9X{eqamz?!j{AoaZA]o4tA}#!^Cx-$I !k4]yul6urhuD-<*eT