Edit tour

Windows Analysis Report
https://mdtaxconnect.gov//rptp/portal/home

Overview

General Information

Sample URL:	https://mdtaxconnect.gov//rptp/portal/home
Analysis ID:	1395394
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML page contains suspicious base64 encoded javascript

Phishing site detected (based on OCR NLP Model)

Creates files inside the system directory

Form action URLs do not match main URL

Found iframes

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Invalid 'forgot password' link found

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7160 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2256,i,11884261782894997089,10179543163277250750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6000 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mdtaxconnect.gov//rptp/portal/home MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://mdtaxconnect.gov//rptp/portal/home

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/internationalPhone.js?modifiedDate=2023-12-21T12:52	Avira URL Cloud: Label: phishing
Source: https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Quick-Links.png	Avira URL Cloud: Label: phishing
Source: https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png	Avira URL Cloud: Label: phishing
Source: https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png	Avira URL Cloud: Label: phishing
Source: https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/css/rsi/RSI_Custom.css?modifiedDate=2024-02-13T12:52	Avira URL Cloud: Label: phishing
Source: https://mdtaxconnect.gov/rptp/portal/home/md-sutec/	Avira URL Cloud: Label: phishing
Source: https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png	Avira URL Cloud: Label: phishing
Source: https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/itscValidations.js?modifiedDate=2023-12-21T12:52	Avira URL Cloud: Label: phishing
Source: https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/License-Permit-Search.png	Avira URL Cloud: Label: phishing
Source: https://mdtaxconnect.gov/rptp/portal/business/register-new-business	Avira URL Cloud: Label: phishing

Phishing

HTML page contains suspicious base64 encoded javascript

Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Base64 decoded: <script>
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Base64 decoded: <script>
Source: https://mdtaxconnect.gov/rptp/portal/home/md-sutec/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Base64 decoded: <script>

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM	ML Model on OCR Text: Matched 90.7% probability on "maryland,;; tax Translate Search Personal income taxes are due on April 15, 2024. File for free using iFile. Home Home Exemption Certitet Register a Maryland Sales and Use Tax Exemption Certificate Application To access the SCITEC renewal and additional features of Maryland Tax Conna:t you must register for an account Sign-Up Now! indicate: reguired field Terms and Conditions TERMS OF USE Welcome to the Comptroller of MeryJend (COM) Your privacy is importer: cerefully review Terms cf use (TCIJ) before using Fcrt.3L These esteblish binding egreement governs your use of this service end wi-.h Frivecy Folic}' end Policy age-her, "Terms"), govern your use of this service. 3}' using this service, you be Oound Terms. 'f ycu do nct agree tc Terms, ycu mey not use *.his service The following policies eppVy only to the use of Confidentiality The you eccess through Fcrtel is confidentiel and protected under St$.e end federel In. uneuthcrized eccess cr disclosure cf Fcrt31 mey subject you to civil end/cr criminel peneLties under: Anncteted Code of Merylnd, S 13-1018, Title 18, united code, S 1030s, Title 26, united stzes S S, 7213, 72134, 7431. Disclaimer of Liability Neither COM nor of its employees or agents will lies for Eny improper or incorrect use of the informeticn through Fortel CCM employees end egents essume no responsibility fcr use of the informeticru In nc event will COM, Fcrtel cr an}' of -.heir employees cr egents be lieble for Eny direc., indirect incident?l, sp.ciel, exemplery, or demges (including, not Limi-.ed to, procurement or substitute goods cr services; loss cf use, dete, or profits; or business interruption) however end on ery cf liilitj, whether in ccntrect strict liebility, cr tort (including negligence cr Otherwise} arising in cut cf use cf-.hrs E}Etem, ev,'en if EdviEed cf pcssiilitj cf such This discl?imer cf liebili:y epplies er,y derges or injury, including Sot limited to those any feilure cf performer-:ce, error, omission, interruption, deletion, defect, de[ey in opereticn cr trensmissicn, computer virus, communication line feilure, theft cr destruction or uneuorized eccess to, Eltereticn ot or use of record, whether for breech cf contree., tcrtucus behevicr negligence cr under any other cause of Ec.ion Disclaimer for Extemal Link Cancel "
Source: Chrome DOM	ML Model on OCR Text: Matched 97.4% probability on "maryland,;; tax Translate Search Personal income taxes are due on April 15, 2024. File for free using iFile. Home Businesses New Susinsss Register a New Business indicate: recuired field Terms and Conditions TERMS OF USE Welcome to the Comptroller cf Merylend (COM) Your privecy is carefully review Terms cf use (TCIJ) before using FcrteL These esteblish binding egreement governs your use of this service end with Frivecvj Folic}' end Policy (together, "Terms"), govern your use of this service using this service, you be sound Terms. If you do nct egree tc Terms, you me}' use this servic The fallowing policies apply only tc use cf Forts Confidentiality The you eccess through Fcrtel is confidentiel end under Stete end federel uneu-.hcrized eccess or disclosure cf Fcrtel mey subject you to clvil end/cr criminal peneLties under: Annotated Code of Merylend, Tex-Generel Article S 13-1018, Title 18, united Stetes Code, S 103C, Title 26, United St3.eE Code, S S, 7213, 72134, 7431 Disclaimer of Liability Neither COM nor eny of its employes or egents will lieble for any improper or incorrect use of the information eveileble through ForteL CCM employees end egents essume no responsibility for use of the informeticru In nc even: will COM, Fcrtel cr of their employees be Liebl for Eny direct, indirect incident?l, ssciel, exempLery, or demeges (including, but not limi-.ed procuremer,: or subs:itute goods cr services; loss of use, dete or profits; or business interrupticn) end on ery cf liilitj, wheer in ccntrect: s-.rict liebili:y, cr tcrt (including negligence cr otherwise} arising in Eny w.j cut cf use cf this system, even Edvised of possibility of such demo. This discleimer of liebility epplies to ery demoes or injury, including not limited tc by Eny feilure cf performance, error, omission, interruption, Sele-.icn, defect, deley in opereticn cr -.rensmission, computer virus, communicetion line feilure, theft or destruction cr uneuthorized t, elteretion ot cr use of record, whether for of contrec, tcrtucus negligence cr under any or-her cause of ec.ion Disclaimer for Extemal Link Cancel "

Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te mdtaxconnect googleapis
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te mdtaxconnect googleapis
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te mdtaxconnect googleapis
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te mdtaxconnect googleapis
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#mainContent	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te mdtaxconnect googleapis
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te mdtaxconnect googleapis
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#void	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te mdtaxconnect googleapis

Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Iframe src: data:text/html;charset=UTF-8;base64,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
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Iframe src: data:text/html;charset=UTF-8;base64,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

Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/

HTTP Parser: Base64 decoded: <!DOCTYPE html><body><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var e=this||self;function f(a){return a};var h;function k(a){this.g=a}k.prototype.toString=function(){return this.g+"...

Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Title: Home does not match URL
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#mainContent	HTTP Parser: Title: Home does not match URL
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/	HTTP Parser: Title: Home does not match URL
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#void	HTTP Parser: Title: Home does not match URL

Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: Invalid link: Forgot Password?
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#mainContent	HTTP Parser: Invalid link: Forgot Password?
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/	HTTP Parser: Invalid link: Forgot Password?
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#void	HTTP Parser: Invalid link: Forgot Password?

Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: <input type="password" .../> found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#mainContent	HTTP Parser: <input type="password" .../> found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/	HTTP Parser: <input type="password" .../> found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#void	HTTP Parser: <input type="password" .../> found

Source: about:srcdoc	HTTP Parser: No favicon
Source: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp	HTTP Parser: No favicon
Source: https://www.marylandtaxes.gov/MDTaxConnect/index.php	HTTP Parser: No favicon
Source: https://www.marylandtaxes.gov/MDTaxConnect/index.php	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO&co=aHR0cHM6Ly9tZHRheGNvbm5lY3QuZ292OjQ0Mw..&hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&size=normal&cb=wlqylckyd8tb	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO	HTTP Parser: No favicon
Source: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx	HTTP Parser: No favicon

Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: No <meta name="author".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: No <meta name="author".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: No <meta name="author".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: No <meta name="author".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#mainContent	HTTP Parser: No <meta name="author".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/	HTTP Parser: No <meta name="author".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#void	HTTP Parser: No <meta name="author".. found

Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: No <meta name="copyright".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: No <meta name="copyright".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: No <meta name="copyright".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/	HTTP Parser: No <meta name="copyright".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#mainContent	HTTP Parser: No <meta name="copyright".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/	HTTP Parser: No <meta name="copyright".. found
Source: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#void	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49797 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49763 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49797 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //rptp/portal/home HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!GWWJERcu-9Ti3pOi7lLbAg/sp/mashup:ra:collection?soffset=0&eoffset=5&themeID=ZJ_MOCCHA82M0Q700AN8112B100G1&locale=en&mime-type=text%2Fcss&lm=1703152666000&entry=rsimobile__0.0%3Ahead_css HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/css/rsi/RSI_Custom.css?modifiedDate=2024-02-13T12:52 HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/css/rsi/md/MD_Custom.css?modifiedDate=2024-02-06T16:48 HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/ruxitagentjs_ICA27NVfhjqru_10283240117152214.js HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/mashup/ra:collection?themeID=ZJ_MOCCHA82M0Q700AN8112B100G1&locale=en&mime-type=text%2Fjavascript&lm=1695019440000&entry=wp_client_main__0.0%3Ahead_js&entry=wp_client_ext__0.0%3Ahead_js&entry=rsimobile__0.0%3Ahead_js HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /bootstrap/3.0.0/css/bootstrap.min.css HTTP/1.1Host: netdna.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/js/jquery-ui-1.10.3.customDatePicker.min.js?modifiedDate=2023-12-21T12:52 HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/js/moment-with-locales.min.js?modifiedDate=2023-12-21T12:52 HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/js/rsiPortalDateHandlerJS.js?modifiedDate=2023-12-21T12:52 HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/js/itscValidations.js?modifiedDate=2023-12-21T12:52 HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/js/itscCommonJS.js?modifiedDate=2023-12-21T12:52 HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/js/internationalPhone.js?modifiedDate=2023-12-21T12:52 HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/MyMDTaxesLogo.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
Source: global traffic	HTTP traffic detected: GET /ITSCThemeDynamic/themes/html/dynamicSpots/overlay-gif/processing-message2.gif HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Quick-Links.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Individuals.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Business.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /rptp/wcm/connect/11fffd69-e413-4ed0-8644-bf80120a18ab/RSI+logo.png?MOD=AJPERES&CACHEID=ROOTWORKSPACE-11fffd69-e413-4ed0-8644-bf80120a18ab-m8Bm1KV&ContentCache=NONE HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/License-Permit-Search.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mdtaxconnect.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/public-home-bg.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/css/rsi/md/MD_Custom.css?modifiedDate=2024-02-06T16:48Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Additional-Info.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/timeout-icon.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/img/icons/help.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ITSCThemeDynamic/themes/html/dynamicSpots/overlay-gif/processing-message2.gif HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/MyMDTaxesLogo.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
Source: global traffic	HTTP traffic detected: GET /rptp/wcm/connect/11fffd69-e413-4ed0-8644-bf80120a18ab/RSI+logo.png?MOD=AJPERES&CACHEID=ROOTWORKSPACE-11fffd69-e413-4ed0-8644-bf80120a18ab-m8Bm1KV&ContentCache=NONE HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Quick-Links.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Individuals.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Business.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/License-Permit-Search.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/images/favicon.ico HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/Additional-Info.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/timeout-icon.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/img/icons/help.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /ITSCThemeStatic/themes/Portal8.5/img/public-home-bg.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/images/favicon.ico HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=868715137&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=1544159405&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-TOKEN--rptp-portal-home=5D99C1EC36A7F67B7D16007D851B22C3467ACFC1309A5B177A2F4D7430310BF902B4671ACEC2EC7F68E1D59D8FCAB135C149; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=3783890996&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23mainContent&bp=3&app=717c68634dfb8989&crc=2513533501&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441983.0.0.0; rxvt=1708443783366\|1708441968947; dtPC=-2$241980754_631h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-TOKEN--rptp-portal-home=77CE6717484932FC6306B16893FFCF02D2C18625A8DA16C7495C9F126B4752582F1E0FED578B0513BE65E70FE8075519B895; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441983.0.0.0; rxvt=1708443783366\|1708441968947; dtPC=-2$241980754_631h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0%2F&bp=3&app=717c68634dfb8989&crc=2449053465&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /Individuals/iFile_ChooseForm/default.asp HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Individuals/glStyles/defaultcss.css HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glStyles/appcss.css HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glstyles/stylesheet.css HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glstyles/appstylesheet.css HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glinclude/script.js HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/top_banner.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/cont_banner.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/clearpixel.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav7.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/appMedia/bulletBlue_5.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/glstyles/appstylesheet.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/ifileblue_Logo.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav1.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav2.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/top_banner.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/cont_banner.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav3.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav4.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav5.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav6.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/clearpixel.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav7.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/appMedia/bulletBlue_5.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav1.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/ifileblue_Logo.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav2.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.aspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav3.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav4.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav5.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /Individuals/glmedia/newHeader/nav6.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23mainContent&bp=3&app=717c68634dfb8989&crc=896692844&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-TOKEN--rptp-portal-home=1DD408A0D9976DACCC66B6E1BCAE167AC078F97C511089DCFA39D1D47590FB47F6CF643E60C94D6763A70F855B4CCE779C8D; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-TOKEN--rptp-portal-home=1DD408A0D9976DACCC66B6E1BCAE167AC078F97C511089DCFA39D1D47590FB47F6CF643E60C94D6763A70F855B4CCE779C8D; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0%2F&bp=3&app=717c68634dfb8989&crc=4042273332&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441997.0.0.0; rxvt=1708443797402\|1708441968947; dtPC=-2$241995968_128h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2533786512&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441997.0.0.0; rxvt=1708443797402\|1708441968947; dtPC=-2$241995968_128h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-TOKEN--rptp-portal-home=D1EF67787F46B0ABE3B6F9949ECEE6CF2A8BDA62B8F80D00BC1877B110CC5ADC81E8E5BFC6A26A21D8112CDF332379C3C6EF; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441997.0.0.0; rxvt=1708443797402\|1708441968947; dtPC=-2$241995968_128h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23void&bp=3&app=717c68634dfb8989&crc=1476524393&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442001.0.0.0; rxvt=1708443801509\|1708441968947; dtPC=-2$242000773_875h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home/new-user-signup HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-TOKEN--rptp-portal-home=D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442001.0.0.0; rxvt=1708443801509\|1708441968947; dtPC=-2$242000773_875h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home/new-user-signup/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-TOKEN--rptp-portal-home=D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442001.0.0.0; rxvt=1708443801509\|1708441968947; dtPC=-2$242000773_875h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2578232784&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /MDTaxConnect/index.php HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23void&bp=3&app=717c68634dfb8989&crc=42096834&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /assests/js/jquery-newsticker/ticker-style.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fnew-user-signup%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2217819383&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /assests/css/solid-menu.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/styles.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/theme-01.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/font-awesome-5.10.2/css/all.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/media.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.1/jquery.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/bootstrap.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/style.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/gogg-translate.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/search.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/news_ticker_style.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/base.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/layout.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/module.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/state.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/theme.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/font-icons.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/solid-menu.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/animate.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/solid-menu.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/solid-menu-core.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/solid-menu.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/solid-menu-media.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/solid-menu.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/solid-menu-theme.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/solid-menu.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assests/css/animation.css HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/assests/css/state.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.1.2101562765.1708442011
Source: global traffic	HTTP traffic detected: GET /assests/img/Comptroller_Logo.svg HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.1.2101562765.1708442011
Source: global traffic	HTTP traffic detected: GET /mdtaxconnect/img/Logo_Final-Tory-Blue-background.png HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.1.2101562765.1708442011
Source: global traffic	HTTP traffic detected: GET /assests/js/main.js HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.1.2101562765.1708442011
Source: global traffic	HTTP traffic detected: GET /assests/js/bootstrap.min.js HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /assests/js/solid-menu.js HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /assests/js/jquery.easy-ticker.min.js HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /assests/img/Comptroller_Logo.svg HTTP/1.1Host: www.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /assests/css/font-awesome-5.10.2/webfonts/fa-brands-400.woff2 HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.marylandtaxes.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.marylandtaxes.gov/assests/css/font-awesome-5.10.2/css/all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /assests/css/font-awesome-5.10.2/webfonts/fa-solid-900.woff2 HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.marylandtaxes.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.marylandtaxes.gov/assests/css/font-awesome-5.10.2/css/all.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /assests/js/vendor/holder.min.js HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /assests/js/ie10-viewport-bug-workaround.js HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /assests/js/googl-translate.js HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /mdtaxconnect/img/Logo_Final-Tory-Blue-background.png HTTP/1.1Host: www.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /assests/js/search.js HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit&_=1708442012438 HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /install/v2/st.js HTTP/1.1Host: app.swiftype.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.marylandtaxes.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /install/v2/config/3jhvv-yfJCUxQ51kSGbN.json HTTP/1.1Host: s.swiftypecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.marylandtaxes.govSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.marylandtaxes.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.marylandtaxes.gov/MDTaxConnect/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/new_embed-2552d8d62d9c60f59b3b11a5d083d1ebd090c72de809fc7c76fb339825302241.css HTTP/1.1Host: s.swiftypecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.marylandtaxes.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /install/v2/config/3jhvv-yfJCUxQ51kSGbN.json HTTP/1.1Host: s.swiftypecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fnew-user-signup%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=1379327624&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /cc.js?engine_key=XFBwKZR-z-7xV9bsZPzb&url=https%3A%2F%2Fwww.marylandtaxes.gov%2FMDTaxConnect%2Findex.php HTTP/1.1Host: cc.swiftype.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.marylandtaxes.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cc.js?engine_key=XFBwKZR-z-7xV9bsZPzb&url=https%3A%2F%2Fwww.marylandtaxes.gov%2FMDTaxConnect%2Findex.php HTTP/1.1Host: cc.swiftype.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rptp/portal/business/register-existing-businesses/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/business/register-existing-businesses/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /rptp/PA_Reg/js/registerExternalUser.js?modifiedDate=2024-01-30T10:09 HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/rptp/portal/business/register-existing-businesses/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; dtPC=-2$242020859_794h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; rxvt=1708443820867\|1708441968947
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?onload=loadCaptcha&render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO&co=aHR0cHM6Ly9tZHRheGNvbm5lY3QuZ292OjQ0Mw..&hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&size=normal&cb=wlqylckyd8tb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO&co=aHR0cHM6Ly9tZHRheGNvbm5lY3QuZ292OjQ0Mw..&hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&size=normal&cb=wlqylckyd8tbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /js/bg/zyvIRxypJp9XsXP7bFrUBd8JY_zCSu2ya-bkldlMTk8.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO&co=aHR0cHM6Ly9tZHRheGNvbm5lY3QuZ292OjQ0Mw..&hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&size=normal&cb=wlqylckyd8tbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mdtaxconnect.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-existing-businesses%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=4277207902&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442021.0.0.0; rxvt=1708443825466\|1708441968947; dtPC=-2$242020859_794h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/business/register-new-business HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442021.0.0.0; rxvt=1708443825466\|1708441968947; dtPC=-2$242020859_794h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/business/register-new-business/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442021.0.0.0; rxvt=1708443825466\|1708441968947; dtPC=-2$242020859_794h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-existing-businesses%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=349469379&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-new-business%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=1118253042&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home/md-sutec/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-TOKEN--rptp-portal-home=D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/portal/home/md-sutec/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-TOKEN--rptp-portal-home=D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fmd-sutec%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=526534433&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442035.0.0.0; rxvt=1708443835498\|1708441968947; dtPC=-2$242034739_332h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /business/bfile/osc/selectapp.aspx HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0
Source: global traffic	HTTP traffic detected: GET /Business/glStyles/defaultcss.htm HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glStyles/appcss.htm HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glAppIncl/src_DollarsAndCents.js HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glAppIncl/src_OpenHelpWin.js HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /business/glmedia/newHeader/Information%20for%20Business%20Taxpayers.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glMedia/bFile_Logo.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /business/glmedia/1ptrans.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glMedia/1ptrans.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glmedia/external-link-symbol.svg HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /business/glmedia/newHeader/Information%20for%20Business%20Taxpayers.png HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glMedia/bluebullet.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glMedia/redbullet.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glMedia/bFile_Logo.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /business/glmedia/1ptrans.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glMedia/1ptrans.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glmedia/external-link-symbol.svg HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glMedia/bluebullet.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /Business/glMedia/redbullet.gif HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: interactive.marylandtaxes.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-new-business%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2385240814&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442035.0.0.0; rxvt=1708443835498\|1708441968947; dtPC=-2$242034739_332h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
Source: global traffic	HTTP traffic detected: GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fmd-sutec%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2817284170&en=sbz95err&end=1 HTTP/1.1Host: mdtaxconnect.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442035.0.0.0; rxvt=1708443835498\|1708441968947; dtPC=-2$242034739_332h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0

Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: <li style="float: right;"><a href="https://www.facebook.com/ComptrollerofMaryland/" class="footer-ul--li-a-soc" title="Facebook link"><i class="fab fa-facebook-square fa-2x"></i></a></li> equals www.facebook.com (Facebook)
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: <li style="float: right;"><a href="https://www.youtube.com/channel/UC8-n5yX5WYd35OBUOjIFYQQ" class="footer-ul--li-a-soc" title="You Tube link"><i class="fab fa-youtube fa-2x"></i></a></li> equals www.youtube.com (Youtube)
Source: chromecache_312.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=jB(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=cb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},mB=function(){var a=[],b=function(c){return Ia(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_312.2.dr	String found in binary or memory: f\|\|g.length\|\|h.length))return;var n={lh:d,jh:e,kh:f,Wh:g,Xh:h,He:m,wb:b},p=z.YT,q=function(){tD(n)};if(p)return p.ready&&p.ready(q),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();q()};H(function(){for(var t=C.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(wD(w,"iframe_api")\|\|wD(w,"player_api"))return b}for(var x=C.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!nD&&uD(x[B],n.He))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_261.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: return b}kD.D="internal.enableAutoEventOnTimer";var vc=da(["data-gtm-yt-inspected-"]),lD=["www.youtube.com","www.youtube-nocookie.com"],mD,nD=!1; equals www.youtube.com (Youtube)
Source: chromecache_312.2.dr	String found in binary or memory: var zC=function(a,b,c,d,e){var f=qz("fsl",c?"nv.mwt":"mwt",0),g;g=c?qz("fsl","nv.ids",[]):qz("fsl","ids",[]);if(!g.length)return!0;var h=mz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!yy(h,zy(b, equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4

Source: chromecache_348.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_348.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_342.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/#option-dateFormat
Source: chromecache_348.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_348.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_348.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_348.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_348.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_348.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_268.2.dr	String found in binary or memory: http://benalman.com/about/license/
Source: chromecache_268.2.dr	String found in binary or memory: http://benalman.com/projects/jquery-bbq-plugin/
Source: chromecache_268.2.dr	String found in binary or memory: http://benalman.com/projects/jquery-hashchange-plugin/
Source: chromecache_348.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/8235
Source: chromecache_348.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413
Source: chromecache_348.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413)
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: http://cashmd.org/free-tax-preparationresources/
Source: chromecache_226.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_245.2.dr	String found in binary or memory: http://decaf.de)
Source: chromecache_348.2.dr	String found in binary or memory: http://dev.jquery.com/ticket/1749
Source: chromecache_286.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_286.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_284.2.dr, chromecache_280.2.dr, chromecache_157.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_284.2.dr	String found in binary or memory: http://getbootstrap.com/customize/?id=b0fa990e31bbbef8219d)
Source: chromecache_298.2.dr	String found in binary or memory: http://getbootstrap.com/getting-started/#support-ie10-width
Source: chromecache_207.2.dr	String found in binary or memory: http://holderjs.com
Source: chromecache_268.2.dr	String found in binary or memory: http://hunch.se/
Source: chromecache_207.2.dr	String found in binary or memory: http://imsky.co
Source: chromecache_348.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_248.2.dr, chromecache_284.2.dr, chromecache_348.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_284.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Lucida%20Grande%2CLucida%20Sans%2CArial%2Csans-serif&fwDe
Source: chromecache_284.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_207.2.dr, chromecache_226.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_346.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735a6eb
Source: chromecache_346.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735a6ed
Source: chromecache_346.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735a6ef
Source: chromecache_346.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735a6f1
Source: chromecache_322.2.dr, chromecache_203.2.dr, chromecache_348.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_262.2.dr, chromecache_150.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_222.2.dr	String found in binary or memory: http://www.marylandtaxes.gov
Source: chromecache_193.2.dr	String found in binary or memory: http://www.mdtaxconnect.gov
Source: chromecache_252.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/4833
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_306.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_348.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_306.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_261.2.dr, chromecache_289.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.4.1/jquery.easing.min.js
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.js
Source: chromecache_335.2.dr, chromecache_341.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_335.2.dr, chromecache_341.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_306.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_335.2.dr, chromecache_341.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_335.2.dr, chromecache_341.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_335.2.dr, chromecache_341.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_306.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_306.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_316.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_316.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_262.2.dr, chromecache_150.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_262.2.dr, chromecache_150.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_278.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_284.2.dr	String found in binary or memory: https://gist.github.com/b0fa990e31bbbef8219d
Source: chromecache_268.2.dr	String found in binary or memory: https://github.com/MoonScript/jQuery-ajaxTransport-XDomainRequest
Source: chromecache_157.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_207.2.dr	String found in binary or memory: https://github.com/imsky/holder/issues
Source: chromecache_306.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_306.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_306.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_268.2.dr	String found in binary or memory: https://github.com/stuartbannerman/hashcode
Source: chromecache_284.2.dr, chromecache_298.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_306.2.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://governor.maryland.gov/
Source: chromecache_306.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_306.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_306.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_306.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_306.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_306.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_306.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_306.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_306.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_193.2.dr	String found in binary or memory: https://interactive.marylandtaxes.gov/Individuals/Payment/default.asp
Source: chromecache_193.2.dr	String found in binary or memory: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp#list
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://interactive.marylandtaxes.gov/bServices/BillPay/Default.aspx
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://interactive.marylandtaxes.gov/business/Extension/busdefault.asp
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://interactive.marylandtaxes.gov/extranet/gad/GADLogin/login.asp
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://interactive2.marylandtaxes.gov/EITCAssistant/
Source: chromecache_268.2.dr, chromecache_306.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_268.2.dr, chromecache_306.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_268.2.dr, chromecache_306.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_306.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_306.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_193.2.dr	String found in binary or memory: https://marylandtaxes.gov/locations.php
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://mvlslaw.org/
Source: chromecache_284.2.dr, chromecache_186.2.dr	String found in binary or memory: https://netdna.bootstrapcdn.com/bootstrap/3.0.0/fonts/glyphicons-halflings-regular.eot
Source: chromecache_284.2.dr, chromecache_186.2.dr	String found in binary or memory: https://netdna.bootstrapcdn.com/bootstrap/3.0.0/fonts/glyphicons-halflings-regular.eot?#iefix
Source: chromecache_284.2.dr, chromecache_186.2.dr	String found in binary or memory: https://netdna.bootstrapcdn.com/bootstrap/3.0.0/fonts/glyphicons-halflings-regular.svg#glyphicons-ha
Source: chromecache_284.2.dr, chromecache_186.2.dr	String found in binary or memory: https://netdna.bootstrapcdn.com/bootstrap/3.0.0/fonts/glyphicons-halflings-regular.ttf
Source: chromecache_284.2.dr, chromecache_186.2.dr	String found in binary or memory: https://netdna.bootstrapcdn.com/bootstrap/3.0.0/fonts/glyphicons-halflings-regular.woff
Source: chromecache_346.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=kcq1izb&ht=tk&f=25769.25770.25771.25772&a=102056799&app=typekit&e=
Source: chromecache_261.2.dr, chromecache_289.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_261.2.dr, chromecache_289.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_341.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_306.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_306.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_306.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_306.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_306.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_306.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_306.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_341.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_268.2.dr, chromecache_306.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_261.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_261.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_252.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_341.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_335.2.dr, chromecache_341.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_335.2.dr, chromecache_341.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_335.2.dr, chromecache_341.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_252.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_261.2.dr, chromecache_289.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_150.2.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_262.2.dr, chromecache_150.2.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://twitter.com/mdcomptroller?lang=en
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/4aa4f2/00000000000000007735a6ef/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/4aa4f2/00000000000000007735a6ef/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/4aa4f2/00000000000000007735a6ef/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/4d44c2/00000000000000007735a6eb/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/4d44c2/00000000000000007735a6eb/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/4d44c2/00000000000000007735a6eb/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/d7e23d/00000000000000007735a6ed/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/d7e23d/00000000000000007735a6ed/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/d7e23d/00000000000000007735a6ed/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/f02478/00000000000000007735a6f1/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/f02478/00000000000000007735a6f1/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_346.2.dr	String found in binary or memory: https://use.typekit.net/af/f02478/00000000000000007735a6f1/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://use.typekit.net/kcq1izb.css
Source: chromecache_212.2.dr	String found in binary or memory: https://www.dynatrace.com/company/trust-center/customers/reports/
Source: chromecache_289.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_252.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_252.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_252.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_261.2.dr, chromecache_289.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_252.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_335.2.dr, chromecache_262.2.dr, chromecache_150.2.dr, chromecache_341.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_335.2.dr, chromecache_341.2.dr, chromecache_273.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_262.2.dr, chromecache_150.2.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_261.2.dr, chromecache_289.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_261.2.dr, chromecache_289.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.googlesyndication.com
Source: chromecache_312.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_252.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-LSF75XJL4E
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NMG247C
Source: chromecache_335.2.dr, chromecache_341.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__.
Source: chromecache_150.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_262.2.dr, chromecache_150.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_262.2.dr, chromecache_150.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: chromecache_347.2.dr, chromecache_273.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.instagram.com/comptrollerofmd/
Source: chromecache_222.2.dr	String found in binary or memory: https://www.irs.gov/filing/free-file-do-your-federal-taxes-for-free
Source: chromecache_222.2.dr	String found in binary or memory: https://www.irs.gov/payments/eftps-the-electronic-federal-tax-payment-system
Source: chromecache_193.2.dr	String found in binary or memory: https://www.jobapscloud.com/MD/?Keyword=&Loc=&DeptNumber=2401&OccList=&JobType=&KeywordFullText=0
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/accessibility.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/business/index.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/contact-us.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/divisions/comp.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/divisions/ooc.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/index.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/individual/index.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/online-services/individuals.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/pros/index.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/reports/index.php
Source: chromecache_222.2.dr	String found in binary or memory: https://www.marylandtaxes.gov/taxpayer-rights.php
Source: chromecache_261.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.ola.state.md.us/fraud/ola-fraud-hotline
Source: chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.youtube.com/channel/UC8-n5yX5WYd35OBUOjIFYQQ
Source: chromecache_312.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_222.2.dr	String found in binary or memory: https://youtu.be/IsJsH5C1jr8

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49763 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_7160_507700267

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@28/346@56/21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2256,i,11884261782894997089,10179543163277250750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mdtaxconnect.gov//rptp/portal/home
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2256,i,11884261782894997089,10179543163277250750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://mdtaxconnect.gov//rptp/portal/home	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://www.gstatic.c..?/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__.	0%	URL Reputation	safe
http://daneden.me/animate	0%	URL Reputation	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/internationalPhone.js?modifiedDate=2023-12-21T12:52	100%	Avira URL Cloud	phishing
https://www.ola.state.md.us/fraud/ola-fraud-hotline	0%	Avira URL Cloud	safe
http://decaf.de)	0%	Avira URL Cloud	safe
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Quick-Links.png	100%	Avira URL Cloud	phishing
https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png	100%	Avira URL Cloud	phishing
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png	100%	Avira URL Cloud	phishing
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/css/rsi/RSI_Custom.css?modifiedDate=2024-02-13T12:52	100%	Avira URL Cloud	phishing
https://mdtaxconnect.gov/rptp/portal/home/md-sutec/	100%	Avira URL Cloud	phishing
https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png	100%	Avira URL Cloud	phishing
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/itscValidations.js?modifiedDate=2023-12-21T12:52	100%	Avira URL Cloud	phishing
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/License-Permit-Search.png	100%	Avira URL Cloud	phishing
https://mdtaxconnect.gov/rptp/portal/business/register-new-business	100%	Avira URL Cloud	phishing
http://hunch.se/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
interactive.marylandtaxes.gov	167.102.245.62	true	false	high
netdna.bootstrapcdn.com	104.18.10.207	true	false	high
accounts.google.com	172.253.62.84	true	false	high
external-svc-dal.swiftype.net	169.46.32.99	true	false	unknown
www.marylandtaxes.gov	167.102.245.60	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
stats.g.doubleclick.net	142.251.16.156	true	false	high
www3.l.google.com	142.250.72.110	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	142.251.40.164	true	false	high
analytics.google.com	142.251.40.142	true	false	high
clients.l.google.com	142.251.40.238	true	false	high
b.global-ssl.fastly.net	151.101.0.143	true	false	unknown
mdtaxconnect.gov	20.141.131.150	true	false	unknown
use.typekit.net	unknown	unknown	false	high
app.swiftype.com	unknown	unknown	false	high
s.swiftypecdn.com	unknown	unknown	false	unknown
clients2.google.com	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high
cc.swiftype.com	unknown	unknown	false	high
translate.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
about:blank	false	Avira URL Cloud: safe	low
https://www.marylandtaxes.gov/assests/css/solid-menu-media.css	false		high
https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png	false	Avira URL Cloud: phishing	unknown
https://www.marylandtaxes.gov/assests/js/search.js	false		high
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Quick-Links.png	false	Avira URL Cloud: phishing	unknown
https://www.marylandtaxes.gov/assests/css/font-awesome-5.10.2/css/all.css	false		high
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png	false	Avira URL Cloud: phishing	unknown
https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/nav7.png	false		high
https://www.marylandtaxes.gov/assests/css/animation.css	false		high
https://cc.swiftype.com/cc.js?engine_key=XFBwKZR-z-7xV9bsZPzb&url=https%3A%2F%2Fwww.marylandtaxes.gov%2FMDTaxConnect%2Findex.php	false		high
https://interactive.marylandtaxes.gov/Business/glMedia/bluebullet.gif	false		high
https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/nav4.png	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css	false		high
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/internationalPhone.js?modifiedDate=2023-12-21T12:52	false	Avira URL Cloud: phishing	unknown
https://www.marylandtaxes.gov/assests/css/style.css	false		high
https://interactive.marylandtaxes.gov/Business/glMedia/bFile_Logo.gif	false		high
https://analytics.google.com/g/collect?v=2&tid=G-LSF75XJL4E&gtm=45je42e0v9108954470za200&_p=1708442008723&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=2101562765.1708442011&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1708442011&sct=1&seg=0&dl=https%3A%2F%2Fwww.marylandtaxes.gov%2FMDTaxConnect%2Findex.php&dt=Maryland%20Tax%20Connect&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3416	false		high
https://www.marylandtaxes.gov/favicon.ico	false		high
https://interactive.marylandtaxes.gov/Individuals/glinclude/script.js	false		high
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/css/rsi/RSI_Custom.css?modifiedDate=2024-02-13T12:52	false	Avira URL Cloud: phishing	unknown
https://www.marylandtaxes.gov/assests/js/bootstrap.min.js	false		high
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/License-Permit-Search.png	false	Avira URL Cloud: phishing	unknown
https://www.marylandtaxes.gov/MDTaxConnect/index.php	false		high
https://interactive.marylandtaxes.gov/Business/glStyles/appcss.htm	false		high
https://www.marylandtaxes.gov/assests/css/news_ticker_style.css	false		high
https://mdtaxconnect.gov/rptp/portal/business/register-new-business	false	Avira URL Cloud: phishing	unknown
https://interactive.marylandtaxes.gov/Business/glStyles/defaultcss.htm	false		high
https://www.marylandtaxes.gov/assests/css/solid-menu-theme.css	false		high
https://interactive.marylandtaxes.gov/Business/glmedia/external-link-symbol.svg	false		high
https://netdna.bootstrapcdn.com/bootstrap/3.0.0/css/bootstrap.min.css	false		high
https://mdtaxconnect.gov/rptp/portal/home/md-sutec/	false	Avira URL Cloud: phishing	unknown
https://www.marylandtaxes.gov/assests/js/vendor/holder.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0	false		high
https://interactive.marylandtaxes.gov/Individuals/glmedia/clearpixel.gif	false		high
https://www.marylandtaxes.gov/assests/css/solid-menu.css	false		high
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-LSF75XJL4E&cid=2101562765.1708442011&gtm=45je42e0v9108954470za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0	false		high
https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/itscValidations.js?modifiedDate=2023-12-21T12:52	false	Avira URL Cloud: phishing	unknown
https://interactive.marylandtaxes.gov/business/glmedia/1ptrans.gif	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO&co=aHR0cHM6Ly9tZHRheGNvbm5lY3QuZ292OjQ0Mw..&hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&size=normal&cb=wlqylckyd8tb	false		high
https://interactive.marylandtaxes.gov/Individuals/glstyles/stylesheet.css	false		high
https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_261.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_335.2.dr, chromecache_341.2.dr	false		high
https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp#list	chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	false		high
https://p.typekit.net/p.css?s=1&k=kcq1izb&ht=tk&f=25769.25770.25771.25772&a=102056799&app=typekit&e=	chromecache_346.2.dr	false		high
https://www.ola.state.md.us/fraud/ola-fraud-hotline	chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_252.2.dr	false		high
http://api.jqueryui.com/jQuery.widget/	chromecache_348.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_306.2.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_306.2.dr	false		high
https://www.marylandtaxes.gov/index.php	chromecache_222.2.dr	false		high
http://hunch.se/	chromecache_268.2.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	chromecache_284.2.dr	false		high
https://fontawesome.com	chromecache_316.2.dr	false		high
http://decaf.de)	chromecache_245.2.dr	false	Avira URL Cloud: safe	low
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_306.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_335.2.dr, chromecache_341.2.dr	false		high
https://github.com/MoonScript/jQuery-ajaxTransport-XDomainRequest	chromecache_268.2.dr	false		high
http://api.jqueryui.com/button/	chromecache_348.2.dr	false		high
http://getbootstrap.com)	chromecache_284.2.dr, chromecache_280.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	low
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_306.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_252.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_306.2.dr	false		high
http://getbootstrap.com/customize/?id=b0fa990e31bbbef8219d)	chromecache_284.2.dr	false		high
https://support.google.com/recaptcha	chromecache_341.2.dr	false		high
https://use.typekit.net/af/d7e23d/00000000000000007735a6ed/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_346.2.dr	false		high
https://html.spec.whatwg.org/#nonce-attributes	chromecache_306.2.dr	false		high
http://benalman.com/projects/jquery-hashchange-plugin/	chromecache_268.2.dr	false		high
http://api.jqueryui.com/category/ui-core/	chromecache_348.2.dr	false		high
https://github.com/imsky/holder/issues	chromecache_207.2.dr	false		high
https://jsperf.com/getall-vs-sizzle/2	chromecache_306.2.dr	false		high
https://use.typekit.net/af/4d44c2/00000000000000007735a6eb/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_346.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_335.2.dr, chromecache_341.2.dr	false		high
https://use.typekit.net/af/d7e23d/00000000000000007735a6ed/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_346.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__.	chromecache_335.2.dr, chromecache_341.2.dr	false	URL Reputation: safe	low
https://jquery.com/	chromecache_268.2.dr, chromecache_306.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_284.2.dr, chromecache_298.2.dr, chromecache_157.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_261.2.dr, chromecache_267.2.dr, chromecache_312.2.dr	false		high
https://interactive.marylandtaxes.gov/bServices/BillPay/Default.aspx	chromecache_171.2.dr, chromecache_257.2.dr, chromecache_228.2.dr, chromecache_345.2.dr, chromecache_181.2.dr, chromecache_193.2.dr	false		high
https://bugs.jquery.com/ticket/4833	chromecache_306.2.dr	false		high
https://sizzlejs.com/	chromecache_268.2.dr, chromecache_306.2.dr	false		high
https://www.irs.gov/filing/free-file-do-your-federal-taxes-for-free	chromecache_222.2.dr	false		high
https://www.google.com/images/cleardot.gif	chromecache_150.2.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_306.2.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_335.2.dr, chromecache_262.2.dr, chromecache_150.2.dr, chromecache_341.2.dr	false		high
https://www.marylandtaxes.gov/accessibility.php	chromecache_222.2.dr	false		high
https://youtu.be/IsJsH5C1jr8	chromecache_222.2.dr	false		high
https://www.marylandtaxes.gov/reports/index.php	chromecache_222.2.dr	false		high
https://www.dynatrace.com/company/trust-center/customers/reports/	chromecache_212.2.dr	false		high
https://use.typekit.net/af/4d44c2/00000000000000007735a6eb/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_346.2.dr	false		high
https://use.typekit.net/af/f02478/00000000000000007735a6f1/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_346.2.dr	false		high
https://cloud.google.com/contact	chromecache_335.2.dr, chromecache_341.2.dr	false		high
https://fontawesome.com/license/free	chromecache_316.2.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_306.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_306.2.dr	false		high
http://daneden.me/animate	chromecache_226.2.dr	false	URL Reputation: safe	unknown
http://bugs.jquery.com/ticket/8235	chromecache_348.2.dr	false		high
https://www.jobapscloud.com/MD/?Keyword=&Loc=&DeptNumber=2401&OccList=&JobType=&KeywordFullText=0	chromecache_193.2.dr	false		high
https://use.typekit.net/af/f02478/00000000000000007735a6f1/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_346.2.dr	false		high
https://use.typekit.net/af/f02478/00000000000000007735a6f1/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_346.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	netdna.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.251.16.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
169.46.32.99	external-svc-dal.swiftype.net	United States	36351	SOFTLAYERUS	false
20.141.131.150	mdtaxconnect.gov	United States	8070	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.0.143	b.global-ssl.fastly.net	United States	54113	FASTLYUS	false
142.251.40.238	clients.l.google.com	United States	15169	GOOGLEUS	false
172.253.62.84	accounts.google.com	United States	15169	GOOGLEUS	false
142.251.40.164	www.google.com	United States	15169	GOOGLEUS	false
167.102.245.62	interactive.marylandtaxes.gov	United States	27026	NETWORKMARYLANDUS	false
142.251.40.142	analytics.google.com	United States	15169	GOOGLEUS	false
167.102.245.60	www.marylandtaxes.gov	United States	27026	NETWORKMARYLANDUS	false
142.251.40.100	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
169.48.138.204	unknown	United States	36351	SOFTLAYERUS	false
172.217.165.142	unknown	United States	15169	GOOGLEUS	false
142.250.72.110	www3.l.google.com	United States	15169	GOOGLEUS	false
142.251.35.164	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5
192.168.2.30

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1395394
Start date and time:	2024-02-20 16:11:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mdtaxconnect.gov//rptp/portal/home
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@28/346@56/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#mainContent Browse: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/ Browse: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Browse: https://mdtaxconnect.gov/rptp/portal/home Browse: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/#void Browse: https://mdtaxconnect.gov/rptp/portal/home/new-user-signup Browse: https://www.marylandtaxes.gov/MDTaxConnect/index.php Browse: https://mdtaxconnect.gov/rptp/portal/business/register-existing-businesses/ Browse: https://mdtaxconnect.gov/rptp/portal/business/register-new-business Browse: https://mdtaxconnect.gov/rptp/portal/home/md-sutec/ Browse: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.81.227, 34.104.35.123, 142.250.80.35, 142.250.72.106, 142.250.81.232, 142.250.80.42, 142.250.65.234, 172.217.165.138, 142.250.80.106, 142.250.176.202, 142.251.40.138, 142.250.81.234, 142.250.65.170, 142.250.65.202, 142.251.40.106, 142.251.35.170, 142.250.80.74, 142.251.40.202, 142.251.41.10, 142.251.40.234, 142.251.32.106, 142.251.40.227, 142.250.80.78, 142.250.80.10, 142.250.80.67, 20.12.23.50, 72.21.81.240, 69.164.46.128, 192.229.211.108, 20.3.187.198, 20.242.39.171, 142.251.40.168, 23.223.209.41, 23.223.209.54, 142.250.72.99, 23.204.152.149, 23.204.152.170, 142.251.40.174, 142.251.40.170, 142.250.64.74, 142.250.65.195, 142.251.32.110
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, translate-pa.googleapis.com, wu.azureedge.net, a1874.dscg1.akamai.net, ocsp.digicert.com, use-stls.adobe.com.edgesuite.net, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, p.typekit.net-stls-v3.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, translate.googleapis.com, a1988.dscg1.akamai.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://mdtaxconnect.gov//rptp/portal/home

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 20 14:12:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9791038702871324
Encrypted:	false
SSDEEP:	48:8LOdBTpNYHjidAKZdA19ehwiZUklqeh9y+3:8kPQey
MD5:	7E275DF84BD83F00F2A9B5C2B1B6B6E2
SHA1:	AA5CB3E5AAA3B07D10812F5C45F1529BD94D570C
SHA-256:	706522D22EE88C20E0CEACC188D3C3E4A20A3CB214D133F7099422C162E3E3CD
SHA-512:	246CDDF024A611A4FA212B70E054B35D55EBD351D6CA61B2CCC4138CE38C097A5F232F3EEC2E7334AA2019C5E7F659DDA856CB52A56E3F5984393A4949DB3CE0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......dC.d..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ITX.y....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VTX.y....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VTX.y....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VTX.y..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VTX.y...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 20 14:12:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990052587937154
Encrypted:	false
SSDEEP:	48:82gOdBTpNYHjidAKZdA1weh/iZUkAQkqehOy+2:86Pq9Qry
MD5:	67748201863143CFAD0D785093EB5C9F
SHA1:	ED781AF2172420E392CF5A987AC087BCEF3CC71E
SHA-256:	3277204224794CE2EFDBFE74FF3F5B51EC9EB374E41CA00859EC44059EB0E248
SHA-512:	A20FF34EC6D0340A5B8E7916CD7F9888599E8ECD10514B91E54279585A3E3731655127EED79C8DF87926B1227102FBBEB022E6F336F30723D63FBA03CD5777FA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...._xWC.d..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ITX.y....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VTX.y....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VTX.y....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VTX.y..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VTX.y...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005922030242488
Encrypted:	false
SSDEEP:	48:8xvOdBTpNsHjidAKZdA14tseh7sFiZUkmgqeh7ssy+BX:8x4PWnKy
MD5:	19A7E62FD8A5F290FF4347A855DD7448
SHA1:	1C361DCBD3C17916C64BD133BD1FA67C4F2F6044
SHA-256:	89E0D8C12AEF1D5F3D4F33BC47F27A9F84A7F1E90EEED4C5FB355EF23E576BB4
SHA-512:	FA07F0960239F9034E66273A193AD7F1393BB66CBF3762083890619DE640BE705663D9A21CBAF18BB8CF87E400BA1F84BA4EC6424E735521C5B4F22B21E2FB18
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ITX.y....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VTX.y....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VTX.y....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VTX.y..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 20 14:12:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9943813738855316
Encrypted:	false
SSDEEP:	48:8IvOdBTpNYHjidAKZdA1vehDiZUkwqehiy+R:8I4Pxky
MD5:	A87EA3111ADCAF8960B8C7C4BF2F2FCC
SHA1:	B82FDF01B5C949C6F6E877F6F3B1BE40CDE41215
SHA-256:	745ECE9CB378C8624414A476481FFC9CB5F6B5CCEE93F1F0CE17F896EF196310
SHA-512:	DEED22FDD01796C73BE8882DDA55C2AA1606B79E79B83AEE96DDA0D42960113978D2EE6426B6BEE145D063788E260CC55922FF024757B7858B1A4CD0706F0E88
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......QC.d..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ITX.y....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VTX.y....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VTX.y....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VTX.y..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VTX.y...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 20 14:12:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.980685973926629
Encrypted:	false
SSDEEP:	48:8cOdBTpNYHjidAKZdA1hehBiZUk1W1qehYy+C:8LPR94y
MD5:	6ACA8F7958B21206FFDE1A81DF560895
SHA1:	C22664C23EFF6E5A1AD699BC74664284661B7C1E
SHA-256:	F1120C25785F714BD9A5E227DA587101088A4FA7326D97D4BEAA689CB0160F45
SHA-512:	6A1E425B4B0063E342D339A1CEA902DA1A265EC3D15065C937B5C3B83F33D9D68C1A2A317E8DBA8BF4B0EE575C7368EF86AF22D3FF9E34912B7E2175F09006C3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Q_C.d..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ITX.y....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VTX.y....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VTX.y....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VTX.y..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VTX.y...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 20 14:12:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9907222435948038
Encrypted:	false
SSDEEP:	48:8sOdBTpNYHjidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbKy+yT+:8bPNT/TbxWOvTbKy7T
MD5:	733B83D483AE11B22D4BE20DE253C5DA
SHA1:	948503319FAFF0BB51E5CFA220DF8C19C1ACEEB7
SHA-256:	1A8A2BC1365F832A7E098E92E7CB22A998B156FCBD0816464E3A04A2F8E2CFB4
SHA-512:	2A81B74CA9813B6C05B6641EDC611F981A2EB304502D4BE297B27077EF269E5E39BFC55311F79916E392EDA6835E6F113485D7E0E395B1EE08F20D075BB5FC28
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......GC.d..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ITX.y....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VTX.y....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VTX.y....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VTX.y..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VTX.y...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2326)
Category:	downloaded
Size (bytes):	211406
Entropy (8bit):	5.564703085416998
Encrypted:	false
SSDEEP:	3072:vbAlZFi9SCBvkVprC+WJcYbADupPSQzsU1S73rSvc:javRtWJB1mrT
MD5:	757570397FE8AD0B94B75DDCDC160BA2
SHA1:	F4885C9B0944BECE15E87C8F15D91118B8D9EA8F
SHA-256:	C5C1AFED412E5789454807EA8F4C88F90FC70C54B96B6719A60BB5F9DB3391B9
SHA-512:	3B913B0A1DD2AE7EB3535E158978DAD81F998C0CFFB2ED5D4072179BBDCE099AB09A089497B21607A3926CADE415171545ADCF3AF31984814D432D1294C51EE3
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.uGHZxV7XvKA.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfrMIccDr9tE16dVkW9efHRLLXAdtQ/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Hh,Ih,Jh,Rh,bi,ci,di,ei,ii;Hh=function(a){return _.Aa?_.Ba?_.Ba.brands.some(function(b){return(b=b.brand)&&-1!=b.indexOf(a)}):!1:!1};Ih=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Jh=function(){return _.Ca()?Hh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.Ca()?0:_.v("Edge"))\|\|_.v("Silk")};_.Kh=function(){return _.v("Safari")&&!(Jh()\|\|(_.Ca()?0:_.v("Coast"))\|\|_.Da()\|\|(_.Ca()?0:_.v("Edge"))\|\|(_.Ca()?Hh("Microsoft Edge"):_.v("Edg/"))\|\|(_.Ca()?Hh("Opera"):_.v("OPR"))\|\|Ih()\|\|_.v("Silk")\|\|_.v("Android"))};._.Lh=function(){return _.v("Android")&&!(Jh()\|\|Ih()\|\|_.Da()\|\|_.v("Silk"))};_.Mh=function(a){if(!_.jg){a:{var b=document.createElement("a");try{b.href=a}catch(c){a=void 0;break a}a=b.protocol;a=":"===a\|\|""===a?"https:":a}return a}try{b=new URL(a)}catch(c){return"https:"}return b.protocol};_.Nh=function(a){if("javascript:"!==_.Mh(a))return a};_.Ph=function(a){return _.Oh&&null!=a&&a instanceof Uint8

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	6576
Entropy (8bit):	7.889568697397619
Encrypted:	false
SSDEEP:	192:9wIdDGiBzzdRQLNyx6y1v0YoOINbkPq10w/+mJSQmCC:iIdGqzrHpvYtwksUHml
MD5:	560C49225BD1DD023B0DAAE95F02F7DD
SHA1:	8BEB706721A95C8D711141E6D5AB324CC781EAA0
SHA-256:	86762D5F7CD6EA99F5E77F37E0D39557FA44ACD47969F4C95293D4E375DA2615
SHA-512:	418BED969125C2473E052A5A1198771AA8A55618A4A0DE9E1A151AC27710F36F4FE616CCEB0EDF1A859C8AC758E137747C728E35AA861BC61507B17982A46F62
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?...bIDATx....L....qz7.&l..(u....R.19...;..P6.^.\...aR$.Q%R.K.(I...&...)."......V.".......q.%.g............N:..\|......_.....9...c........<.RSO...@6...=.....4.. ..h..@.#.....G....Y.@.........d=.....z.......4.. ..h..@.#...`.....7..4.....Y..G..>r5:..a..h..0.T..H.........4.. ..h..@.#.....G....Y.[.....s5U.....V..0T....MU.5..,.F.....4:./.o.5.].F..4...[.Z.L......\r..@..[.Z....Wd.AB.4.....\..y...L..f..R..@..@..oL..ib....../...w^.c..`..O.q{.I...<......_.a./..r83.........~.....4...^j......@z\<...J....e]z.I3..B...VI.i.f.B... .Q....o.O.1..<....?...I3..)....D...R....N.I.=4..$..T...twl..b8...^f..T.l1..)"...........I.].j_..sf~y..K..........sqag..k.......z..e.b....:......JO..._.../...c...%'..t.......J....Tg..........w.!..;.9.....e..{....B+k].Ff....Y..;......`.u.:4...J..a..M3b.....qe.....@..@..+... R....?......p..C...7N..-..(.p.bS.ys._..05.((X...h\MU..*..`f~.....eQ.4...lTYJ.f\G.^fR).....w..Z.{lN%9.'.9..

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6318
Entropy (8bit):	7.935390422687396
Encrypted:	false
SSDEEP:	192:nSDS0tKg9E05TXDrPrpbRodG9fziQTldTC:SJXE05DDrPfodGBiYC
MD5:	FC60A97D7515FA4F42A447914B2B6772
SHA1:	85A60D732C54237B1AF764AE27E93A3DF0B1B7AF
SHA-256:	02CFA68D4359ED3FCF76F23119382EBBA308919F2C611C2CB15F9B2E1C4B535D
SHA-512:	35A351A3099304E174D520CC67ED4107C7BFB18DC2F71D991F815BF343DBCB99DAEA126DF945D9E31E67193AC8355E0D4466070EB679E8730E7413DE1C647E12
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...6......g......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 5 x 5
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.235044928183382
Encrypted:	false
SSDEEP:	3:CFzUJnUynPUZBauGwkZXJgHl//ldzl7/lPlZYuhyyXen:rpSZBauGwkZXJ8t3lRPYuhO
MD5:	9592128AA776E64480EEF072D120078B
SHA1:	4272E55790E40091E5E9D5C37FF3E8E907DA514C
SHA-256:	161E8992C69149EEA55F9308D3E730FAAB463372C66B551807F2272BC79EEFC7
SHA-512:	9579AA344C576880D1DB86DD933FD20848C71C00228139F45A0111BA7EC1B8CE3FDBA13C0071BD2E32D2B54A56A0C2F272A179DA2F38B551E9C77A3683D26BAD
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/appMedia/bulletBlue_5.gif
Preview:	GIF89a.......5SrLg.........1...}.........Kc\|k......&M.....!KVb.%6.....6Kaw.4X..'KRX........................!.......,...............R$KE.@CD..H..Y....;

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 32524, version 1.0
Category:	downloaded
Size (bytes):	32524
Entropy (8bit):	7.990414172704109
Encrypted:	true
SSDEEP:	768:tUcaEUhX4G1RqyIh7sah2nt04N3EP8sEqSJMWaYd7T/h/25:trarqyIVqnwPA/7N25
MD5:	457E30CDD5BA22CF8676F324BE5EAB78
SHA1:	2D4DE25C454461C1F205293516F298AF70F02446
SHA-256:	F43EF5A89F1CDA4F2B23382969EA0B29D0143636AEF7FFC2D2C4FD0EE159E588
SHA-512:	CFF4A94F8A15A38BEE65F248311C2307B02131FF46700C192579AE687A9BF0C9C266274BCAB62FCBCC799F6361BB4448D0620731BD8EF2840E18B68D44E146B6
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/4d44c2/00000000000000007735a6eb/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
Preview:	wOF2OTTO..............~.............................?DYNA..?GDYN}..P..b.`..,.6.$..\....~. .#.U....b<.(....UB......._...G.0..u..z.v.U[9..Y../......zx...,.t.6..M[r7.........(i..v..X....;.Z.e.8..).I...!?._......9.]we..3.u.>.j>.....@...Q.[...X..."...^....3 ..R^2!K..s&f=fN.X.@..kGo...c.....7._.\..^..&(.r)..,HK.!.DT.%.....a2.I.5...\|.7........L.N.'Ul..[._.&...+...D"...w..L....}.6M.:eA...L.}..+..T.K....M.......#Z....h..A...i....5.Q..q.....&.g...R.)...J.....1. ...$.8..-....g..>..@)..Lf.....hJ....E.......F.H../k.0BK..%H..v0...>0q.DS...->........d.........g...r......o..............,>).W.~.~y.I...?.+3...r..>'<22jDFfQvRBb..q.{J....F........H#...R32...s....!..(eQ..q....R.e/....#g\vT.[.S.UU.......J:.;.....a..F..c.5..&....MI....s.e.e.e....Z..5.:.:...6.6.c;m.k..hv.t.r<.F....B..+T...w..Ghu......E0...F..v..fO.3...c..`1B.*N...K..b.X$.....Q...0.#0...TL.r...\.[q....x.O....W..>...$...N..(.z.D.D.h.-..A.TIU.....:I..<].'..>S..q57p#wp.<.{.P>...K.2..'p=\#.d.FdT.d2L/3..aN0

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.3842604674842
Encrypted:	false
SSDEEP:	6:UmNBeVYRHY7aQW3Z9LJhrp0RAgO9lDezFxRWZUVSkoVd6pduhSYygEZ7NAJPFEaH:UmjdQW//NDezRWZUYkov66ygdP+JK
MD5:	DEBF20D1288D8E94B5ECA756ADEB9E9B
SHA1:	5ADC462CC0A2AEECB3F66050F5CF51BF046793F2
SHA-256:	1FFBBA1B2B89B6686C05041748A60EDE759491E6C97DA9640D2982C4805A8762
SHA-512:	62D00C2BD578E2F98DB884D0EDD8C230C331364251CAF5EA81BEE53E2658040809FD169140EF9E9AE81EABE8A9BEB126F8DDACD5E21FD8443F44412FB7D77394
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/js/search.js
Preview:	/* Swiftype Search */.... (function(w,d,t,u,n,s,e){w['SwiftypeObject']=n;w[n]=w[n]\|\|function(){.. (w[n].q=w[n].q\|\|[]).push(arguments);};s=d.createElement(t);.. e=d.getElementsByTagName(t)[0];s.async=1;s.src=u;e.parentNode.insertBefore(s,e);.. })(window,document,'script','//app.swiftype.com/install/v2/st.js','_st');.. .. _st('install','3jhvv-yfJCUxQ51kSGbN','2.0.0');..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540), with CRLF line terminators
Category:	downloaded
Size (bytes):	152848
Entropy (8bit):	5.059573098341021
Encrypted:	false
SSDEEP:	768:M9xkzARA8ESOaaTRHpD5e2omoKOquiARNTNU44DMIMWTn5WBOiHccgp8PenuXsNS:yuARA8Ysgp8P3XsNRDocDZ1LenvYZWl
MD5:	916020D38F38AE2D7790F2395BBE4CA1
SHA1:	DA034944247A91F8003BA91494B62135AEBD36D1
SHA-256:	D1F6DA1FB8FA2A58D109D637B2915705A9E7922FED7913D7E24F0A041531DFAB
SHA-512:	B3283FFD5106F69494B5D25DA9C5031E77121535F2CA52936E27944E7E5F5DC91BFEDA1C8B6357CD313814EE989A33311EDAC4797F5B8CC4C2AF054C9E1DFD0A
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/bootstrap.css
Preview:	/!.. Bootstrap v3.3.7 (http://getbootstrap.com).. * Copyright 2011-2016 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. /../! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */..html {.. height: 100%;.. font-family: sans-serif;.. -webkit-text-size-adjust: 100%;.. -ms-text-size-adjust: 100%;..}..body {.. margin: 0;.. height: 100%;..}..article,..aside,..details,..figcaption,..figure,..footer,..header,..hgroup,..main,..menu,..nav,..section,..summary {.. display: block;..}..audio,..canvas,..progress,..video {.. display: inline-block;.. vertical-align: baseline;..}..audio:not([controls]) {.. display: none;.. height: 0;..} ..[hidden],..template {.. display: none;..}..a {.. background-color: transparent;..}..a:active,..a:hover {.. outline: 0;..}..abbr[title] {.. border-bottom: 1px dotted;..}..b,..strong {.. font-weight: bold;..}..dfn {.. font-style: italic;..}..h1 {.. margin: .67em 0;.. font-size:

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 97 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	548
Entropy (8bit):	7.325374192068574
Encrypted:	false
SSDEEP:	12:6v/7Pt/kFt0hJz99X22Ct2cMyhz29JsDNNene/q3aKKFgURwj5j+E:luB9X22CoVlCztlKwgG4l
MD5:	C7FDA308F337B54D4C18827123653326
SHA1:	BD4C29196712A6776B7D90DA421C744590B7A0A2
SHA-256:	0D4C32FB0B404BFB154471DAFAF604CCA7822F6668A7C0434A23455821FD3334
SHA-512:	70D3EF716A268B5A8BC15CEE37ECA12131FBAC9EE9FBBF62C16EEC1B538F2BAEF2B8CD97F4304BA1E2FD5EAA98DC5EA74414A23638E7FF4D18A8BF1073EDDF49
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...a.........V..t....sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.N.1..}y.......$....e........X...X.>AY..1."X`.'......N...I..U.....gB..S.d......HA0@...R...%.y....d!t......#e..R...\|K..2J.J..(..r.N.....\|."eM.S.^e..l..Q..W.j....a9[....A.3..D....>t8Z.....?.......D....=.j.....b!.n.}`.....,...6.7..a.H4...r..2.{a,.........O....P{o...l.........../ ..............Sf..sf.O....Hf....o.tK..gV5.XZ.91AcF..X...b..[4cHw...0....V6wK.%.1W..-4..j>7....:n...3..8..=x^.....$....XL...R....`..... D...F..f........IEND.B`.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11414
Entropy (8bit):	4.737384177444422
Encrypted:	false
SSDEEP:	192:JOD4DP3nxz2x3HYZfFqAfADiLYzyjWnwU0LPHgR/n:kD4D/xzOHYhFRBEzyjMSLPHgR/n
MD5:	3048D4CCC0AF6BA4104A25E4F9FC6D87
SHA1:	63BC97C0D384F2EFC1E35960C9E936939124332D
SHA-256:	8A12B2173FFEAE3FC8629C27442FB2365E749F49D3C45C9E60167035641D3000
SHA-512:	A725C6E5BA6C87AB32427512742D59ECD2EE1F045D72B2C2BDD0C2D988EE69159B0C7F6218B12012C7E6C5D352A548613AED725F80E06EFF041D8B78D6D8C35C
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/js/main.js
Preview:	$(document).ready(function() {.. //if the DOM is ready.... var solidMenus = {.. default_menu: 'index.html' /**/,.. default_animation: 'animation-fadeInDown',.. swivel_animation: 'animation-fadeInDown', //for mega-menu-6 only.. window_width: this.reportWindowWidth,.. nav_width: this.reportNavWidth,.. timer: '',.. scroll_fix_value: 25,.. init: function() {.. this.cacheDom();.. this.bindEvents();.. this.loadDefaultSettings();.. },.. cacheDom: function() {.. this.$window = $(window);.. this.$document = $(document);.. this.$body = $('body');.. this.$navigation = $('#navigation');.. this.$menu = $('#menu');.. this.$home_menu_li = this.$body.find('.home-menu li');.. this.$main_nav_li = this.$body.find('.main-nav > li');.. this.$div_animated = this.$body.find('div.animated');.. this.$full_width = $(.. '.solid-menus .full-width, .solid-menus .gallery, .solid-menus .sub-menu-1.home, .solid-menus .t

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.408694969562841
Encrypted:	false
SSDEEP:	3:mS1noSrcij9inY:mS1nPfj9L
MD5:	7259D5D90BBD1EEF7698D31791533825
SHA1:	D6C2BC1BC57FF95D1CF457931878C88CF1B6B363
SHA-256:	FAFE861F9CBD76B300491B3C91AAD73C84A7D39CDEA3074BA1C56BE5676A603B
SHA-512:	2CE61FEDA15B9D89584CAE2C727BC45E89FC269067596E9515356D2D61298AC818A3EA5CDF9659AB89E08945BBB9CB06C3A45D7DE479648CD4DAC06842C63FF5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgkNh5qJLMzoZxIFDURfWHoSBQ3YxFLyEgUNlJCS-g==?alt=proto
Preview:	ChsKBw1EX1h6GgAKBw3YxFLyGgAKBw2UkJL6GgA=

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	308076
Entropy (8bit):	5.486311191474021
Encrypted:	false
SSDEEP:	6144:SX/LnakV///kv3TSZWkcSOdpTkmX7SelikleiiGOkb5pwFpFDnxpKkRnfmLXXp+l:GaE//m3TSZWkcSOdpTnX7SdXkdpwFpRr
MD5:	CEECCA931EBCE49C351CB589561BF211
SHA1:	65D884B0BF4D844B833E30844548A9236B115737
SHA-256:	17878C03F9BC44C3D7285D83E9C71CB198BDB6BF2DECCB7C27798AF6568E6AE8
SHA-512:	4A8E34A2004D5F525F8407389B1A1DCD851AFDF984BC39F0A3D8D316556E6B8801985178923F69667517E7444DAD32FB9EC5511435E23F9562BE2026122B068D
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/moment-with-locales.min.js?modifiedDate=2023-12-21T12:52
Preview:	!function(e,a){"object"==typeof exports&&"undefined"!=typeof module?module.exports=a():"function"==typeof define&&define.amd?define(a):e.moment=a()}(this,function(){"use strict";function e(){return ct.apply(null,arguments)}function a(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function t(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function n(e){if(Object.getOwnPropertyNames)return 0===Object.getOwnPropertyNames(e).length;var a;for(a in e)if(e.hasOwnProperty(a))return!1;return!0}function s(e){return void 0===e}function r(e){return"number"==typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function d(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function _(e,a){var t,n=[];for(t=0;t<e.length;++t)n.push(a(e[t],t));return n}function i(e,a){return Object.prototype.hasOwnProperty.call(e,a)}function o(e,a){for(var t in a)i(a,t)&&(e[t]=a[t]);return i(a,"toString")&&(e.toString=a.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1334 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23395
Entropy (8bit):	7.80204461845836
Encrypted:	false
SSDEEP:	384:GJStibnEXvl5QuhNzncEymNpC8+Vt0xLn3k8miAn4eJ8jzOIjXFEIY3Hy:GoibnEfnhNT/NI8+Vq0iA4eJ8nOIjVEy
MD5:	F820891D34E9C2C77AC7B9EAFC4DD377
SHA1:	71BF23D4F91A17A1FA5420A7FE2E9C0C57464526
SHA-256:	8B48A6EEA8D6A446659A0A721802EA7C10DACB869C2B16236903AE5B1E7AC2B4
SHA-512:	D1D208279897314880B889256FC377864E4AF9A0A2B791939D563049FCA51490DC020DF519A4A6D53DD450F17432B879892C2B376929DF1E7548DFA9E9E22182
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/public-home-bg.png
Preview:	.PNG........IHDR...6...,......(......sRGB.........gAMA......a.....pHYs...#...#.x.?v...!tEXtCreation Time.2023:05:09 12:35:58.....Z.IDATx^........j..#i0.[....M.......................%. ..c....`.c...t.Z2...Z....lp0....W.?...n.3..u..?3................................................................................................................................................................................................................................................................................................................g.O.........j.jx.....y........&...0A...y..\_=k.3.\|.o.^x...0JE..........A........`r......u.m:.....u/]......b..........l..........M........C........`r.6.......L..&........!........09.........&.`..........l..........M........C........`r.6.......L..&........!........09.........&.`..........l..........~..:.....c..~y\|......jw..W.....z...0......s.....Uo/......"<E?.]...c.<....`7.M...a.0...!..v...~../..E.....AWt......U.(.\|...... ..&.....K..U.../.U2..0u

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 5 x 5
Category:	dropped
Size (bytes):	152
Entropy (8bit):	5.235044928183382
Encrypted:	false
SSDEEP:	3:CFzUJnUynPUZBauGwkZXJgHl//ldzl7/lPlZYuhyyXen:rpSZBauGwkZXJ8t3lRPYuhO
MD5:	9592128AA776E64480EEF072D120078B
SHA1:	4272E55790E40091E5E9D5C37FF3E8E907DA514C
SHA-256:	161E8992C69149EEA55F9308D3E730FAAB463372C66B551807F2272BC79EEFC7
SHA-512:	9579AA344C576880D1DB86DD933FD20848C71C00228139F45A0111BA7EC1B8CE3FDBA13C0071BD2E32D2B54A56A0C2F272A179DA2F38B551E9C77A3683D26BAD
Malicious:	false
Reputation:	low
Preview:	GIF89a.......5SrLg.........1...}.........Kc\|k......&M.....!KVb.%6.....6Kaw.4X..'KRX........................!.......,...............R$KE.@CD..H..Y....;

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 67
Category:	downloaded
Size (bytes):	9863
Entropy (8bit):	7.903954226836314
Encrypted:	false
SSDEEP:	192:mV42jAzV3qgFas/2p5tT3QfFY7ylnZvzCJa0Nb9HKEsEeyDUlRuc:yip3RFn/yHQu7y77CVb9HKEFDUlRt
MD5:	6DF0FDC03243244B0F9BD38C0D82140F
SHA1:	2281CA2AE42482BF227CEFA42AF9A0D49F29A721
SHA-256:	1ECD4B81C88D4CBA7C2B030F91B086DB16CD5A2B20D47F8F9122D523385748F2
SHA-512:	B39AF3E5A778130D09DB49F19035AECCB1DBD4DF8C7342757B7E093A2D55A5D2573F782D43E07CE24A6C832FD8E1CB8D6CEFB7A43722D98396C18E7BA84A9BA3
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/cont_banner.gif
Preview:	GIF89a..C...............f.(.'+.&..%-.&..6I.=P...)=.U`..n...p~.3O[..w...r+G......hZq..g..e..b..^..O..h..c..j..d..l..p..r$$x00}==.CCsmm.............MN.UV.bc...my{.................q...()-........en...................................i{.}...........Y..k...........C.....'..#...............................+..B..S.._..l..z............................................$..1..6..5..;..@..J..P..Y........w....=..\..e...$..y......^.2......@S.#-.M]H..Mhp.&..#.8D.%+.....4."'./../...........................53.74e..............0E;......z\|{.........................jlj.....~..BL;...vwuPUH...qrn.....a.........da@...M.p...\|p?.8..... .Z........lU...>=3...C.s...7.<....7..=.....a`^.7.;....9.......z7......942..}.v..tZ.]?.wi...L<.]U.oizKF.C3.?2.)(.1..('...!..NETSCAPE2.0.....!.......,......C........H......\....#J.H....3j.... C..I...(S.\.R..F..MbRh...`Z.....@...J...H.......i.NERTf.D9v..)...!E`.`.$......V....B..(.K...x....._..(Q....g..-[.......d...k.B0.E.5...

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.2001615812851174
Encrypted:	false
SSDEEP:	3:CUO/RD/0xlpfx/n:oDAn/n
MD5:	41C9BC7F3F78ED71115CC062C1C67B09
SHA1:	FF200D7EA28780D12BD6D9334178B930DBD5884B
SHA-256:	1CD58A827318C4A29B32A0DB15C8C39D5651B42D8CAD227519AD81BCE4ADB944
SHA-512:	280EA4383EE6B37051D91C5AF30A5CE72AA4439340FC6D31A4FBE7BA8A8156EB7893891D5B2371B9FC4934A78F08DE3D57E5B63FA9D279A317DCBEFB8A07A6B0
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	3.315789272504005
Encrypted:	false
SSDEEP:	3:CU7llexltxlBc6:1lluc6
MD5:	6D69C4DE0545F6FC9BA3DCD899E29501
SHA1:	201A59B8ED906C84C99E9BE323D3C5DD0A0AD0D4
SHA-256:	7F86128FC63CBAB878D570AE894EF2B7FA8694A35367E99EF351545C26335930
SHA-512:	640C029AD0D3CDC51ECA67C4867514A4BC400AF8D229821935F2FE988596E6339A4A6D63FE4C3A01F953BF7A460D0EA4F6170B535BD7AA96F739EBF765CA1733
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Business/glMedia/1ptrans.gif
Preview:	GIF89a........3....!.......,........@...Q.;.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1639
Entropy (8bit):	7.859432072023189
Encrypted:	false
SSDEEP:	24:nJkFza0FBATkRP6RKoN+jKoP06KhwIFZGufvEL78ExBCJRuQKPOaL+qKpm2lQdwd:qpaFwlPoN/oM6Kbzlfve3BCJRCWaDUrL
MD5:	3F252DFD5F9F6A790F1D926ED5AAEEFE
SHA1:	87EE0AD1360B58B4729C9300FA6CC8543998F9B5
SHA-256:	6E00110EE6EB53E308634B4E17345446F104739EDFC7D7F99EC2A37C8F2EFA82
SHA-512:	88B0025C96F224A3F82E9E701CCBECD4409E36524C68D1EC2A87B04EB29BA96820F6386979F8F0EB2AC571E0DF70AF5600E8730C362174E64F23396A19949F34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... ............tEXtSoftware.Adobe ImageReadyq.e<....IDATx.V[lUE..=s.m.....B..h.a.1..AP.~@.(....>L.LL.$M...I....D@.R.......i..D.BQ,X.J_..gf\{...B.....sf.c........".s..rJ)...W\|..)O..........:.0...y.aLkl`#.&`..5:.W.....U....._..c......C..".ON;...y.U.4Y....Wj.......@.a.'cb...U...#..%.C>R._.z0.....Ow./.t>"X.9A........Jz.........6..............b~ti.....T.F]G.s.x..(....S.N.wo&..d...r.W...M..8...h...3.Lb...g..644..!"0..{..wv.5._.D...i.,+1..@l>.R.Kq..VUU..."..Q.z......FZ...7..W....Iq>N...S+.W........jVdI6..EL....4.../._..2....Z$!p..q>.J...QS0...<s.,..../mY&..b..3..QwW_..........@.n..'..) .g.Z..{f..S...c..Hj...6.f.........i......91.....2&.......:..1`..[O.#@S. .o.W./.}.s......]\F..@@R.E..O......g..<.%)n.c..:...W..e....a..@...={6-.!....V.o..n.%....v....{...[/.....iwh.n..F..5/....."b...=Hw...4.X.....o=....Z..<.s..86..}.~\|Yy...x=\|.....-].b..K.../...t.......ha]....I..7..6<~.~.C..;z..\|......G.;F+s....TN..hWT.F..l.U7.I.W.......

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 280 x 100
Category:	dropped
Size (bytes):	4548
Entropy (8bit):	7.685013352964227
Encrypted:	false
SSDEEP:	96:WZl3Yb8GLo6kTGxlgEIUhr3n2vrBaLbBcJ:ycLb6GxlgEIq32vlYOJ
MD5:	5BDFF07FC72B8EE7ACA4422E6FD0FF9E
SHA1:	5EF88D8373CEC71A8881CDBCD0542F51EC1B466C
SHA-256:	745B80D8C9691BB2F83651A38771D98B6F0B0B62A8D799FEA723D3C58F012A63
SHA-512:	AADD6DD7321E1CDE78CA3BAC346424998B736D0C7DD6565D075E2CC778E7A764A514072C84E78BD93DB6F93B9D119F32A5481B61AE8C603ED46B74C1EB4E919E
Malicious:	false
Reputation:	low
Preview:	GIF89a..d..H.......\|...c....K..[..:..........k....{.......k..........R.....c..Js.B..1Z.{...1c...c...........k.........!{....1.......................s...........Bs!J{Z{...........Bc....{.....Rs....k......1k..............................................................................................................................................................................!..NETSCAPE2.0.....!.....H.,......d.@...G........................................." .............G...........%.%........................................'.....$.....$(.`...A...)\.p......x..........B.. 7$......(S.\...0C...@...........A........G..X.........T...Lk2...@N..fB..`.B..8p...G...t-......Dt...z.%D.-.e...D...o........3k.l...e.b..0...O....4..!...E.!..i...@..H........65D..%7........N..q.....B......O.%....(......vL.?.G..,[.l.......@@.I.$...-..T=-.....4..#...........v.TCq.. Jm.@OK.5.d.........R.P0H.4...MD...`G$...{...W......G0.c.:.!AbI.2.c.....Y......U...x.d$.)..fuXT!G.R"..

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1663
Entropy (8bit):	4.723352299766563
Encrypted:	false
SSDEEP:	48:U/bqN68n08/1yn8/1ytHqHylltvjfAEo9z/Vs:U/bAPB9z98KHy/trfAEo9z/q
MD5:	7E2470FE30AB56A1F8F8EB896B407207
SHA1:	44C3EEEF0AB30F42C72644A75F88808C8EC39DCB
SHA-256:	215B6A86FCD07330E664E6516E1985CDBFBCC5E96026E75C0A19274ABB1B0012
SHA-512:	4A1B2BCE4506D525E85B27CD67623821AE0548E0F49BBE862CAA17C6442AB8C10974F9D470737B17B0040C1232723CA8282D6E7E14A125C46CCFF46797D42438
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glStyles/defaultcss.css
Preview:	body {.....margin: 0px;.....background-color: #ffffff;.....}....td .. {.....font-size: 9.5pt;.....font-family: arial;.....color: black;.....text-align: left;.....}...../..td .. {.....font-size: 9.5pt;.....font-family: arial;.....color: black;.....text-align: left;.....}.../.......h3 {.....font-family: arial;.....font-size: 16pt;.....color: #000000;.....font-weight: bold;.....}...........A:link.except {.. ...color : '#000000';.. ...font-family : Arial;.. ...font-weight : bold;.. ...font-style : normal;.. ...text-decoration : none;.. ...}.. .. .. A:visited.except {.. ...color : '#000000';.. ...font-family : Arial;.. ...font-weight : bold;.. ...font-style : normal;.. ...text-decoration : none;.. ...}.........table.subdefault {.....border-style: none;.....padding: 2px;.....text-align: left;.....font-family: arial;.....font-weight: bolder;.....font-size: 9.5pt;.....}.....table.except { .....border-style: solid;.... border-color: #000000;.... border-width: 2px;.....}....#thright

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (320), with CRLF line terminators
Category:	dropped
Size (bytes):	56800
Entropy (8bit):	4.700973040918367
Encrypted:	false
SSDEEP:	384:dA9BEHn4QampTUgIzIdyRfS6TTXzz+aOrm+wazQUBdUatu5Op73A6GIWCBRkCKWB:qQYQd5Ugr8KQWA6DA6/WCBlZ+hW8w
MD5:	91B500A661503F65953AF7F7707CE5AF
SHA1:	2F3DFC6D1CC1505267827BD169EFA318DE757F3B
SHA-256:	C8B0055EA71CD91E0C244A1E9CCBCB16184982DDAAD4B1075D1BEFA6C1391187
SHA-512:	DA695EAC3AFCEAD2317CB316A7B54E3818D12A7495163B27402F3B8750719F3CCA7627FA5F96B1DE000AC65ACC800B096553993139D0F83BD2E86C7E64250488
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html> ..<html class="no-js" lang="en"> InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" -->..<head>.. InstanceBeginEditable name="head" -->.. InstanceEndEditable -->.. Head BEGIN -->.... Head include BEGIN -->.... Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NMG247C');</script>.. End Google Tag Manager -->.... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-LSF75XJL4E"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-LSF75XJL4E');..</s

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 41
Category:	dropped
Size (bytes):	1281
Entropy (8bit):	7.757793509069186
Encrypted:	false
SSDEEP:	24:pAAawRX4YwJSyDAlokpoGvHESsxCJR50OZRTrmJnEnthq95haY2/BU8:uJgUJN8f5Brmt325U8
MD5:	3F9E33EFFAC9B7A7FDF895EED58B9F5F
SHA1:	CA5BA269F1C510158B25CCE886BA980C67A9BFBD
SHA-256:	E066A2999F70EFD537FE69956080A96BE288E86BAB509714D063CDD91F6B7293
SHA-512:	F152BAF0C7BBD435B8C552ABA06216029194883CF5E17778E9903178BDB62D94730274F23A9CEC511E4BB361966D3F771CC3340EBA3F1442FC39293B4D474B39
Malicious:	false
Reputation:	low
Preview:	GIF89a..)..........-1.....vw.gjjab.dogWYwX].......BSh. j."l.#t.'.F\.Th.^f..,q.#e. n.$r.&w.'}.o.%x.)..2~.-../{.-x.+~./..2..6..:..=.$C.#B."?.'C.)G..M.,I.(C.2Q.6U..H....2..6..?..D..3..:.!@..=."B.&F.%E.J..P.~.i.%..1s..v.1..9.0It-B\|FVc.p.1y.6h.0].&P.&J.$W.^..R$5 ..\5CE..:..>.!F.-TOR........... ..$....%++39.........6=@$,(/129;...."#.. <BB')#.... ../+,&.....................$$ 44/:9$..F..7..:..>../..(..0....:H>...:..^\R(.......!...+.27/..............\|......#.g..M.z........p....mV.$....D.B..l......qL....dC..z..i..........W=.u`...u[.eP......hT.mY..q.n_...j..i.wi....z.^L.o^.}...^3%.iW..w.................VH.uf.w............{tr..._Q..........o>4.aT.ug..r.dY.....z....cY.\|...........phgvnm...........yy......!..NETSCAPE2.0.....!.......,......)........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.....

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2886
Entropy (8bit):	7.866240212679142
Encrypted:	false
SSDEEP:	48:3/6myVLIw69flrHRv70NjhWGct4LHpXi9H6nLwEoPMETmyBzkZubPheCR1EwA9pN:3SFLFgfD700GnHpSlmwpUepBkZMeC24g
MD5:	5BCE65D2A50618C67F79EEB273EC9577
SHA1:	1123F156723B05BF7E0828B07889C4103825137B
SHA-256:	AF3594B88D6AEF9396BF54492FEDB7AF94E29346DE1A111BD692C1C5207BEA35
SHA-512:	9F4A21D496FB8699E1F9ACD9F24CDCCF5062757924C105CF89FAE440AF78DF87561C8ED4DD1FF5E15C781B855C71ABC30473628319517EC741BA484E45BC4477
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/wcm/connect/11fffd69-e413-4ed0-8644-bf80120a18ab/RSI+logo.png?MOD=AJPERES&CACHEID=ROOTWORKSPACE-11fffd69-e413-4ed0-8644-bf80120a18ab-m8Bm1KV&ContentCache=NONE
Preview:	.PNG........IHDR...@...P.......sE....bKGD..............pHYs.................tIME...............IDATx..{p.U..?...MJ..PZ..mi.8...".. ......e.,..e..8....;..DA....1j)#.......5.h.iI..<.4m.4.....kn..m...n...{...{.9....&....j...R5I.m.%R3.A..+...OS.e....\y......./W...u.D.c.D...l!x.,...........O....d......4....]/.%R.L...K..A?.D.#.l...}.v.7....&.K.....>.....u....M...S....\|.8.....3...A.....`....`9p,.]..86Ou....s<.6..<iLp/..-G........W.Ku.\.k.\|jy.x2M(....J<..=...K.G..YX.<sK...........4...F..Z..W.......!.....x2]......1..c...=.).)^..x2]k.[....=.L..t......8..Z..7UM.y...O.W...7.x2}..$..p..R...8..]w....2.".6....4`U(.{."5.P.+5..........:4`...+./........x2}u)..S..?.hWg..<k<^....6.m.~.......7.....s.)..P...b....6..ku.`..P.=...f.O.&w........+.W...@W.<D...T{.:.O.....p..f..4;S...q....L...Q1A.P5.T..).g...2.X.,s...........5........p^H.iR4......R....../si./......u......q2...y .LW.C.&$...1...z`....._.>/..-...&....."N5.d.4...g....m...e....!......7..7.....\|.'..U.d..j...W..a$W[

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 74524, version 330.15859
Category:	downloaded
Size (bytes):	74524
Entropy (8bit):	7.99636049198076
Encrypted:	true
SSDEEP:	1536:iLT8p4MshznuE/ewUpA2FGML3zgH2dyZNxwM8SZ1AnNHYBlQlVZ6CfNUjy:iLTcihjuEmwUBFGy3zXyZNqFYKBr
MD5:	3E1B2A654A784CEB385157140B4CCD71
SHA1:	24354CCF21FB13A37B4484DFAC21A90E33953FB0
SHA-256:	975714C6CB70BA105BFA87D2415DF2FDDDE4A46C1D3AB9D0CF45465E56CBA97D
SHA-512:	347B20A3DB72224B04698AED1D6BD5820A16B769624656E82985D48491C7EEAE6901325E1A6E68318F5DF93F3802BC5865462F829A99C96A43723FC07832709F
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/font-awesome-5.10.2/webfonts/fa-brands-400.woff2
Preview:	wOF2......#..........."..J=.....................?FFTM....`........<..\|.6.$..<..`.. ......[{.q.h..BPwU..?..03.!l..14.(:...@..[#....O.E...)o..}~..3..Z..R.. ..Z....'.m..n./-.3... ....1P;....u... ...`..xj...... p.E;..=.r.L]$#.&..\.......~..k.!.F<....z3E'.e1..C.`.L.J$....y...P...R.Z...cZ.5...D.W.....Ror...y....&.....G.....rc..6...+.....k........(.nD)].Qh.I x......X=..3.&P.g......f3........p.E...v.R...X(M$.R..(.....c..UlI4.Vb..i..i.......".X....%..#"%..L......3..+..w.I......e.n....L.q..~....~.Z.W..[..- ..A.2+.D....Al...}..oFKp.T^3......U...&0~.,.\8..}...8h.n3;}.8.8KB.(...W.mJr..M..n.!...,aL.\.t[c.c..k_....!...<D".#3.4oT.dM..0.(._E.T...GF8z.j).OO..t.a;...........R.$.......KHj...)....uB.[y@...%.......\Ve\|3...Y...=.%>....G.us~.=>.W.&.........`8.rx....z....H....2.I...\....tf..E[..:G...edff.9.j..=?7.B....{....a.A...QJ.N=........>.GK..\.{=..P...a...#........_..!`1]%........Q..1...9..;....D...s...W%_....1.0..tu.r!dws..........:.&..?.........k.A.Z@..

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	8362
Entropy (8bit):	7.881028399929829
Encrypted:	false
SSDEEP:	192:T6UwAoysGz+SDpFsDXTH2W8c0FZ86GozwNW3gJ6D4z:T6vFysHKFsDHWRZ86GozwQ3gJ6e
MD5:	7B421A3B96D6CC610C36E1D73C9183B9
SHA1:	E767E3CE981E01235C7090174CD447C71EB0B339
SHA-256:	1A5799E35829FFA1D25B1310BA85BC0532F8733E14B68C7FA77220F5C383EA3E
SHA-512:	5A2D039F87D773BBF17D740326AFF5246447C43870C57DBE5770D251F19A95C6A32FF66B606EC176D70CAF36D0D7B7800488C6BC245FD11D886AE754417A4674
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?.. .IDATx.........M."H..Me"..`.=4.`..h9..4V+p.....%.e....p.....\....a.j.i/..[p.V{!$......c..<P.r.dh=.....\|.R....L.yG........nv5..;..y.....y1?.....d_.....A.....................<.4....x.h... ......@.!......C@...........................R<".C.S"...[....N..p.}....:>.B.h.....Q.".s.(..$e..&......W...u_Q}x.Pm...`..Q!.:..HR<b....5E.T.U..N..K.....`z..P:..-..qLm.e..mw..G$...... Fg.^.T>.T..j........`..Q.bV^.$t....m2ZTo.'..3'.bT .V.....j.&l........../$...........m...HV../....IX..... ..ph.B2.(...MQK.R....".....M..^...u!........\|!94.T..jn......\rh.T................\93.C....V.Y,.a........ H..im.61.~V.eN....k............N.u.....`.....?\|.9..=.p_\..t..bI..c?...{...u..OIQr.B8.......R?t...h....@...l........-].P=...............O^x.918.]............_....tz..]}.T>..iw{.R........H'#...?.....N......\|-..n.X..fj...+[.,.4....{....,.#.7b/.4......H.+gh.P*..zy.?...7./..E'.K..{o....R.h.....D3....{....}^.^.......

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2135
Entropy (8bit):	5.0386432612688505
Encrypted:	false
SSDEEP:	48:cVIAXQ8fhqeqJqOH1Iu8lEPquDOLanP3LE2PUyBnHjbe8qW:kVXQ8fikOH1Iu8lIxP3LrUwHnpqW
MD5:	254D1DA590FB2398E4C000573ADD6AC1
SHA1:	0402686160B67DAEACDE231B83A0BF135455F67F
SHA-256:	44842B42F9D5899D40AC390D90832DA13569E4CC9F6DBF9F462F6F4334952416
SHA-512:	5FA0D9AF9D08827EC812F77E8D20408227DD531D2E01FE6519F3440C1F0D94FC20EF337E54469F7628863EBA152F229AC3717798C0415751530B6D1F47B10FB8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="511.626px" height="511.627px" viewBox="0 0 511.626 511.627" style="enable-background:new 0 0 511.626 511.627;"... xml:space="preserve">..<g>...<g>....<path d="M392.857,292.354h-18.274c-2.669,0-4.859,0.855-6.563,2.573c-1.718,1.708-2.573,3.897-2.573,6.563v91.361.....c0,12.563-4.47,23.315-13.415,32.262c-8.945,8.945-19.701,13.414-32.264,13.414H82.224c-12.562,0-23.317-4.469-32.264-13.414.....c-8.945-8.946-13.417-19.698-13.417-32.262V155.31c0-12.562,4.471-23.313,13.417-32.259c8.947-8.947,19.702-13.418,32.264-13.418.....h200.994c2.669,0,4.859-0.859,6.57-2.57c1.711-1.713,2.566-3.9,2.566-6.567V82.221c0-2.662-0.855-4.853-2.566

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	56648
Entropy (8bit):	4.915204007104565
Encrypted:	false
SSDEEP:	768:A8m90u4qKWL4zKWL4oKWL43KWL4wKWL4ayXUf:A8m9l1KWL4zKWL4oKWL43KWL4wKWL4G
MD5:	B4CCB4C467F1A92C9E3CA85FF6A77EF4
SHA1:	9F90A83DB4BC1B4810394371A765A684A0991EF0
SHA-256:	8EC136E27059466D2A2A6911667E681BD41EFCCFEB03EA952041BA4F459555D1
SHA-512:	27CDE137090A9AF4163F1169C397310946DE8540CD4251C376D3A5C86A6E9865F7A0AF1FCAD8367A72C125758A7EC48DE6F71D16FC49E24100B600FA81B698E8
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/solid-menu-core.css
Preview:	/* COLORS, BACKGROUND-COLORS */..body {.. position: relative;..}..#wrapper {.. background: #fff;.. padding-top: 20px;.. padding-bottom: 20px;.. position: relative;..}...no-transition {.. -webkit-transition: all 0s linear !important;.. -moz-transition: all 0s linear !important;.. -o-transition: all 0s linear !important;.. transition: all 0s linear !important;..}...no-overflow-x {.. overflow-x: hidden;..}...no-overflow {.. overflow: hidden !important;..}...body-push-right {.. -webkit-transform: translateX(260px);.. -moz-transform: translateX(260px);.. -ms-transform: translateX(260px);.. -o-transform: translateX(260px);.. transform: translateX(260px);.. opacity: 0.4;..}..#page-contents {.. -webkit-transition: -webkit-transform 0.5s ease;.. -moz-transition: -moz-transform 0.5s ease;.. -o-transition: -o-transform 0.5s ease;.. transition: transform 0.5s ease;..}...collapse-push-right {.. -webkit-transform: translateX(0

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 188 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1112
Entropy (8bit):	7.764086728850737
Encrypted:	false
SSDEEP:	24:U5bCn0jkz/zeTtk//MGGdRoathjiSmqJfq7tlB1eAqiN:UFzjkWTzGGfxYSmqE3N3N
MD5:	7213033470AF5A89B0A674A4FB00902B
SHA1:	1D6643092265CA9CFDDD5A12538765CED6ECB07A
SHA-256:	3BE665A727C8493C25837C12B89AD5DF1E42B86790BBE35C91675E7E143C5805
SHA-512:	AA027EE146F2CF5BFD8B069889DAB62A3A5D41D444BF038956B85C2263606E504A027D45322885028227CFFB0FF42FE47794071891FB4E1908C214D6D7A0732A
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/nav1.png
Preview:	.PNG........IHDR..............Z......sRGB.........gAMA......a.....pHYs..........+......IDAThC.=o.1.........B.. .tD..K...-......h7...]...1Y..T.5....#H(.....yk. ...8wg..\|...?Nr.Y.....\|..$....B...X(....E.\|b..O.W...XS+=6..E..'5o..3f.{.~>sa\....K.%&.w..lL...Y..v.)...mgi.;...w..,1.x.Ogw.,!z../..J........?......X.6...a..S`..5;..@h:.`......ty.w....^...HS.9.nq..h..Yr.33.=...Xl.H.9.V).M.m..Ce..7...'.......6.wo.W."..PA@.......=f....;Q.h.uV.....e.....3........r]_p....g....o<.{{.i V......A...u../..........t.2.u......Zi^.o^80..?y:...F.>.+.y.6]..e....+..J.z..%.[......o....9. (......i..W..:..?....~..?.%...F..Z..l..... \...4`.P.A.6.......E..!..{q>...Q.!....".-18.L..c..+:.P.....r.'.?..D4..2M{6.e.Ml1.x\|{..3..b_(.h...[.....}...h..z8..(...E>.@....h..E..........g...B..u.QQl..=...Y.f..4...K.0....%.....G...";VgKv.{.yG1!.~..%z."..x1Fd..-.t.....^{...~..O.........e\{.[..-.Z>\..[..hv.....O.U.7..4Kt....l.:E...Cm......vz.#md...Q...qv.4.{D...lq}..Z.0+...jh..W..@.~.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (320), with CRLF line terminators
Category:	downloaded
Size (bytes):	56800
Entropy (8bit):	4.700973040918367
Encrypted:	false
SSDEEP:	384:dA9BEHn4QampTUgIzIdyRfS6TTXzz+aOrm+wazQUBdUatu5Op73A6GIWCBRkCKWB:qQYQd5Ugr8KQWA6DA6/WCBlZ+hW8w
MD5:	91B500A661503F65953AF7F7707CE5AF
SHA1:	2F3DFC6D1CC1505267827BD169EFA318DE757F3B
SHA-256:	C8B0055EA71CD91E0C244A1E9CCBCB16184982DDAAD4B1075D1BEFA6C1391187
SHA-512:	DA695EAC3AFCEAD2317CB316A7B54E3818D12A7495163B27402F3B8750719F3CCA7627FA5F96B1DE000AC65ACC800B096553993139D0F83BD2E86C7E64250488
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/js/jquery.easy-ticker.min.js
Preview:	<!DOCTYPE html> ..<html class="no-js" lang="en"> InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" -->..<head>.. InstanceBeginEditable name="head" -->.. InstanceEndEditable -->.. Head BEGIN -->.... Head include BEGIN -->.... Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NMG247C');</script>.. End Google Tag Manager -->.... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-LSF75XJL4E"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-LSF75XJL4E');..</s

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	6385
Entropy (8bit):	7.877578897334039
Encrypted:	false
SSDEEP:	96:Xdg12NFQPLUr86dWe8MeErMQFGPI0T1YQkGv54NrOHlDq/K4Ph29i4knw5ugHhhZ:tlNFQTURn8ZCxkPjT1aC5fhyK8h25l1T
MD5:	ECE1EB0B7DED38F8C17CAAA47225D531
SHA1:	1E59F5365112A465AE32A194CD1D873861A17186
SHA-256:	0E37DE7D1D220F12777F5B8F7D2BD3439C1AB5EF185C9C18E5B876639C89E18C
SHA-512:	112599AFD42A9CC7C0D77479FE24D992998D58293E2D19CFD35EBA2203A80E4C68F2AEBFAEF23287C40CC4128C1E3DD55993E7681BA9F647840E934F10BCF4B2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?....IDATx...oL.g..q.../.}Z.#N....E8Brtl@:.]J.Z..v..Kv.P):".M.M*.m.6..F.TJ.HA.T.?a_..%...t)/L.).P.!.......;.......u'....!..;.......y~....O........_q...........#.....G@...l............=....`{.4.....h...........k.!..)9..O..........\|.Alu=/G'... ..G..l..D.t..D^......16cD........=....`{...........&...;...Fh..........#.....G@...l...............h<..>..b.X.....ze..[......]?.O4>5.9zf....K..4..!........1B...sd....m..g..:.4..25.t<.X.I&......X....Z?.Y\(......5.^\._..@\XC@...(..By..u.V..#..J+#.....y........w...^...>......Q..l.)b...{...5..5.Ulu]..+&...=.I..!".!)....u.....M5.p..v..>.kK....P.n.D3............f22..,..~.....9.'_.../NMGn...L...f."z;qd.x.. ....4...CN.....+B..._.S....(Ja<............w.......0........b......&/.q...Lz...........8.....)...c.c....s.j....36w......>.=`jk.U.%..iv<.H.o ..k}k8..~g.G...."........C..y.,......f.f0...o(...e..2y....1...zy,.X.nzN4.....PD.Wn<Hn6...7..'..n.}s.w......eR).....

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2351
Entropy (8bit):	4.538905267540128
Encrypted:	false
SSDEEP:	48:wX0kI5Xz1pcr5MwL5IbKjJYvznozzpDOGmOfUG1hzh:AMpCr5RLmb0+TSmO8YVh
MD5:	54B4B25157C931E2306A12B143AE7051
SHA1:	774E7B0F71FDC0ACA936882D40B27A7BBA546DDF
SHA-256:	CD10B0CBDEA4B5CF68FA5641A15834EDC7CFDC716980DBF5CCCF9D1B8F30A4C4
SHA-512:	E5B2EDC5642DBA14D1DE0EA0F8E45B0F7A21014FE989AECF3136ADDB6A9C69A157A7DBC276DD5E8FF45FF1C54B276BC727E6C882EA79DE6F9ABE82BA4FF00534
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Business/glAppIncl/src_OpenHelpWin.js
Preview:	/* *******************************************************..src_OpenHelpWin.js - Global include used to open a ..new window sized to 50% of the parent window. This..routine also determines browser version......## to invoke this function add the following code ##..## to your anchor tag instead of the http:. ##.....##..##.onClick="openHelpWin('url.asp');". ##..## (where the 'url.asp' is the url address) ##..******************************************************* /..../ *******************************************************..Common Routines..******************************************************* /../ ********************************************************..openHelpWin..Open a new help window using URL passed to it..******************************************************** /....function openHelpWin(sURLh, p_Width, p_Height, bDoReturn) {.. var objScreenSize = getScrSize();.. var sWdth = objScreenSize.Wdth .5;.. var sHght = objScreenSize.Hght * .5;..

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (551)
Category:	downloaded
Size (bytes):	13277
Entropy (8bit):	5.231679968382157
Encrypted:	false
SSDEEP:	384:Z2p2/giCAbAGDjDbp3Yclnc3ljSiKhKBHyzy1xw:dVBnc3ljSiKhKBHyzH
MD5:	2EF627E046DCCCC8913D021A373D46FB
SHA1:	67838A79510A3CF8EFB95DF5271209CB97C895F8
SHA-256:	E222E93A7FCFDD7F9A59DE23F56367B6A217D81F332C93DC2694D1C13467766F
SHA-512:	011D63C2EBA028B56B9D4EACFA82D5EE00F55A0A0E8A1D9403C268CBDCF0A3A3F4272542F6E5355CD3EE1DB8D1455884CC40A2D720C4A235C69F7A895469BA7E
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/PA_Reg/js/registerExternalUser.js?modifiedDate=2024-01-30T10:09
Preview:	function countryCodePlaceHolder(){var b=phonePlaceHolder($("#countryCode").val().toLowerCase());$("#dayPhone").attr("placeholder",b)}function mobileCountryCodePlaceHolder(){var b=phonePlaceHolder($("#mobileCountryCode").val().toLowerCase());$("#mobilePhone").attr("placeholder",b)}.$(function(){$("#termsNextBtn").click(function(a){clearAndHideErrorDivs();resetTermsErrors();if($("#termsChkBox")){if(0==$("#termsChkBox").is(":checked"))return!1;if(1==$("#termsChkBox").is(":checked"))if(isTermsFormValid()){if(!checkPageActions())return a.preventDefault(),!1;showBlockPageOverlay();$("#registerExternalUserTermsForm").submit()}else a.preventDefault()}else a.preventDefault();return!1});$("#registerExternalUserBtn").click(function(a){showBlockPageOverlay();if(validateQuestionForm()){if(!checkPageActions())return a.preventDefault(),.!1;$("#registerExternalUserForm").submit()}else return closeBlockPageOverlay(),!1});$("#cancelButtonID").click(function(a){if(isDirtyData)if(1==confirm(DIRTY_FLAG_VAL

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (806), with CRLF line terminators
Category:	downloaded
Size (bytes):	17441
Entropy (8bit):	5.162877415324488
Encrypted:	false
SSDEEP:	192:wJu8kq0SsquLoKeNX5Infhy8ixtcaAZ3vRWbR6hS6CLtKTnY/FmLS3uW5T34:B8kq0SuQ8ifDAZsbACkdSeWtI
MD5:	56DC332578A7EF84E2BEBFC635D00AB8
SHA1:	57DD6859BCFC5B507905DB1101E9ED05968DE539
SHA-256:	775691E15EC9335C81FC347491E8BA96B13994F6534CAEDE882B128E500282B1
SHA-512:	0CF79C36040072AC0904D4266DB479626E28FBF1B8F5C839530D3D189C6947BB9C637F01E6E55BFA827CA11E3D693562AB88AAF224F3C1213FB5E264CBD7F84D
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/css/rsi/md/MD_Custom.css?modifiedDate=2024-02-06T16:48
Preview:	@charset "utf-8";..header{.. background-repeat: no-repeat;.. background-size: 100% 100%;...position: sticky;.. top: -150px;.. z-index: 1020;..}..html,body {...font-family: -apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto !important;.. font-weight: 300 !important;..}...header-logo-band {...background-color: #254293;.. background-image: linear-gradient(180deg, rgba(255, 255, 255, 0.15), rgba(255, 255, 255, 0));..}..a {...color: #005fa8;...font-weight: bold;.....}...navbar-default {.. background: none;.. border: 0;..}..a.list-group-item {.. color: #212529;..}...clientLogo {.. border-radius: 0.6rem;...margin-right: 10px;..}...pd-10 {...padding: 10px 10px 10px 10px !important;..}...header-info-collapsable {...background-color: #cff4fc;.. background-image: linear-gradient(180deg, rgba(255, 255, 255, 0.15), rgba(255, 255, 255, 0));..}...header-logo-text {...color: RGB(248,249,250);.. font-size: 40px;..}...info-band {...background-color: RGB(248,249,25

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4246
Entropy (8bit):	4.860354542857176
Encrypted:	false
SSDEEP:	48:KQvNocjFg1uF/dt7ypJIFfn9FI5nAumr6PweksJNcspiqNUOBzcBzmEfc:KQv1t5vXQjmHBQN54qNTzcBzmE0
MD5:	E950B6049D8ABC59E7871DCC45B49FF7
SHA1:	9A8B88CF785DBA23A44432652FF51C13FE70C3B9
SHA-256:	685A8A73EA3BD2B576970C6472C6C4259A9E5A4042DD466AF326D172D31A6A6C
SHA-512:	E20A18B1C35C850F7599B2622874EA828824A92F553ABFDFBA74EBDC5B2F9A8519CF76DCB7A7B6CFF8A2C162608BB8A45F1C1658965763DA2E9742C96A5E93FD
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Business/glStyles/appcss.htm
Preview:	/* A.subitem classes can be used to display the visited link as /../ different color. /../ ------------------------------------------------------------ /..A.subitem:visited, A.subitem:link, A.subitem:hover {.. .font-family : Arial;.. .font-weight : bold;.. .font-style : normal;.. ./ text-decoration : none; /..}...A.subitem:visited {... .color : #669999;...}...A.subitem:link {....color : #003399;...}...A.subitem:hover {... .color : #cc0000;...}..../ td.aRight & td.aCenter should match the default td tag with /../ the exception of alignment. /../ ------------------------------------------------------------ /..td.aRight, td.aCenter {...font-size: 9.5pt;...font-family: arial;...color: black;..}...td.aRight {....text-align: right;...}...td.aCenter{....text-align: center;...}..../ td.xxSmall & td.xSmall should match the default td tag with /../ the exception of size.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14748
Entropy (8bit):	4.79954117941745
Encrypted:	false
SSDEEP:	192:4+NLZkOKM/yy0fIOIqoG/z/L72MW9aooFvCB7DPX2gK+LxFaxbm0z/VxxITV35oa:pNLZkOKM/yy0f1rF7bm0KTlR
MD5:	FDDF6572FBFD8DADE2F8FB9B6004F920
SHA1:	1E03F4F8E59484E8B1179310BFDC5CB8E04284E1
SHA-256:	85C2AAB2B98BBD7C98F87CB8BEEC45D778F571EA8D573384F93AB4D6FF03FD98
SHA-512:	2574DEC80F42B3BE5F4A792E1AF6D997609171DBD0BD6F60CFE7243B07848600B633D047468970E6848CC724A1B29508D67C87A8F6B6E8C198EB11532A44FCCB
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/solid-menu-media.css
Preview:	.col-xs-2-4 {. float: left;.}..col-x-s-2-4 {. width: 20%;.}.@media (min-width: 768px) {. /* 5 Columns /. .col-sm-2-4 {. float: left;. }. .col-sm-12 {. width: 100%;. }. .col-sm-11 {. width: 91.66666667%;. }. .col-sm-10 {. width: 83.33333333%;. }. .col-sm-9 {. width: 75%;. }. .col-sm-8 {. width: 66.66666667%;. }. .col-sm-7 {. width: 58.33333333%;. }. .col-sm-6 {. width: 50%;. }. .col-sm-5 {. width: 41.66666667%;. }. .col-sm-4 {. width: 33.33333333%;. }. .col-sm-3 {. width: 25%;. }. .col-sm-2-4 {. width: 20%;. }. .col-sm-2 {. width: 16.66666667%;. }. .col-sm-1 {. width: 8.33333333%;. }.}.@media (min-width: 992px) {. / 5 Columns */. .col-md-2-4 {. float: left;. }. .col-md-12 {. width: 100%;. }. .col-md-11 {. width: 91.66666667%;. }. .col-md-10 {. width: 83.33333333%;. }. .col-md-9 {. width: 75%;. }. .col-md-8 {. width: 66.66666667%;. }. .col-md-7 {. width: 58.33333333%;. }. .col-

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	771
Entropy (8bit):	4.929721948118898
Encrypted:	false
SSDEEP:	12:KS/EH1Rkq/4yQU5pFEJiZTAvyOL7EOuf/3TT7EY0BA7EYj977EmWP8wKz9:CRr/4yQU5VpANDA/DJ0B8aP8z9
MD5:	0D94A311E3D65F7AFD740A49BA6EEDAD
SHA1:	EB73861F84E11B7BFA5CD65F80911B1824BB2DC9
SHA-256:	8210B8A868FDE65814FE8DCDD303138ED94945DC159C0B87B669840198D933BF
SHA-512:	B6DE965B6C3F226CB95777CAEC9E35C30795588EDA9BB44CC3A3ACD2A9A779DB190F5AC70DF1196B1E586962556176EAB29A2A7288031FF3E4E4C4D69F832228
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/gogg-translate.css
Preview:	#google-translate-container {.. float: right;.. padding: 2px 0px 0px 5px;..}.....goog-te-combo,...goog-te-banner ,...goog-te-ftab ,...goog-te-menu ,...goog-te-menu2 ,...goog-te-balloon * {.. font-family: 'Open Sans';.. font-size: 14px;.. /background-image: url("/Style%20Library/VCS-Assets/imgs/google-translate-icon-small.png");/.. background-repeat: no-repeat;.. /text-indent: 20px;/.. background-color: #fff;.. color: #000 !important;..}.....goog-logo-link {.. display: none !important;..}.....goog-te-gadget {.. color: transparent !important;..}.....goog-te-gadget .goog-te-combo {.. margin: 2px 0 !important;..}.....goog-li{..float: left;.. position: relative;.. font-size: 0.95em;.. height: 35px;.. /* border: 1px solid transparent; */.. ..}

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (814), with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	69069
Entropy (8bit):	4.809670156836239
Encrypted:	false
SSDEEP:	768:/hYQd5Ugr8KQWA6DA6/WCBiWPIHzd+hW8g:/b5mRccKg
MD5:	F4F68559D9E2FF526EC4C18EECC63F4B
SHA1:	8539BC705009B47A23A86CB14A2507081AC591DB
SHA-256:	E55A4141B86647D923C344E608F40524FC38031BC75461724E1D05E874D3F614
SHA-512:	7E2BD3F609B411D49C7485073F57241EF8333EC9DD33811CD89C109668AFD294CFEF11B9915DC249232EBB67CC841D6E59FE6698FD7698D70D9F6E0591C7918B
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/MDTaxConnect/index.php
Preview:	<!DOCTYPE html> ..<html class="no-js" lang="en"> InstanceBegin template="/Templates/content-template.dwt.php" codeOutsideHTMLIsLocked="false" -->..<head>.. InstanceBeginEditable name="head" -->...<title>Maryland Tax Connect</title>...<meta name="Description" content="Maryland Tax Connect is a self-service portal that allows Marylanders to file their taxes online more easily and more securely.">...<meta name="Keywords" content="MDTaxConnect, Maryland Tax Connect">.. InstanceEndEditable -->.. Head BEGIN -->.. Head include BEGIN -->.... Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NMG247C');</script>.. End Google Tag Manager -->.... Google t

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23478
Entropy (8bit):	4.848608921299698
Encrypted:	false
SSDEEP:	192:CIW13GX+N9Q2W10TGzIf4W1X+CbHV6MW1V4QTs5pkW1VcBPHhs:FWNNWXWDrWsiWqs
MD5:	6A72BEED1D9F7254A7DC24FD83120532
SHA1:	ADD94B5D407A151332067AB9FE40FF224D21CDA3
SHA-256:	9C4C8C9CF614EDCDFB692C100E0B4D63B4597C64B736224168AD6750B6C70513
SHA-512:	8C765D2539C65C5210FAB4B617C7B7D00FCA356084FC3195BD634EB2C144FA8823DDFEFA28DB108B5C0F2C07A121B9F91A810A3BC30B8565083DCEA75F10E266
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/solid-menu-theme.css
Preview:	/* COLORS, BACKGROUND-COLORS /...solid-menus .navbar-default.navbar-dark {.. background: #0099ff;.. border-left: 0; /1px solid #151515/.. border-right: 0; /1px solid #151515*/.. border-bottom: 0;.. border-top: 0;..}...solid-menus .navbar-default.navbar-dark .navbar-brand {.. color: white;..}...solid-menus .navbar-default.navbar-dark .navbar-toggle {.. border: 0;.. padding-left: 0;..}...solid-menus .navbar-default.navbar-dark .navbar-toggle .icon-bar {.. background-color: white;..}...solid-menus .navbar-default.navbar-dark .navbar-toggle:hover,...solid-menus .navbar-default.navbar-dark .navbar-toggle:focus {.. background-color: transparent;..}...solid-menus .navbar-default.navbar-dark .navbar-nav {.. margin-top: 0;.. margin-bottom: 0;..}...solid-menus .navbar-default.navbar-dark .navbar-nav > li > a {.. color: white;..}...solid-menus .navbar-default.navbar-dark .navbar-nav > li > a:hover {.. background: none;..}...solid-menus .navbar-default.navbar-dark .navbar-nav >

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=wA/d=0/rs=AN8SPfq5gedF4FIOWZgYyMCNZA5tU966ig/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 108, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9649
Entropy (8bit):	7.954590695280449
Encrypted:	false
SSDEEP:	192:pmQ3Y4DSYqr6wHvN1nRpaMHNpjkvmPTImZjYDsiXLcyocK58xueYfHeOK2DvgsZq:UQolY7wPrRhj1LbYDJVocK58xu/PVZq
MD5:	A53E6573383E07E1B7B016057D792FCE
SHA1:	4B3109321D2B6AB347437B412A23797437FCEB5A
SHA-256:	27A6F00B01318626A195EF8FAFBB0F8EAD61EC26A67CA08EB08B923CDF6FEDE0
SHA-512:	A73A6C204B125F6527D5826E0479113B2082EBE07B0B1483E4395DB200E3A4A5BF1B0741449D7093AC2884EAD70F9195A5FF498244D5658C4DA7EA1A372B5D4E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......l......h.....iCCPICC profile..(.}.=H.P..OSE...;.T.P.,..8J..`...Zu0y..4iHR\....?.U..g].\.A.....I.EJ./).....}.w.....Qa..5...e..11.[.{^.....cDb..H/f.Y_..Mu..Y.}.VP.....sL7,...MK.O.b%I!>'.7..\.]~.\tX..!#..'......;....x.8.....Y...[..J...._..k+i...#.%$....5.Q..(..)&Rt....;.$.dr....TH....~..,LM.I....b...@.......m7O..3p.....0.Iz..E...m...{...0..K..H~ZB.....7..[.o.[....@.f.\|....cE.^.xwo....i...m.r.t.xM....PLTE......43.....').(,...'2vkl.....+v7=.:N..%h..v.#\|.,.YlR3k.$..0..8.3P.}.V..r.,..<.%D_.y.5<..Q.(qS]h.7@.%...g%M..............l..l.....k%$t53.43\|zy...l..d..[..t..l..b..t"#\|44.44.,,y@@.......PR.ef.CEt.....l..d..t..l..............s\|..$:............bj{..........jx..........,..D.......................$..4..4..<..D..M..d....%..................,..D..Q..V..h..v........$..;..D..L..@..]...............d."..2..\..t.................L`Oem....;L.$,E.. $%.+4...........45.,,.$$.,,a............53 963=;...knm+/-{.\|.........................AL>........cuuk...VVR...

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 188 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1112
Entropy (8bit):	7.764086728850737
Encrypted:	false
SSDEEP:	24:U5bCn0jkz/zeTtk//MGGdRoathjiSmqJfq7tlB1eAqiN:UFzjkWTzGGfxYSmqE3N3N
MD5:	7213033470AF5A89B0A674A4FB00902B
SHA1:	1D6643092265CA9CFDDD5A12538765CED6ECB07A
SHA-256:	3BE665A727C8493C25837C12B89AD5DF1E42B86790BBE35C91675E7E143C5805
SHA-512:	AA027EE146F2CF5BFD8B069889DAB62A3A5D41D444BF038956B85C2263606E504A027D45322885028227CFFB0FF42FE47794071891FB4E1908C214D6D7A0732A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Z......sRGB.........gAMA......a.....pHYs..........+......IDAThC.=o.1.........B.. .tD..K...-......h7...]...1Y..T.5....#H(.....yk. ...8wg..\|...?Nr.Y.....\|..$....B...X(....E.\|b..O.W...XS+=6..E..'5o..3f.{.~>sa\....K.%&.w..lL...Y..v.)...mgi.;...w..,1.x.Ogw.,!z../..J........?......X.6...a..S`..5;..@h:.`......ty.w....^...HS.9.nq..h..Yr.33.=...Xl.H.9.V).M.m..Ce..7...'.......6.wo.W."..PA@.......=f....;Q.h.uV.....e.....3........r]_p....g....o<.{{.i V......A...u../..........t.2.u......Zi^.o^80..?y:...F.>.+.y.6]..e....+..J.z..%.[......o....9. (......i..W..:..?....~..?.%...F..Z..l..... \...4`.P.A.6.......E..!..{q>...Q.!....".-18.L..c..+:.P.....r.'.?..D4..2M{6.e.Ml1.x\|{..3..b_(.h...[.....}...h..z8..(...E>.@....h..E..........g...B..u.QQl..=...Y.f..4...K.0....%.....G...";VgKv.{.yG1!.~..%z."..x1Fd..-.t.....^{...~..O.........e\{.[..-.Z>\..[..hv.....O.U.7..4Kt....l.:E...Cm......vz.#md...Q...qv.4.{D...lq}..Z.0+...jh..W..@.~.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	6385
Entropy (8bit):	7.877578897334039
Encrypted:	false
SSDEEP:	96:Xdg12NFQPLUr86dWe8MeErMQFGPI0T1YQkGv54NrOHlDq/K4Ph29i4knw5ugHhhZ:tlNFQTURn8ZCxkPjT1aC5fhyK8h25l1T
MD5:	ECE1EB0B7DED38F8C17CAAA47225D531
SHA1:	1E59F5365112A465AE32A194CD1D873861A17186
SHA-256:	0E37DE7D1D220F12777F5B8F7D2BD3439C1AB5EF185C9C18E5B876639C89E18C
SHA-512:	112599AFD42A9CC7C0D77479FE24D992998D58293E2D19CFD35EBA2203A80E4C68F2AEBFAEF23287C40CC4128C1E3DD55993E7681BA9F647840E934F10BCF4B2
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Business.png
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?....IDATx...oL.g..q.../.}Z.#N....E8Brtl@:.]J.Z..v..Kv.P):".M.M*.m.6..F.TJ.HA.T.?a_..%...t)/L.).P.!.......;.......u'....!..;.......y~....O........_q...........#.....G@...l............=....`{.4.....h...........k.!..)9..O..........\|.Alu=/G'... ..G..l..D.t..D^......16cD........=....`{...........&...;...Fh..........#.....G@...l...............h<..>..b.X.....ze..[......]?.O4>5.9zf....K..4..!........1B...sd....m..g..:.4..25.t<.X.I&......X....Z?.Y\(......5.^\._..@\XC@...(..By..u.V..#..J+#.....y........w...^...>......Q..l.)b...{...5..5.Ulu]..+&...=.I..!".!)....u.....M5.p..v..>.kK....P.n.D3............f22..,..~.....9.'_.../NMGn...L...f."z;qd.x.. ....4...CN.....+B..._.S....(Ja<............w.......0........b......&/.q...Lz...........8.....)...c.c....s.j....36w......>.=`jk.U.%..iv<.H.o ..k}k8..~g.G...."........C..y.,......f.f0...o(...e..2y....1...zy,.X.nzN4.....PD.Wn<Hn6...7..'..n.}s.w......eR).....

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2647
Entropy (8bit):	4.940102174791687
Encrypted:	false
SSDEEP:	48:2V80ENDI7P6I6hVN8EvfK3m5J7++cSQE6jMixyQRptFt97t8:2aNDI7Pf6hPzfKm77/E5jD7RpXb7m
MD5:	2E1455835BC249842514F07A1749F656
SHA1:	2082B10A8C64E460F3444F85C5913325C7D80476
SHA-256:	68E79ADF15ACADEA8195AAF4D7895C5A0AFF6CF13953D19BA0892A449E85D76B
SHA-512:	B1C7682EA1D5FD29E7552405D9FFB29CBE257B51F8E42A83EB9EA942E5FF8D6ECCD652F5F87788D88BED80916F9185BF1DCCFC21D15C2DC3842FB217687E86AF
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glstyles/stylesheet.css
Preview:	/* GLOBAL STYLES /..../ COLOR PALLETTE: ...Dark Red:#990000...Dark Blue: #00264D...Light Blue: #F5F5F5...Silver: #F5F5F5 ../.....body {...margin: 0px;...font-size: 62.5%;.. .text-align: center;...}.....p, td, li, dd, blockquote, dt{...font-family: verdana;...font-weight: normal;...text-align:left;...}...../ Inline text hyperlinks /..a:link {...font-family: verdana;...font-weight: bold;...font-size: 0.9em;...color: #000000;...text-decoration: underline;...}......a:hover {...font-family: verdana;...font-weight: bold;...font-size: 0.9em;...color: #990000;...text-decoration: underline;...}....a:visited {...font-family: verdana;...font-weight: bold;...font-size: 0.9em;...color: #00264D;...text-decoration: underline;...}....../ ================================================================= /../ Page Wrapper.............. /../ Required for app pages - directly inside the body tag... /../ ================================================================= */..#pageWrapper ..{...w

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65316)
Category:	downloaded
Size (bytes):	97339
Entropy (8bit):	5.1426577524749115
Encrypted:	false
SSDEEP:	768:B0R3TpxU9yqZ2hMDJXAHozUcVslfi3E3FI+p7Q6mRbca8DserbIFjCUL4PlOAysl:HbNAIzFEq+pG2mKVmsZP3IguCPxXPL
MD5:	4EADBF7D1721BB2729E398595BC7F0BC
SHA1:	CDE1A9A9098238450AFB8FCCFCE94C22FA2743E3
SHA-256:	1CBDA21998B65E08A7E936114CABD7F7783D0F590DD6EFDD58C7FAA8B6E7B9AA
SHA-512:	2A7F594FF849D49936246E8744037EFF8CB79AA06D3FB0EF3885882896143F07C04B9B5B0669CC3B11129603E0AB829004A95E35BECAAE3C71D86E1DAC0DAD2F
Malicious:	false
Reputation:	low
URL:	https://netdna.bootstrapcdn.com/bootstrap/3.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.0.0. . Copyright 2013 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. . Designed and built with all the love in the world by @mdo and @fat.. //! normalize.css v2.1.0 \| MIT License \| git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden]{display:none}html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{margin:.67em 0;font-size:2em}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}hr{height:0;-moz-box-sizing:content-box;box-sizing:content-box}mark{color:#000;background:#ff0}code,kbd,pre,samp{font-family:monospace,serif;font-size:1em}pre{white-space:pre-wrap}q{quotes:"\201C" "\201D" "\2018" "\2019"}small{font-size:80%}

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 188 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1037
Entropy (8bit):	7.682853810687522
Encrypted:	false
SSDEEP:	24:dH0DrS3yBNW4CJNb6KhnJRJ/OyUBVDtu2R3nXAWzRCSXp5p:UNX0+6t3UvDMC3XAWzAS1
MD5:	B79BD791B262D2C13731795229BCA60B
SHA1:	06F7CE2338626D0397EF53527E7284ABB0A98329
SHA-256:	6EC9D2D750AAE85A0DADA8E7259F7ED33451FADBB0CE943836807864E33D2718
SHA-512:	22233DA52C8CC35D5CFD81FAE408416CDCA1A36D86D3519FC90FCD4BB6B543BC0BB70B4671C07EFBE954D480FC11DAEEFC0443DE2CABF7B69140DA52F24B2727
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/nav2.png
Preview:	.PNG........IHDR..............Z......sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.r.@.........a24..$e."N...sJ...t4.#y..E.;...0@.a..\..(a....j....$.).o....=...g..y9..8&d....x..^.J....^.J.......5c.m.......C.O..r.gL.g.}>.B......D9=.UcZ.@Y..N.@..~..O...qX`.-L~....O..~F......W\|!....a.fx..2^....^OA.}.&h(.x....{..'...aBF..B...0e.=..;..}.>W....6..l}..0j..J.....Z.....ESI....K..z.:_x..R....a ..mcj.=.bg.x.+.A.uX..D..&..Dux...j.u..;..ulK..g.z......=..x6.G..yS..)m.p..Cl...........th..?........&,2.....0kJ..\FH-..x.U...;...$.\|.O.?..zO..G.g.k..B.i../..k...(......l.IO.....Ax.dh....-)..C.q......k\|. w(..u...J29...pc..]@ .xq.b.`.N.'.kcc.d...GXr.E\..H..il.Z.~7.U$.8...!.8...i...D4.].\|.`.%......"8.x)...b......D..Q....w..]./.+z..+.)}?.m...BH..MM....T@$x?r."zM...B...;.r.s!.,L..g3...+.9ubp.7...8.g!..j..l7.......g...Fwn..s..D.i=)...ec.S&d.m....p"YL.\|..e....&...".P...g..d%.. ..=.Q.....(N:.R_.m..>..F.g...R3[%.{.. o.....W..'...S9..#..rn_.9FY..{x.8z...z.@..

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=kcq1izb&ht=tk&f=25769.25770.25771.25772&a=102056799&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21698)
Category:	downloaded
Size (bytes):	21934
Entropy (8bit):	5.346033571426363
Encrypted:	false
SSDEEP:	384:Xkk+r2ovFKx0LuGRIkHqrdbIVl+kc3RypQwKToE3yiIEynM1xzitcWKTi4PB8:XWr3PtE3EN8IbnM1xmrDeB8
MD5:	F8C6F52E723449480A11B9F4A8802F0A
SHA1:	C31D2C2878CDFDE9DDE8370A92E9CD1EC3CD5E71
SHA-256:	C2A60E6DD33247AE3F8629F8727956EDBB4C5888544377E15ED5AF947CC18D96
SHA-512:	1E5B5C7A47F667BB765FA0AC3324DCE19D2A819A33CB545424B9C741ACF7C568211B81AE82524567CC7243951932D388E72F41830F15D099871C94DFB11C1DAB
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/js/vendor/holder.min.js
Preview:	/!..Holder - client side image placeholders.Version 2.6.0+51ebp.. 2015 Ivan Malopinsky - http://imsky.co..Site: http://holderjs.com.Issues: https://github.com/imsky/holder/issues.License: http://opensource.org/licenses/MIT../.!function(a,b){"object"==typeof exports&&"object"==typeof module?module.exports=b():"function"==typeof define&&define.amd?define(b):"object"==typeof exports?exports.Holder=b():a.Holder=b()}(this,function(){return function(a){function b(d){if(c[d])return c[d].exports;var e=c[d]={exports:{},id:d,loaded:!1};return a[d].call(e.exports,e,e.exports,b),e.loaded=!0,e.exports}var c={};return b.m=a,b.c=c,b.p="",b(0)}([function(a,b,c){(function(b){function d(a,b,c,d){var g=e(c.substr(c.lastIndexOf(a.domain)),a);g&&f({mode:null,el:d,flags:g,engineSettings:b})}function e(a,b){for(var c={theme:y(K.settings.themes.gray,null),stylesheets:b.stylesheets,holderURL:[]},d=!1,e=String.fromCharCode(11),f=a.replace(/([^\\])\//g,"$1"+e).split(e),g=/%[0-9a-f]{2}/gi,h=f.length,i=0

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 121 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1002
Entropy (8bit):	7.746844131704571
Encrypted:	false
SSDEEP:	24:P35RcI5Bt27gQgNxnpGhHZkdQ3mZyEquaJ4YuZo8Mtb:P37z5HLVg6dY1lj4pdA
MD5:	A5C90E9456FDECD4CC6BF75931D1B561
SHA1:	8B5336281A1DEAF796754BBB56FCC7AEAAB8254A
SHA-256:	7F9B32DDB3FA486918A07A3AF7CDB7416C72E7ABBE57DD034C5ED158843F2376
SHA-512:	3F2B165DCED1B769758817D322F86CD8B09E447DF888DA25205A90036B2C32265FB7E422ACA5D84F249C6E567CD58E23D77F493EF37F90253D3F4DC5AD98ABC8
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/nav5.png
Preview:	.PNG........IHDR...y.........b.Ah....sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.r.@...5<......h...K........i.R..v.....4.+.a...../.<.c....d-{%.&.L,}.Y{.=.s.U.f..... ..]..h.(.\.J#..........".8.u.r.m>..x...o...zw.)..N.d72.y.D.v&...TpuQ.m.i.m..M........mu..d6...".D.?.LU..P......^{.N9..6.=..\|..o....y.{\6.x'....Jv.He$....9B.y..y..a..EzL..xjK..4k....\......M.it..3.?..l...+.:.]P.9)s..4..Dr..t.A....Q.g..j...F.'......3..0~..[..].]...6..,R..._..g.Xc.c.YdB...J..g.d..g..'.U=..7..m.....8D..u<.C}.1.........k. =..^ ..i..C..t_U.....4.e.~\.....,.....w........t..3r.;.....o..O~.,8...Q.S........Dp....V^....(.l.\U...S...w]pqkX...126.?.".y..?.,...u[.1..67.s.....:f?A..@../..]h..c.i1.bp...\|1.6........yX.g.h...!2.+,~R.6..e...q........=R.>..#......8.}x.p.@....y.....w..!'..5..K.%..#.`..,.x.g.&Z...B....)ssOf.....(.@3.. .......q_..#m`bN>.r....'..Wsa.8.P.shq:..f..F..1.k..L..... ..9f.G.#.g.J~..}..f.f...K.q>Td...%W...k.\MJ#......4r.(..........n.....IEND.B

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 7 x 10
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.595458313557534
Encrypted:	false
SSDEEP:	3:CJeRHmlUrgj+RklTET5:Ymrgj+RuTEV
MD5:	645F5A2EA1C267F980045BBEF5FA379E
SHA1:	F28F61B9FCD566971537AD74B8D9479CE927B1C7
SHA-256:	54C322EAF33EB6F6C2B7AF1CDA7C99B7278D219FF658E99E7E8338F520D568EC
SHA-512:	1156B70EAEAE26AFA6CBDC86ACF279B85825B7EA15BC274C10CBE9359C00D4A7E4D27C1B2F3A7C8C97530F6CB00105451CC649CE38B31C625B1656696B968F3B
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Business/glMedia/redbullet.gif
Preview:	GIF89a............'......!.......,..................drVx#....;

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 100, 16-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	332
Entropy (8bit):	6.503018210126439
Encrypted:	false
SSDEEP:	6:6v/lhPeozp5mtlNYkvkpLixj26g3j1sGf8M+I92zgN+bd/LZlB2EMvd/bp:6v/7Wo1QtlO7lOdyjOJhzS+bRLbB2EMn
MD5:	32F7D8E6E713C9F11BFAD0C63D57D088
SHA1:	68CEC424E8F4FF1A7FA6CBAB672FC2A441962CFB
SHA-256:	435D301E9CE1104D8A1357EB5A18E5E10C8C73D3C6FCE937859E82FF3C9DD2FA
SHA-512:	A17CEDA0DD92C5094E87505C9E96E265A815A76D83CF988F799DDCCEC96CFEFD4B715354F8C59534D9C7D13358492AC6834BF730E0273061ACEBD9907BC8D85F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......d........t....bKGD.......X......pHYs...H...H.F.k>....IDAT(.....@...?........B..PE...0.....P..4..hr...k.........R.5..........Q..~...#..%.i.d..a..x....s.@.z....n.r..}#.y..R..LFX.\..n..o..C.d......%tEXtdate:create.2013-10-20T19:55:57-07:00.w>....%tEXtdate:modify.2013-10-20T19:55:57-07:00.*.d....IEND.B`.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9299
Entropy (8bit):	5.020053330208492
Encrypted:	false
SSDEEP:	96:wMVpIyY+yl7TCd5eXrwrYSBagbLZFkcgs5MK51un2XYHyKaA+1oIwmyOdsw178wl:wz6jPyvK5InRHPu1ozmyOIqxuUSS
MD5:	898F79F9EDB185A01B66EB912204DF42
SHA1:	0C7DF796EDB7E5E7D2BDBE8CDB2F2F28E49CFFF8
SHA-256:	4FAF30A7441E8559449A7502DB2EA1BEA1146790DD32D499523BBE98C5283A37
SHA-512:	B6393A846C443744B262FF87D1B0641936C85C1790E14AC84A6E5AE8AEED30A368D8A1770FFD08029EBB64DF4A5EB5761E2A4B5347C514DC663B65F74CD5B640
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/style.css
Preview:	@charset "utf-8";../* CSS Document /..../article {...padding-bottom: 10em;..}*/.....onoffswitch3 {.. position: relative;.. -webkit-user-select: none;.. -moz-user-select: none;.. -ms-user-select: none;..}.....onoffswitch3-checkbox {.. display:none;..}.....onoffswitch3-label {.. display: block;.. overflow: hidden;.. cursor: pointer;.. border: 0px solid #999999;.. border-radius: 0px;..}.....onoffswitch3-inner {.. display: block;.. width: 200%;.. margin-left: -100%;.. -moz-transition: margin 0.3s ease-in 0s;.. -webkit-transition: margin 0.3s ease-in 0s;.. -o-transition: margin 0.3s ease-in 0s;.. transition: margin 0.3s ease-in 0s;..}.....onoffswitch3-inner > span {.. display: block;.. float: left;.. position: relative;.. width: 50%;.. height: 34px;.. padding: 0;.. line-height: 34px;.. font-size: 14px;.. color: white;.. font-family: 'Open Sans', sans-serif;.. font-weight: bold;.. -moz-box-sizing: border-box;.. -webkit-box-sizing: border-box;.. box-sizing: bo

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2058)
Category:	downloaded
Size (bytes):	204687
Entropy (8bit):	5.633655454561874
Encrypted:	false
SSDEEP:	3072:jTLx/RAf1iSkhBdoY/TiHelWq39rpHwDOM93FtHiyUjkDuX/jl:TAf4fzsE9rpHwDO6SyUjiux
MD5:	74D6D378592A10224360129A3094DB87
SHA1:	A98C22814AC93B2BEC11CF696856ED943E4A2EDA
SHA-256:	9B908A3EFFB576EEEB1E1B1B848727C88A89BD04A6DD466EB9CF013E4778EAB4
SHA-512:	41426451783D72F22D48CE94DC542C91418063AFF27757C39BE70D5C35E09B9A86ED9C5C7CB3139308C578843C2D11028083E103EDA869979910524A4952CA0B
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/mypoc/ruxitagentjs_ICA27NVfhjqru_10283240117152214.js
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ /.(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ca=-1!==document.cookie.indexOf("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ca}function fb(){return void 0===gb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function hb(){var Ca;if(fb()){var Ia=gb.dT_,Va=null===Ia\|\|void 0===Ia?void 0:Ia.platformPrefix;if(!Ia\|\|Va){var La=null===Ia\|\|void 0===Ia?void 0:Ia.minAgentVersion;.La&&"10283240117152214"<La+""?window.console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"):(La=(Ca={},Ca.cfg="#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Ca.iCE=fb,Ca.platformCookieOffset=null===Ia\|\|void 0===Ia?void 0:Ia.platformCookieOffset,Ca),Va&&(La

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2135
Entropy (8bit):	5.0386432612688505
Encrypted:	false
SSDEEP:	48:cVIAXQ8fhqeqJqOH1Iu8lEPquDOLanP3LE2PUyBnHjbe8qW:kVXQ8fikOH1Iu8lIxP3LrUwHnpqW
MD5:	254D1DA590FB2398E4C000573ADD6AC1
SHA1:	0402686160B67DAEACDE231B83A0BF135455F67F
SHA-256:	44842B42F9D5899D40AC390D90832DA13569E4CC9F6DBF9F462F6F4334952416
SHA-512:	5FA0D9AF9D08827EC812F77E8D20408227DD531D2E01FE6519F3440C1F0D94FC20EF337E54469F7628863EBA152F229AC3717798C0415751530B6D1F47B10FB8
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Business/glmedia/external-link-symbol.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="511.626px" height="511.627px" viewBox="0 0 511.626 511.627" style="enable-background:new 0 0 511.626 511.627;"... xml:space="preserve">..<g>...<g>....<path d="M392.857,292.354h-18.274c-2.669,0-4.859,0.855-6.563,2.573c-1.718,1.708-2.573,3.897-2.573,6.563v91.361.....c0,12.563-4.47,23.315-13.415,32.262c-8.945,8.945-19.701,13.414-32.264,13.414H82.224c-12.562,0-23.317-4.469-32.264-13.414.....c-8.945-8.946-13.417-19.698-13.417-32.262V155.31c0-12.562,4.471-23.313,13.417-32.259c8.947-8.947,19.702-13.418,32.264-13.418.....h200.994c2.669,0,4.859-0.859,6.57-2.57c1.711-1.713,2.566-3.9,2.566-6.567V82.221c0-2.662-0.855-4.853-2.566

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1334 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23395
Entropy (8bit):	7.80204461845836
Encrypted:	false
SSDEEP:	384:GJStibnEXvl5QuhNzncEymNpC8+Vt0xLn3k8miAn4eJ8jzOIjXFEIY3Hy:GoibnEfnhNT/NI8+Vq0iA4eJ8nOIjVEy
MD5:	F820891D34E9C2C77AC7B9EAFC4DD377
SHA1:	71BF23D4F91A17A1FA5420A7FE2E9C0C57464526
SHA-256:	8B48A6EEA8D6A446659A0A721802EA7C10DACB869C2B16236903AE5B1E7AC2B4
SHA-512:	D1D208279897314880B889256FC377864E4AF9A0A2B791939D563049FCA51490DC020DF519A4A6D53DD450F17432B879892C2B376929DF1E7548DFA9E9E22182
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...,......(......sRGB.........gAMA......a.....pHYs...#...#.x.?v...!tEXtCreation Time.2023:05:09 12:35:58.....Z.IDATx^........j..#i0.[....M.......................%. ..c....`.c...t.Z2...Z....lp0....W.?...n.3..u..?3................................................................................................................................................................................................................................................................................................................g.O.........j.jx.....y........&...0A...y..\_=k.3.\|.o.^x...0JE..........A........`r......u.m:.....u/]......b..........l..........M........C........`r.6.......L..&........!........09.........&.`..........l..........M........C........`r.6.......L..&........!........09.........&.`..........l..........~..:.....c..~y\|......jw..W.....z...0......s.....Uo/......"<E?.]...c.<....`7.M...a.0...!..v...~../..E.....AWt......U.(.\|...... ..&.....K..U.../.U2..0u

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	13337
Entropy (8bit):	6.079666547677288
Encrypted:	false
SSDEEP:	192:o5V5nHzXlfwbWrO5WdGB8ADOmjvfjig9lzBN1lwD/Zj8sHnTxKIWWmuhBW1q:o5HTXlfwbWvGB8vsHj1BN1lyjlHOWsY
MD5:	11559D93E669B31D0F361FB509445CCC
SHA1:	0348F685DA50A22CDE329D23E0BD1D602368A70C
SHA-256:	028859C8DD14DBC3FE7A74E13BBCE177A67769F9BBD261C019EC7511FB146C3F
SHA-512:	209DDA8D3972288BDEE05319AA39CA942E81C63283B29AD5BF9A6BD464A7327E464BF3F06E3BAB6C550CF92A2722664D1940B3F901A70E834EB5D4F12B1E4B0F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 410 120" style="enable-background:new 0 0 410 120;" xml:space="preserve">..<g>.......<image style="overflow:visible;" width="410" height="120" xlink:href="data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEASABIAAD/7AARRHVja3kAAQAEAAAAHgAA/+4AIUFkb2JlAGTAAAAAAQMA..EAMCAwYAAAdZAAANJgAAJK3/2wCEABALCwsMCxAMDBAXDw0PFxsUEBAUGx8XFxcXFx8eFxoaGhoX..Hh4jJSclIx4vLzMzLy9AQEBAQEBAQEBAQEBAQEABEQ8PERMRFRISFRQRFBEUGhQWFhQaJhoaHBoa..JjAjHh4eHiMwKy4nJycuKzU1MDA1NUBAP0BAQEBAQEBAQEBAQP/CABEIAHgBmgMBIgACEQEDEQH/..xADjAAEAAwEBAQEAAAAAAAAAAAAAAwQFAgEGBwEBAAMBAQEAAAAAAAAAAAAAAAECAwQGBRAAAgMA..AQMDAwMEAgMAAAAAAgMBBAUAERITFBUGECAwQCE1UDEzNCMkIiUWEQACAQIEAgUHCAcHAwUAAAAB..AgMAESExEgRBE1FhcSIyEIGRobEUBTDBQlJykiMzINHhYoKiFUDwskNTcyRQYDTC0uJUNRIAAgED

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	591
Entropy (8bit):	4.860587456430137
Encrypted:	false
SSDEEP:	12:UuKsUI/ZA/tbmZA/B/THCjvWMHCKYW5ZQ5a0WTYj2K2sJ2zK9sPatIe/ZA/d:fKsU8Z8wZ8RHEvWMHCKYW5ZeBW0jws4B
MD5:	36149B8F5A553BEFF27BF86F618CD3E5
SHA1:	F32603807CDEB303C464952CC15AA2FFEBA5D693
SHA-256:	4FAE8D403ECF6BA69CA820F9E606EB43DED58F0EAEBCE73CEDCCBDB0B8C87E0F
SHA-512:	F368075B3FF01066D028F353C82EABB7E64EA81793F4E4EFE208E5825D344ECF84C15BCEC11D6F67352A0DCF384BB0FADD10962275D601777DA0E739776FEBDF
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/js/googl-translate.js
Preview:	/* Google Translate */..function googleTranslateElementInit() {.. new google.translate.TranslateElement({ pageLanguage: 'en'}, "google_translate_element");.. // begin accessibility compliance.. $('img.goog-te-gadget-icon').attr('alt','Google Translate');.. $('div#goog-gt-tt div.logo img').attr('alt','translate');.. $('div#goog-gt-tt .original-text').css('text-align','left');.. $('.goog-te-gadget-simple .goog-te-menu-value span').css('color','#000000');..}..$(function() {.. $.getScript("//translate.google.com/translate_a/element.js?cb=googleTranslateElementInit");..});

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4579
Entropy (8bit):	4.882401757647716
Encrypted:	false
SSDEEP:	96:Tn1O0moAE7srW4UluRyZMhjMxpap/apYap/apP:T1ZPorW4zhjM6pSpPpSpP
MD5:	43EC40294BC4092B89BEAAF8BA90ABA9
SHA1:	E44975208858027EA48C2E45AEF1B8719E372B8A
SHA-256:	3D8A556DDB715264311D0354CF20CE6A5215C2059AAAE61E10005F5A7F3F667F
SHA-512:	9449C2F24413D8D53EC8D1CC783F4BE8A8E5B44FF70DFEAA34B4EFCDD29DEA8047AE308CE02BA62215D3117875B2FE5A58790C8B1491B14B334A07977A0623FB
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/news_ticker_style.css
Preview:	...ticker-container{.. max-width: 1280px;...max-height: 20vw;.. margin: 5px auto;.. overflow: hidden;..}...Ticker {.. background: -webkit-linear-gradient(225deg, #fff, #fff);.. background: -moz-linear-gradient(225deg, #fff, #fff);.. background: -o-linear-gradient(225deg, #fff, #fff);.. background: -ms-linear-gradient(225deg, #fff, #fff);.. background: linear-gradient(-135deg, #fff, #fff);.. width: 100%;.. max-height: 10vh;.. -webkit-box-sizing: border-box;.. -moz-box-sizing: border-box;.. box-sizing: border-box;.. padding: 0.5em;.. color: #000;.. font-weight: 600;.. display: -webkit-box;.. display: -moz-box;.. display: -webkit-flex;.. display: -ms-flexbox;.. display: box;.. display: flex;.. -webkit-box-align: center;.. -moz-box-align: center;.. -o-box-align: center;.. -ms-flex-align: center;.. -webkit-align-items: center;.. align-items: center;.. overflow: hidden;.. margin: 5px auto;..}...Ticker-content {.. display: -webkit-box;.. display: -moz-b

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2886
Entropy (8bit):	7.866240212679142
Encrypted:	false
SSDEEP:	48:3/6myVLIw69flrHRv70NjhWGct4LHpXi9H6nLwEoPMETmyBzkZubPheCR1EwA9pN:3SFLFgfD700GnHpSlmwpUepBkZMeC24g
MD5:	5BCE65D2A50618C67F79EEB273EC9577
SHA1:	1123F156723B05BF7E0828B07889C4103825137B
SHA-256:	AF3594B88D6AEF9396BF54492FEDB7AF94E29346DE1A111BD692C1C5207BEA35
SHA-512:	9F4A21D496FB8699E1F9ACD9F24CDCCF5062757924C105CF89FAE440AF78DF87561C8ED4DD1FF5E15C781B855C71ABC30473628319517EC741BA484E45BC4477
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...P.......sE....bKGD..............pHYs.................tIME...............IDATx..{p.U..?...MJ..PZ..mi.8...".. ......e.,..e..8....;..DA....1j)#.......5.h.iI..<.4m.4.....kn..m...n...{...{.9....&....j...R5I.m.%R3.A..+...OS.e....\y......./W...u.D.c.D...l!x.,...........O....d......4....]/.%R.L...K..A?.D.#.l...}.v.7....&.K.....>.....u....M...S....\|.8.....3...A.....`....`9p,.]..86Ou....s<.6..<iLp/..-G........W.Ku.\.k.\|jy.x2M(....J<..=...K.G..YX.<sK...........4...F..Z..W.......!.....x2]......1..c...=.).)^..x2]k.[....=.L..t......8..Z..7UM.y...O.W...7.x2}..$..p..R...8..]w....2.".6....4`U(.{."5.P.+5..........:4`...+./........x2}u)..S..?.hWg..<k<^....6.m.~.......7.....s.)..P...b....6..ku.`..P.=...f.O.&w........+.W...@W.<D...T{.:.O.....p..f..4;S...q....L...Q1A.P5.T..).g...2.X.,s...........5........p^H.iR4......R....../si./......u......q2...y .LW.C.&$...1...z`....._.>/..-...&....."N5.d.4...g....m...e....!......7..7.....\|.'..U.d..j...W..a$W[

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (581), with CRLF line terminators
Category:	downloaded
Size (bytes):	20961
Entropy (8bit):	4.874829249441655
Encrypted:	false
SSDEEP:	384:70gzeab9N0Jp5mAWI9U80gKfUiqDsudnDnxFq4s21EE/ZyD6U:7k35mAWI9U8uULZBgOU
MD5:	0CE14211695F86A043022118F24AFE51
SHA1:	4C272498E13A568579D27B5DE929C5A4218DB181
SHA-256:	68CB69237E981FB326F29A7CC865B25FDED1925FD4DA214A3BC34C12B32721B4
SHA-512:	7A22E68BC52DC9ABC6EDAF74CB618BA98182D19885DC7E7EB5AA7D941B301D7B8D817491DA94FC0D1D6DF505B0C1DB6E6317B844C43C0DBE53E24D6B7E03714C
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">..<script language="javascript">.. //../* *******************************************************...OpenHelpWin.js - Global include used to open a ...new window sized to 50% of the parent window. This...routine also determines browser version.......## to invoke this function add the following code ##...## to your anchor tag instead of the http:. ##.....##...##.onClick="openHelpWin('url.asp');". ##...## (where the 'url.asp' is the url address) ##.. ******************************************************* /..../ *******************************************************...Common Routines.. ******************************************************* /../ ********************************************************...openHelpWin...Open a new help window using URL passed to it.. ******************************************************** /../..function openHelpWin(sURLh){...v

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	9060
Entropy (8bit):	7.900639361602294
Encrypted:	false
SSDEEP:	192:Nbt39QBiqkOmNbr+beh3m6t7bTX0zzky7W/1MD1oTjlWB:nyBm1r+bQDt7vXTcWNMDSTh2
MD5:	EC73ECF20DD6F285189FF25BDFB9C086
SHA1:	497223A33DE109F9ED5239DF0A39BA68498231EC
SHA-256:	9E4CB9CA79BE942073F3A3F7484820F26D39AE5BDE0A244884A6CF26B44D2616
SHA-512:	1E48AB464939E667D93D1BE3AE0A91A74B7CA95D4138EB8142C3697B335A2AC78C74A4DAC3068179BAAF300E640BA3D15ABC6E23053D7D1FF34E09DEFF02201E
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?.. .IDATx...mL[Yz.p..@..........,.#VF...z..B.R.v..CIf.F.J$..i.Q6o..B&..Yih.....;...h..H.....>.,R,..E...:q(.._..U..>.;w.=........O.@.r\|}m...s.s.o}.c.....@................=.4....{.h...@........!......C@...........t..............=.4....{.h...@........!......C@...........t.........#....!jk./....^..#...h...v.....~.U.w...<....{.CN...;B.cw..fS]U.w)......=.9....8'/y.x.]...;..eg".....q4J.mk1o........zh...JJ_wk[...;..4a...JH..%.....t=..=......t4.U.u.};MuUgN....9........X"Y...CN.....XY..{i...u.EM.9..x.KE............w.P..6V..C........hVT.!....(M.......[.Q}.6!.y....}xo.....X....m-..s..d.CN...;..lL,.<y.{o...{d....Ca.tu4...B.......Z..p.u.Q.e..R[c...gvE2.i...x..lvaJZ......@.5.U..iv}....C......?..z..C......@..+.....;^mk1.bZ.........? ..5......@N.:..;^U^.Z2.(.....+]...g/.`.w4~...C.c]{..............5............rh.w..Z.m>[..`....+.......n]qMx.d6...gvU...'.4.....1.u.Xe..C....{./.y...qWG..1V.........c.......N(.........u:..]..z.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65328)
Category:	downloaded
Size (bytes):	136886
Entropy (8bit):	5.092393598825699
Encrypted:	false
SSDEEP:	3072:JkdCZqq9wHh+1d6tAqmBkHzkDuPY3vgPy/9i5m7srtk7ew2x0PDUTJ6T00JkDZPm:JkdCZqq9wHh+1d6tAqmBkHzkDuPY3vgs
MD5:	02D8D2879C291C5BB1B0428675C66C00
SHA1:	CC3FC46171C07B3BF41566C685751205C8425597
SHA-256:	D0618FEF3BB87289EE5A352F10BA3EA62D49E1923ED7CF2E11CC20F9875FA272
SHA-512:	2A07CB8982225D2E7D6D5935EA9AD4E4F17A7944D154984720686E3A20D58CAAC6DAC4C7B02C956822E18D5A749169ADE700ADEE0AB5F5D1F13DACC2346F7238
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/animate.css
Preview:	@charset "UTF-8";../!. animate.css -http://daneden.me/animate. * Version - 3.5.1. * Licensed under the MIT license - http://opensource.org/licenses/MIT. . Copyright (c) 2016 Daniel Eden. . . * . */...animated{-webkit-animation-duration:1s;-moz-animation-duration:1s;-o-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;-o-animation-fill-mode:both;animation-fill-mode:both}.animated.infinite{-webkit-animation-iteration-count:infinite;-moz-animation-iteration-count:infinite;-o-animation-iteration-count:infinite;animation-iteration-count:infinite}.animated.hinge{-webkit-animation-duration:2s;-moz-animation-duration:2s;-o-animation-duration:2s;animation-duration:2s}.animated.bounceIn,.animated.bounceOut,.animated.flipOutX,.animated.flipOutY{-webkit-animation-duration:.75s;-moz-animation-duration:.75s;-o-animation-duration:.75s;animation-duration:.75s}@-webkit-keyframes bounce{0%,20%,53%,80%,to{-webkit-animation-timing-function:

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 121 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1101
Entropy (8bit):	7.7030117114510706
Encrypted:	false
SSDEEP:	12:6v/7H+e/kFrWvY+pV7bWc4EkKb3eQjAojNjbVmf+eGO3H5WzP6vfX1sp9QDG3GJI:9WvDZ74EkO3LPNS5QylsMC3bPyXUYFnQ
MD5:	72629A38FFF71366690370E7A583C544
SHA1:	ED4806026C21F35F6F691F7A709987CF23B0F691
SHA-256:	30EC21253CBC4BDB2472C13323AB2E659BA43AFCB65D7582CB83B13B9756EB3D
SHA-512:	5C2879C6AF423801C37D8A37E5A96DB6E86275EDAB5D8BC96EE3F5C84557750EED2C77FA7D6A135B6CCB75993AD3D80519B3632AFF4A37774508965F27D23811
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...y.........b.Ah....sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.r.A.......0.pl....4).6](Ic... .....i..%4..dl85....N........8.3&.o8.n.v......B.<....r.=.\..........k@..5 ..o.3...15.-v..\|.......m.>...K..}....%._...W..V.ucZ....n.3...i..{...3..C..z.Y..?..H6.0.......8...Y.o.....iwdsW.l^%e..Wr>~".$...c.y......Sp../]c$}f.Q.._e......~\z..5I.G..........w\|.'.a.(\|.Y.O.....z9`%.h.=...+_H4...._..O...jL...LJ.?dP~ .P.N.W.pyeH@.7.0..."..dH.aZQ.....3N..B?'o.>...mw.....9N..:m....i}.x...:u.z.u.....r.>.pq..%....J..\|...!..J;.k..H..N&.$C.%.u..ETkE...gK.3z.N.....qb....:R.....W1....(...6k.#..@..E.n<0f.2.I3!..(....6..^....-..... k.....%g.PP..x.4${CV.&....4. [.LR.I...}&9..$.F.-..j...<..Vp....7...s..)F.&.\|r........7..(.9..L..7z)"}yuQ....%.j2...V.....V.#..$z.L..O..sX..&..:2~..b.a~.8x.......&.C..*..]:s(..{..Icz.c..k..$r....6(.lL.z....x.T..$.Qm.=9.o.O.-......-2..dVp.....I.j ..0d.?d.....L..Dc.g.).&..dRm.....p7I...CK

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (320), with CRLF line terminators
Category:	downloaded
Size (bytes):	56800
Entropy (8bit):	4.700973040918367
Encrypted:	false
SSDEEP:	384:dA9BEHn4QampTUgIzIdyRfS6TTXzz+aOrm+wazQUBdUatu5Op73A6GIWCBRkCKWB:qQYQd5Ugr8KQWA6DA6/WCBlZ+hW8w
MD5:	91B500A661503F65953AF7F7707CE5AF
SHA1:	2F3DFC6D1CC1505267827BD169EFA318DE757F3B
SHA-256:	C8B0055EA71CD91E0C244A1E9CCBCB16184982DDAAD4B1075D1BEFA6C1391187
SHA-512:	DA695EAC3AFCEAD2317CB316A7B54E3818D12A7495163B27402F3B8750719F3CCA7627FA5F96B1DE000AC65ACC800B096553993139D0F83BD2E86C7E64250488
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/favicon.ico
Preview:	<!DOCTYPE html> ..<html class="no-js" lang="en"> InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" -->..<head>.. InstanceBeginEditable name="head" -->.. InstanceEndEditable -->.. Head BEGIN -->.... Head include BEGIN -->.... Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NMG247C');</script>.. End Google Tag Manager -->.... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-LSF75XJL4E"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-LSF75XJL4E');..</s

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.2001615812851174
Encrypted:	false
SSDEEP:	3:CUO/RD/0xlpfx/n:oDAn/n
MD5:	41C9BC7F3F78ED71115CC062C1C67B09
SHA1:	FF200D7EA28780D12BD6D9334178B930DBD5884B
SHA-256:	1CD58A827318C4A29B32A0DB15C8C39D5651B42D8CAD227519AD81BCE4ADB944
SHA-512:	280EA4383EE6B37051D91C5AF30A5CE72AA4439340FC6D31A4FBE7BA8A8156EB7893891D5B2371B9FC4934A78F08DE3D57E5B63FA9D279A317DCBEFB8A07A6B0
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/clearpixel.gif
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 41
Category:	downloaded
Size (bytes):	1281
Entropy (8bit):	7.757793509069186
Encrypted:	false
SSDEEP:	24:pAAawRX4YwJSyDAlokpoGvHESsxCJR50OZRTrmJnEnthq95haY2/BU8:uJgUJN8f5Brmt325U8
MD5:	3F9E33EFFAC9B7A7FDF895EED58B9F5F
SHA1:	CA5BA269F1C510158B25CCE886BA980C67A9BFBD
SHA-256:	E066A2999F70EFD537FE69956080A96BE288E86BAB509714D063CDD91F6B7293
SHA-512:	F152BAF0C7BBD435B8C552ABA06216029194883CF5E17778E9903178BDB62D94730274F23A9CEC511E4BB361966D3F771CC3340EBA3F1442FC39293B4D474B39
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/top_banner.gif
Preview:	GIF89a..)..........-1.....vw.gjjab.dogWYwX].......BSh. j."l.#t.'.F\.Th.^f..,q.#e. n.$r.&w.'}.o.%x.)..2~.-../{.-x.+~./..2..6..:..=.$C.#B."?.'C.)G..M.,I.(C.2Q.6U..H....2..6..?..D..3..:.!@..=."B.&F.%E.J..P.~.i.%..1s..v.1..9.0It-B\|FVc.p.1y.6h.0].&P.&J.$W.^..R$5 ..\5CE..:..>.!F.-TOR........... ..$....%++39.........6=@$,(/129;...."#.. <BB')#.... ../+,&.....................$$ 44/:9$..F..7..:..>../..(..0....:H>...:..^\R(.......!...+.27/..............\|......#.g..M.z........p....mV.$....D.B..l......qL....dC..z..i..........W=.u`...u[.eP......hT.mY..q.n_...j..i.wi....z.^L.o^.}...^3%.iW..w.................VH.uf.w............{tr..._Q..........o>4.aT.ug..r.dY.....z....cY.\|...........phgvnm...........yy......!..NETSCAPE2.0.....!.......,......)........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.....

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	6576
Entropy (8bit):	7.889568697397619
Encrypted:	false
SSDEEP:	192:9wIdDGiBzzdRQLNyx6y1v0YoOINbkPq10w/+mJSQmCC:iIdGqzrHpvYtwksUHml
MD5:	560C49225BD1DD023B0DAAE95F02F7DD
SHA1:	8BEB706721A95C8D711141E6D5AB324CC781EAA0
SHA-256:	86762D5F7CD6EA99F5E77F37E0D39557FA44ACD47969F4C95293D4E375DA2615
SHA-512:	418BED969125C2473E052A5A1198771AA8A55618A4A0DE9E1A151AC27710F36F4FE616CCEB0EDF1A859C8AC758E137747C728E35AA861BC61507B17982A46F62
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Quick-Links.png
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?...bIDATx....L....qz7.&l..(u....R.19...;..P6.^.\...aR$.Q%R.K.(I...&...)."......V.".......q.%.g............N:..\|......_.....9...c........<.RSO...@6...=.....4.. ..h..@.#.....G....Y.@.........d=.....z.......4.. ..h..@.#...`.....7..4.....Y..G..>r5:..a..h..0.T..H.........4.. ..h..@.#.....G....Y.[.....s5U.....V..0T....MU.5..,.F.....4:./.o.5.].F..4...[.Z.L......\r..@..[.Z....Wd.AB.4.....\..y...L..f..R..@..@..oL..ib....../...w^.c..`..O.q{.I...<......_.a./..r83.........~.....4...^j......@z\<...J....e]z.I3..B...VI.i.f.B... .Q....o.O.1..<....?...I3..)....D...R....N.I.=4..$..T...twl..b8...^f..T.l1..)"...........I.].j_..sf~y..K..........sqag..k.......z..e.b....:......JO..._.../...c...%'..t.......J....Tg..........w.!..;.9.....e..{....B+k].Ff....Y..;......`.u.:4...J..a..M3b.....qe.....@..@..+... R....?......p..C...7N..-..(.p.bS.ys._..05.((X...h\MU..*..`f~.....eQ.4...lTYJ.f\G.^fR).....w..Z.{lN%9.'.9..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	75
Entropy (8bit):	4.583520737781227
Encrypted:	false
SSDEEP:	3:U9eP0gKIrATwhN9V00eyYy:UEpKcATeN3TeyV
MD5:	15B87CC91A918778CF3A49854790DBAA
SHA1:	CC5BCCD779A73CEC4299F055B00BE917CBF58C79
SHA-256:	3F8F1BE0363812C95578D88C058596000B2A03366EA79866C7CD2CB43F37DE9B
SHA-512:	6A5E0531FBCCFD8534B160A33961963BA0F432773FB52DD38B2BEE4870E30605F2FA8C1D7510E9A11326DA4001D9900669568271CFE65850C8B038E7ACDD26C6
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/search.css
Preview:	/* Switype Search */....#st-overlay-search-input {.. display: none;..}..

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 67
Category:	dropped
Size (bytes):	9863
Entropy (8bit):	7.903954226836314
Encrypted:	false
SSDEEP:	192:mV42jAzV3qgFas/2p5tT3QfFY7ylnZvzCJa0Nb9HKEsEeyDUlRuc:yip3RFn/yHQu7y77CVb9HKEFDUlRt
MD5:	6DF0FDC03243244B0F9BD38C0D82140F
SHA1:	2281CA2AE42482BF227CEFA42AF9A0D49F29A721
SHA-256:	1ECD4B81C88D4CBA7C2B030F91B086DB16CD5A2B20D47F8F9122D523385748F2
SHA-512:	B39AF3E5A778130D09DB49F19035AECCB1DBD4DF8C7342757B7E093A2D55A5D2573F782D43E07CE24A6C832FD8E1CB8D6CEFB7A43722D98396C18E7BA84A9BA3
Malicious:	false
Reputation:	low
Preview:	GIF89a..C...............f.(.'+.&..%-.&..6I.=P...)=.U`..n...p~.3O[..w...r+G......hZq..g..e..b..^..O..h..c..j..d..l..p..r$$x00}==.CCsmm.............MN.UV.bc...my{.................q...()-........en...................................i{.}...........Y..k...........C.....'..#...............................+..B..S.._..l..z............................................$..1..6..5..;..@..J..P..Y........w....=..\..e...$..y......^.2......@S.#-.M]H..Mhp.&..#.8D.%+.....4."'./../...........................53.74e..............0E;......z\|{.........................jlj.....~..BL;...vwuPUH...qrn.....a.........da@...M.p...\|p?.8..... .Z........lU...>=3...C.s...7.<....7..=.....a`^.7.;....9.......z7......942..}.v..tZ.]?.wi...L<.]U.oizKF.C3.?2.)(.1..('...!..NETSCAPE2.0.....!.......,......C........H......\....#J.H....3j.... C..I...(S.\.R..F..MbRh...`Z.....@...J...H.......i.NERTf.D9v..)...!E`.`.$......V....B..(.K...x....._..(Q....g..-[.......d...k.B0.E.5...

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 400, 16-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.490520061465319
Encrypted:	false
SSDEEP:	6:6v/lhPh1rZTp5mtlNOU7sVi2pMntm1AwaB40pkuRO+6xzgN+bd/LZlB2EMvd/bp:6v/7J1rZVQtlYeB80mmp1tqzS+bRLbBC
MD5:	3D0EB2D8CB47CD8F4952282EBC864F8D
SHA1:	B72EC5B81F2503F944139EA2D68B651064DC1140
SHA-256:	366E9AED0413B9D92D3FE82CA594995C0D149E1C8619DEC98344778BC37A0305
SHA-512:	7D3769D0AD7A4A3E6C99E71B6C4BA6B8CE3467348FDE4AF6EFEE8FB26B9A88DDA25FB56890D99004CB020A992321F2E5AA601479B78468628E73E5AB5EA30DB3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............A.....bKGD.......X......pHYs...H...H.F.k>....IDATH...!........fs.jpc.5.4...l&...08N@2;<..71....A.H..N.......w.....0.o.4-.....N..8B.....3dN.k.......]..+<1....2..\|^.Z..}unW.....&..k.E.}t."m...C>B3.N..L....%tEXtdate:create.2013-10-20T19:55:57-07:00.w>....%tEXtdate:modify.2013-10-20T19:55:57-07:00.*.d....IEND.B`.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18776
Entropy (8bit):	5.221573697652138
Encrypted:	false
SSDEEP:	192:Xh6bGzDX8zAjyBiKfT83VqIZ2q33M+2J94KbEf61vsP7s/PwyzZA7PczZm+lbEfd:X0bWmAmBXrQ0IZh3IswgNqkKRA5
MD5:	35E44B4E000286545482B992652FF0D1
SHA1:	9182C2CF9316D0F0D91FBDF2C1770F52902841CB
SHA-256:	D2288813AFF9B64D151A64A9E0D8EC163EDAC3933362C6A86C310A5023EA75EA
SHA-512:	A6765882C6B4249A4E8BDC71EFBDF788BA84F2082E4EDB771C0A79D8FCFC17E3C9FDFD95154C6141EB0509542DFBA7DC25EE79247855D19C011918A3A54BD614
Malicious:	false
Reputation:	low
Preview:	{"install":{"primary_doc_type":"page","hooks":{"query_filter":null,"result_clicked_filter":null},"endpoints":{"search":"//search-api.swiftype.com/api/v1/public/installs/3jhvv-yfJCUxQ51kSGbN/search.json","autocomplete":"//search-api.swiftype.com/api/v1/public/installs/3jhvv-yfJCUxQ51kSGbN/suggest.json","track_and_redirect_to_result":"//search-api.swiftype.com/api/v1/public/installs/pc/3jhvv-yfJCUxQ51kSGbN.json","constant_crawl":"//cc.swiftype.com/cc.js?engine_key=XFBwKZR-z-7xV9bsZPzb"},"web":{"analytics":{"autocomplete":true,"search":true},"dependent_resources":{"stylesheets":["//s.swiftypecdn.com/assets/new_embed-2552d8d62d9c60f59b3b11a5d083d1ebd090c72de809fc7c76fb339825302241.css"],"browser_stylesheets":{"ie7":"//s.swiftypecdn.com/assets/new_embed_ie7-5cad988962a7146c8f0d1dc8b92e995d9104d1152e29751446e17dacf8132320.css","ie8":"//s.swiftypecdn.com/assets/new_embed_ie8-03c400d04d4e8f473947670d38aadfca27d2cd401ea0960f6bc88c491b2e1a9a.css","ie9":"//s.swiftypecdn.com/assets/new_embed_ie9-4

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 188 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1037
Entropy (8bit):	7.682853810687522
Encrypted:	false
SSDEEP:	24:dH0DrS3yBNW4CJNb6KhnJRJ/OyUBVDtu2R3nXAWzRCSXp5p:UNX0+6t3UvDMC3XAWzAS1
MD5:	B79BD791B262D2C13731795229BCA60B
SHA1:	06F7CE2338626D0397EF53527E7284ABB0A98329
SHA-256:	6EC9D2D750AAE85A0DADA8E7259F7ED33451FADBB0CE943836807864E33D2718
SHA-512:	22233DA52C8CC35D5CFD81FAE408416CDCA1A36D86D3519FC90FCD4BB6B543BC0BB70B4671C07EFBE954D480FC11DAEEFC0443DE2CABF7B69140DA52F24B2727
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Z......sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.r.@.........a24..$e."N...sJ...t4.#y..E.;...0@.a..\..(a....j....$.).o....=...g..y9..8&d....x..^.J....^.J.......5c.m.......C.O..r.gL.g.}>.B......D9=.UcZ.@Y..N.@..~..O...qX`.-L~....O..~F......W\|!....a.fx..2^....^OA.}.&h(.x....{..'...aBF..B...0e.=..;..}.>W....6..l}..0j..J.....Z.....ESI....K..z.:_x..R....a ..mcj.=.bg.x.+.A.uX..D..&..Dux...j.u..;..ulK..g.z......=..x6.G..yS..)m.p..Cl...........th..?........&,2.....0kJ..\FH-..x.U...;...$.\|.O.?..zO..G.g.k..B.i../..k...(......l.IO.....Ax.dh....-)..C.q......k\|. w(..u...J29...pc..]@ .xq.b.`.N.'.kcc.d...GXr.E\..H..il.Z.~7.U$.8...!.8...i...D4.].\|.`.%......"8.x)...b......D..Q....w..]./.+z..+.)}?.m...BH..MM....T@$x?r."zM...B...;.r.s!.,L..g3...+.9ubp.7...8.g!..j..l7.......g...Fwn..s..D.i=)...ec.S&d.m....p"YL.\|..e....&...".P...g..d%.. ..=.Q.....(N:.R_.m..>..F.g...R3[%.{.. o.....W..'...S9..#..rn_.9FY..{x.8z...z.@..

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	8166
Entropy (8bit):	7.881377657736016
Encrypted:	false
SSDEEP:	192:40cSsRNbDXux4l4x/F+s1nkqiB1aUX8XC0sf/MYcna:ARNbDXBA/w0nk5OUX8XzG/Ma
MD5:	B22C02621D46AD15CAF096A51FA4F34C
SHA1:	15A8BF070912DB1AFA9B95CCCE3AC5684EFF604B
SHA-256:	87B1BD3C3F69FC17619F75DEA047BC53E5902064EAA55A4610DBE95D04FEBEB6
SHA-512:	38A6759397B37F03862C8B74EB80E02902F53F9FB5355E79B736021E5E49E0C15B07D5A48D1BEAC1B974EBF47EC73636A78489AA61336C7DAA99DD1DFFDEF8FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?....IDATx....h[..pe7T.......)-..a.^d..p].D....,o]JS..t.85..pE2\....0..V..;...Z.YW.2y.p.%....v.Y#.........@.b....y...H:.q....Z.u\|$.<z....;.._p....................CA...........l..............=.4...`{(h.....P........S......}bx.W(.:.]/..x.h(h...:Zx.wrb...O...X......??6.Q.............r..7....itP....t"....;?\|..Gt..\|`g`.....<q.4.......p....A=0%W.\N...}.w.{.....]..9.........g.k....:z..+.......Qo...A.Fh...:..T`2...RlYz..D.....>......]........}{...=......Q....t.........c...o...3...~.X.^.....=w.f...<.oo..$ov........}..!.L!M3/G~.~....n'S...\|T...O>z...tmK......6.....yP.Hr8.r&....f.w`......P..;.r.=.a...W...2y.....@;........%..#..x9..c-.fq.....=..P._.7.*.......@{...~.....G..-,.M.O..W..>.}....\|.\|....P.l..-y.....@.x..._....C.J..^..n.!...g..{d.]..o....g.........!..v.3........C...mn......y.T...{f.70....KK....?....&.T....M.....@KM..3?...i.....6._X...}.......7.\...G.;?.....>.~.z..W..)FA...."...o?...

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	19617
Entropy (8bit):	4.739315950675766
Encrypted:	false
SSDEEP:	384:kwZfqLaM54CQGCAtDDxYHIFIPadIaIaGSEXkut71wAUaAWtoRgaAWton8fvCu6uZ:k+fqLaM54CQGCAtDDxYHIFICdIaHky6+
MD5:	7C0F867E2F103D2F8A191C939C5AFF64
SHA1:	3FF7BA5F1813F9E7F7F40096ED5DF4720A8FA90E
SHA-256:	0EDDF370B59B32892272D676991BEC73074BE68A68B1E7346B30445C3A1A89F8
SHA-512:	6850A63490E1467C221F60CCBCC674D801B3141FA618C8422D13C700A422B1B09869D7024614A87E5C60E17CC498E00FFA6F0A5D30F57057369FE800250555C8
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/media.css
Preview:	@media (max-width: 1156px) {.. div#wrapper {.. width: 100%;.. }.. .solid-menus #navigation .main-nav > li > .menu-links {.. padding: 0 20px !important;.. }.. .solid-menus #navigation-top .main-nav > li > .menu-links {.. padding: 0 20px !important;.. }.. .solid-menus .trigger-fixed-top.navigation-fixed-top {.. left: 0;.. }..}..@media (max-width: 1042px) {.. div#wrapper {.. width: 100%;.. }.. .solid-menus #navigation .main-nav > li > .menu-links {.. padding: 0 17px !important;.. }.. .solid-menus #navigation-top .main-nav > li > .menu-links {.. padding: 0 17px !important;.. }.. .comp-pic {.. display: none;.. }..}..@media (max-width: 968px) {.. div#wrapper {.. width: 100%;.. }.. .solid-menus {.. /* absolutely positioned sub-menus, cover other menus /.. / non absolutely position sub-menus, does not cover other menus /.. / home-menu /.. / drop-down (About) /.. / multi-drop (Services) /.. / cols /.. / gallery (Best

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	930
Entropy (8bit):	7.741708568821904
Encrypted:	false
SSDEEP:	24:L9E3P25VRvzi0wkDl4M/oNxs4/8elLeRH:5EOlzg+l4MGsA8epeR
MD5:	79792623B03DD0359E8FBAFE74EA5195
SHA1:	A733806558104DF8E44572C1FB02BFFA3B898EDE
SHA-256:	4688B08E44F4D96BAAD2537967D4F5D5EAFA5584C56D6C692C033C8FC18C4151
SHA-512:	F330A9D7F5E9F278054D56593BEF76E52CE8E35494DF638AA5B1B88E2C1E0716F4070BB52FB93C26D65852A724D4794FC100F17DFDE3B39FFC2601C5CB9AF363
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............V%.....tEXtSoftware.Adobe ImageReadyq.e<...DIDATx.$.]l.U...w....L.e....J.R..H..mJ.(B5%..\|Pl..%.E^@..011...}P..M4~..hc.)1.1.F.u)E.-Ba......xw.y..3.....0.w.......b...xylb..WV...R}.tn....(.V@%.T.....P....m[;..$Q...}<.'W,0s.2.....:6H.Y.~..]..;..=.."_\ezn...n ."...;...6.3...G.9......uU...'9v.8...c..<.T...<@.^......^.........L..G}o9.oh,.....0??.S....'..J.t:..g.dsr#..McY...PW.P(..N.S.hf..2.....U5.r\|.-n...yn.s.t.Tt2.].Z..w?.G...l..0jT..85..Ah!.8G..&..a...@.:.U........W0.....n...(.Yz..K.....a.u......o.H.... N.db..O..8(....._...X....&.B.w.%.....w.+j...(..ApS5{..14.[..uAu&.Q....l..Vr.....3b.5-...5.q...hj.LSX.:.z....2[7.G...D..K......FZ1.'N.@YV.RF...e.Z(..Y.w....sh....?7.\|WW.......+5.R.j......<?OL....xa_.V...e...S37......[hn[.........uY\\..?8..Ct...M}t....i.fW.2..O..r.......~.8...y_....<....q.O......V.4...Q...9..q.s.h.@.*.....-.v.L.......AOk.t.D....IEND.B`.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	168
Entropy (8bit):	4.4662914953140245
Encrypted:	false
SSDEEP:	3:zLuMYyFe9HE8HMe9cBGMugCMe9cBIFEyk9cBR7JWWCMen:zSjwIE8sI9sGFl97Pe
MD5:	73DD9E448CD7262E6DCF62BD5A08150C
SHA1:	4313E845BC30A3FB0E59D2E3EB2B6D1CF6F20D87
SHA-256:	2A1938548CD4D97440B522827335EC3E9055F7D7CB521C54D00C35402F26DB59
SHA-512:	356D99070AF001000BEC57BDCDD9C438BEFF491193ACDD14108D75112AAA2C3C0ACE99A19BAF8D7FEC696B65E5F874CB6F665006353B106580AC8B143C8F06D5
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/solid-menu.css
Preview:	@import url('font-icons.css');.@import url('animate.css');.@import url('solid-menu-core.css');.@import url('solid-menu-media.css');.@import url('solid-menu-theme.css');

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.492897276113269
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpYn:wpoSySv6yF8pY
MD5:	C0DDB93C144B94DA946DC9F727D05538
SHA1:	517BA8265D63543D2F4F2D3E2247A9A9CEE79E9D
SHA-256:	4760B35732ACF6B7C363E144C5FD126EAFEE7315885510FEAF23B0D53938D33F
SHA-512:	FE7BBEF81355A517C2124C01EBA6CB7460E36F0E608849E37721C23B53FE1C9349CBE949016BCD2CABF97629AAB127CC6318B5EC4F6ED87BDB2982580843AD73
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9b?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgA=

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	13176
Entropy (8bit):	5.307593759627526
Encrypted:	false
SSDEEP:	192:QB/UfQPs5A8T5+JvOWYC3SnO8HtIwKXfebVQHtPGLWWPc/24kCXNArEjUy5J57XJ:u/M5H4WWYC38NHGwCCYck/tX0OWy
MD5:	EEA874A3AD21FCCAED7467F47202E200
SHA1:	E6B00016262DAE2D7AC2B1D45C904B2AB2B9B59D
SHA-256:	9A14DF554A00BE312A5A3026FF43B5C737D29F25CAE68017C071B1BEA9731540
SHA-512:	2D9F243A03E5FD9FD5C11944F65329A90D2FF3E371DB4F3AC04C84CA04983BBE66AE45F439BC2411921E170A9D1D90EEAA7F9FCED7FFA9AAEA9AE953CB68CA65
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/itscCommonJS.js?modifiedDate=2023-12-21T12:52
Preview:	/*.. This JS contains Common Functions used by RPTP applications... /..var chatReqDivInitialized = false;..var appHelpDivInitialized = false;..$(document).ready(function() {...// Setting focus to Search Box if current page does not have any INPUT controls...var noControls = true;...var inputSelectors = {...."input:text": 1,...."input:password": 0,...."input:checkbox": 0,...."input:radio": 0,...."select": 0...};...for (var selector in inputSelectors) {....if ($(selector).length > inputSelectors[selector]) {.....noControls = false;.....break;....}...}...if(noControls){... $('#wpthemeSearchBoxInput').focus();...}...// Password encryption...//Commenting following code for time being. Since it is not needed in Core Product...//$('input:password').dPassword();..});..../.. setPageName method sets page name. .. * .. * @param varIDAtt - the page ID.. /..function setPageName(varIDAtt){.. createCookieForPageClick ('requestedPageID',varIDAtt,10);..}..../.. createCookieForPageCl

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	8166
Entropy (8bit):	7.881377657736016
Encrypted:	false
SSDEEP:	192:40cSsRNbDXux4l4x/F+s1nkqiB1aUX8XC0sf/MYcna:ARNbDXBA/w0nk5OUX8XzG/Ma
MD5:	B22C02621D46AD15CAF096A51FA4F34C
SHA1:	15A8BF070912DB1AFA9B95CCCE3AC5684EFF604B
SHA-256:	87B1BD3C3F69FC17619F75DEA047BC53E5902064EAA55A4610DBE95D04FEBEB6
SHA-512:	38A6759397B37F03862C8B74EB80E02902F53F9FB5355E79B736021E5E49E0C15B07D5A48D1BEAC1B974EBF47EC73636A78489AA61336C7DAA99DD1DFFDEF8FD
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Individuals.png
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?....IDATx....h[..pe7T.......)-..a.^d..p].D....,o]JS..t.85..pE2\....0..V..;...Z.YW.2y.p.%....v.Y#.........@.b....y...H:.q....Z.u\|$.<z....;.._p....................CA...........l..............=.4...`{(h.....P........S......}bx.W(.:.]/..x.h(h...:Zx.wrb...O...X......??6.Q.............r..7....itP....t"....;?\|..Gt..\|`g`.....<q.4.......p....A=0%W.\N...}.w.{.....]..9.........g.k....:z..+.......Qo...A.Fh...:..T`2...RlYz..D.....>......]........}{...=......Q....t.........c...o...3...~.X.^.....=w.f...<.oo..$ov........}..!.L!M3/G~.~....n'S...\|T...O>z...tmK......6.....yP.Hr8.r&....f.w`......P..;.r.=.a...W...2y.....@;........%..#..x9..c-.fq.....=..P._.7.*.......@{...~.....G..-,.M.O..W..>.}....\|.\|....P.l..-y.....@.x..._....C.J..^..n.!...g..{d.]..o....g.........!..v.3........C...mn......y.T...{f.70....KK....?....&.T....M.....@KM..3?...i.....6._X...}.......7.\...G.;?.....>.~.z..W..)FA...."...o?...

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51390), with CRLF line terminators
Category:	downloaded
Size (bytes):	55287
Entropy (8bit):	5.300643009328149
Encrypted:	false
SSDEEP:	1536:C/mTakspRg4nFXhOahOCe8qa6+f1qWYXMpy14oPY:ZTojax4UY
MD5:	DA2C5C1D135CEF0A7BCC48B92A6405B7
SHA1:	106726C0192A77684743C8B9A2C41E40511ABEC3
SHA-256:	8DB2F8C208ABEF90B5CDAAFAABFBB11A0F349194444F9EA0BD78094D37E23D49
SHA-512:	56A6F8CCCB8A90053DFCD9A23D2812168A351756ADBDE5775CD8CC72BF7D27F5A35F70CB9BD11F764868F4675E81894856E07F8201976610D29D97FD9868BCFE
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/jquery-ui-1.10.3.customDatePicker.min.js?modifiedDate=2023-12-21T12:52
Preview:	/! jQuery UI - v1.10.3 - 2013-12-06.. http://jqueryui.com..* Includes: jquery.ui.core.js, jquery.ui.widget.js, jquery.ui.mouse.js, jquery.ui.position.js, jquery.ui.datepicker.js..* Copyright 2013 jQuery Foundation and other contributors; Licensed MIT */....(function(e,t){function i(t,i){var s,n,r,o=t.nodeName.toLowerCase();return"area"===o?(s=t.parentNode,n=s.name,t.href&&n&&"map"===s.nodeName.toLowerCase()?(r=e("img[usemap=#"+n+"]")[0],!!r&&a(r)):!1):(/input\|select\|textarea\|button\|object/.test(o)?!t.disabled:"a"===o?t.href\|\|i:i)&&a(t)}function a(t){return e.expr.filters.visible(t)&&!e(t).parents().addBack().filter(function(){return"hidden"===e.css(this,"visibility")}).length}var s=0,n=/^ui-id-\d+$/;e.ui=e.ui\|\|{},e.extend(e.ui,{version:"1.10.3",keyCode:{BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,NUMPAD_ADD:107,NUMPAD_DECIMAL:110,NUMPAD_DIVIDE:111,NUMPAD_ENTER:108,NUMPAD_MULTIPLY:106,NUMPAD_SUBTRACT:109,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	13337
Entropy (8bit):	6.079666547677288
Encrypted:	false
SSDEEP:	192:o5V5nHzXlfwbWrO5WdGB8ADOmjvfjig9lzBN1lwD/Zj8sHnTxKIWWmuhBW1q:o5HTXlfwbWvGB8vsHj1BN1lyjlHOWsY
MD5:	11559D93E669B31D0F361FB509445CCC
SHA1:	0348F685DA50A22CDE329D23E0BD1D602368A70C
SHA-256:	028859C8DD14DBC3FE7A74E13BBCE177A67769F9BBD261C019EC7511FB146C3F
SHA-512:	209DDA8D3972288BDEE05319AA39CA942E81C63283B29AD5BF9A6BD464A7327E464BF3F06E3BAB6C550CF92A2722664D1940B3F901A70E834EB5D4F12B1E4B0F
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/img/Comptroller_Logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 410 120" style="enable-background:new 0 0 410 120;" xml:space="preserve">..<g>.......<image style="overflow:visible;" width="410" height="120" xlink:href="data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEASABIAAD/7AARRHVja3kAAQAEAAAAHgAA/+4AIUFkb2JlAGTAAAAAAQMA..EAMCAwYAAAdZAAANJgAAJK3/2wCEABALCwsMCxAMDBAXDw0PFxsUEBAUGx8XFxcXFx8eFxoaGhoX..Hh4jJSclIx4vLzMzLy9AQEBAQEBAQEBAQEBAQEABEQ8PERMRFRISFRQRFBEUGhQWFhQaJhoaHBoa..JjAjHh4eHiMwKy4nJycuKzU1MDA1NUBAP0BAQEBAQEBAQEBAQP/CABEIAHgBmgMBIgACEQEDEQH/..xADjAAEAAwEBAQEAAAAAAAAAAAAAAwQFAgEGBwEBAAMBAQEAAAAAAAAAAAAAAAECAwQGBRAAAgMA..AQMDAwMEAgMAAAAAAgMBBAUAERITFBUGECAwQCE1UDEzNCMkIiUWEQACAQIEAgUHCAcHAwUAAAAB..AgMAESExEgRBE1FhcSIyEIGRobEUBTDBQlJykiMzINHhYoKiFUDwskNTcyRQYDTC0uJUNRIAAgED

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18776
Entropy (8bit):	5.221573697652138
Encrypted:	false
SSDEEP:	192:Xh6bGzDX8zAjyBiKfT83VqIZ2q33M+2J94KbEf61vsP7s/PwyzZA7PczZm+lbEfd:X0bWmAmBXrQ0IZh3IswgNqkKRA5
MD5:	35E44B4E000286545482B992652FF0D1
SHA1:	9182C2CF9316D0F0D91FBDF2C1770F52902841CB
SHA-256:	D2288813AFF9B64D151A64A9E0D8EC163EDAC3933362C6A86C310A5023EA75EA
SHA-512:	A6765882C6B4249A4E8BDC71EFBDF788BA84F2082E4EDB771C0A79D8FCFC17E3C9FDFD95154C6141EB0509542DFBA7DC25EE79247855D19C011918A3A54BD614
Malicious:	false
Reputation:	low
URL:	https://s.swiftypecdn.com/install/v2/config/3jhvv-yfJCUxQ51kSGbN.json
Preview:	{"install":{"primary_doc_type":"page","hooks":{"query_filter":null,"result_clicked_filter":null},"endpoints":{"search":"//search-api.swiftype.com/api/v1/public/installs/3jhvv-yfJCUxQ51kSGbN/search.json","autocomplete":"//search-api.swiftype.com/api/v1/public/installs/3jhvv-yfJCUxQ51kSGbN/suggest.json","track_and_redirect_to_result":"//search-api.swiftype.com/api/v1/public/installs/pc/3jhvv-yfJCUxQ51kSGbN.json","constant_crawl":"//cc.swiftype.com/cc.js?engine_key=XFBwKZR-z-7xV9bsZPzb"},"web":{"analytics":{"autocomplete":true,"search":true},"dependent_resources":{"stylesheets":["//s.swiftypecdn.com/assets/new_embed-2552d8d62d9c60f59b3b11a5d083d1ebd090c72de809fc7c76fb339825302241.css"],"browser_stylesheets":{"ie7":"//s.swiftypecdn.com/assets/new_embed_ie7-5cad988962a7146c8f0d1dc8b92e995d9104d1152e29751446e17dacf8132320.css","ie8":"//s.swiftypecdn.com/assets/new_embed_ie8-03c400d04d4e8f473947670d38aadfca27d2cd401ea0960f6bc88c491b2e1a9a.css","ie9":"//s.swiftypecdn.com/assets/new_embed_ie9-4

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Category:	downloaded
Size (bytes):	18668
Entropy (8bit):	7.988119248989337
Encrypted:	false
SSDEEP:	384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa
MD5:	8655D20BBCC8CDBFAB17B6BE6CF55DF3
SHA1:	90EDBFA9A7DABB185487B4774076F82EB6412270
SHA-256:	E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6
SHA-512:	47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
Preview:	wOF2......H...........H..........................\|.....h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z'o..w;....6.E....6....E...'$H.#.....n1X..JU/.d.O..JC.'J".v.v.l.h.....u.S...SY.....B.hz.o.}......W......%m6...A..=....\..m. .]..~.[..........]...I..h.=.....6.xt..F....Lt...Qs-.7..{...~BI.".F.Q......F...P..dMw..#I2........Rq.Q&.0@.;..;...3VG..:c.nki..-Q..2##e.u...8n....\?....T..b....^..#...../.J\|OM..St....e.S.}!.....>..i.T/a.ES%.W.P3..`..a.R.A.....!~g..74.np8o.....d[6?.P.4)P.....AG.3.......;#0.y....M..O/2.@.4..N.vA$.:M&H,.AT".........@..a.~..L->...0@h...~.._..N"......t......C./g7..............2E.N.J...TW.F..."A.B...n.......i.?.{\.L.!.B..x...S..!........?.\,... .@.....y"xw.A8.w..!E..-^P O..+.T.r.R.zz..K..].E.....Ri.)g.P...j..w..c.M.F.v../........Q....'...(....X..;.K.!BZ3.........f.....N.A(....cA`.b'...`.~sa^.....?..../.L.S......t..`@h..C.....>N.W...;>..._h.+~=\|......uOGA{.7.....h....q.d.4$.x<.....^0\|...@....@Q[RC.0....b....'...RID

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	25005
Entropy (8bit):	5.130594006091823
Encrypted:	false
SSDEEP:	384:qiasmnKxEHxhlD5uvC5gIyb90Wnnc5I6LZY5Y:V9mnK8xhBMvp0WcCu
MD5:	86CCC1463387BC577EA8BBC8DDE324DE
SHA1:	E54ACD7EBBA9612622A9249B2C42AA706E49419A
SHA-256:	0D341FA40DDE863FE6A86AE0DE3C26737EE6B29A59B956EA8FC9F51DE9C8D586
SHA-512:	BC2A5A36528533B4754D80EDA7DCEF111756568905904CF8C50B6BBBE8CE5466B80F2800BB9E5A98E80C5A3A6F8C6EAD588D7FE185F0156384A8EE612CDC8DC8
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/js/solid-menu.js
Preview:	$(document).ready(function() {.....'use strict'; //implement strict JavaScript Coding, required in JavaScript Category in CodeCanyon.....var bootMenu = {......adaptationWidth: 767,....init: function() { //initialization functions.......this.cacheDom();.....this.bindEvents();.....this.loadCarousel();.....this.loadNewsTicker();.....this.loadSprites();.....this.calculateDistance();.....this.setResizeOptions();.....this.stickToTop();.......//window.oncontextmenu=function(event){event.preventDefault();event.stopPropagation();return false;};......},....cacheDom: function() { //cache the [needed] DOM to improve jQuery performance.......this.$document = $(document);.....this.$window = $(window);.....this.$html = $('html');.....this.$body = $('body');.....this.$html_body = $('html, body');.....this.$page_contents = $('#page-contents');.....this.$owl_carousel = this.$body.find('.owl-carousel');.....this.$news_ticker = this.$body.find('#js-news');.....this.$solid_menus = $('.solid-menus');.....th

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1334 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17281
Entropy (8bit):	7.857324306603345
Encrypted:	false
SSDEEP:	384:SIlrNyFpP3Yq32plr7Hafi75tLdVBJtg4FD6Rk2n:SkZyvYq2afiGkI
MD5:	7DC090DEF538D83B1C3589F2996DA03E
SHA1:	C1327CE28E52247A3E1323D0F4DD2033D116EE0C
SHA-256:	C1D748E1725B372059F3DE7C9F8D723E9AD1CB8727C447A7255B2723540CE41C
SHA-512:	908662E27618E061DAB4D21D81664B3EECA6019F34945DC7514C08A687E5EB0131B61F3A51541B9DB0685BD80BAECAC7C97FBD46ADB26BC63996D33388245C5F
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/mdtaxconnect/img/Logo_Final-Tory-Blue-background.png
Preview:	.PNG........IHDR...6...,......(......pHYs...#...#.x.?v.. .IDATx...n$W./..6.l.~qp...OP.'...d............/.E4.....M>.....s...._ ...B'..f...?...BRwU222"2..^{.Z.......9........07.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......f.O>2......yQ..=m......a..L.`.....5................`.......S........S..k....>e...b........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;....b....Eq..9W....(>...}../x.Z,..8+?...........0C{....vx.Z..Eq^...(.w}..@*.&.........h.....9.&.......`..@>..........>e...jqT..g.&...b...]PV....K......@wTl.....b./..<....e../.&.tK.....(W.>.I3...aQ.wEQ.....{.M..v.{.6.X.l.......M..v.O..`;.6...%......`...]sa!!..............SV

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (320), with CRLF line terminators
Category:	dropped
Size (bytes):	56800
Entropy (8bit):	4.700973040918367
Encrypted:	false
SSDEEP:	384:dA9BEHn4QampTUgIzIdyRfS6TTXzz+aOrm+wazQUBdUatu5Op73A6GIWCBRkCKWB:qQYQd5Ugr8KQWA6DA6/WCBlZ+hW8w
MD5:	91B500A661503F65953AF7F7707CE5AF
SHA1:	2F3DFC6D1CC1505267827BD169EFA318DE757F3B
SHA-256:	C8B0055EA71CD91E0C244A1E9CCBCB16184982DDAAD4B1075D1BEFA6C1391187
SHA-512:	DA695EAC3AFCEAD2317CB316A7B54E3818D12A7495163B27402F3B8750719F3CCA7627FA5F96B1DE000AC65ACC800B096553993139D0F83BD2E86C7E64250488
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html> ..<html class="no-js" lang="en"> InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" -->..<head>.. InstanceBeginEditable name="head" -->.. InstanceEndEditable -->.. Head BEGIN -->.... Head include BEGIN -->.... Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NMG247C');</script>.. End Google Tag Manager -->.... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-LSF75XJL4E"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-LSF75XJL4E');..</s

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.530108717855274
Encrypted:	false
SSDEEP:	3:H0hCkuMTwet4IPk1:UUkuVy4G+
MD5:	FB6C899C42B558A5971821868FB2D39C
SHA1:	9D29366D0D85E320023F644FF233A90F725EA395
SHA-256:	790C3DD0739CFB8E441291987B5FEDCE17FBD1523CB6F8F7FB686716AD246C06
SHA-512:	0BB117DC13D7AA6BD387E0C3557DE63A0E7615FE355455AC5ABC9EA90A73787CB4038629FA604A770B71AD159DC32B915DFE45CE426CEAFFA444A61813D28322
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm_wZVoBm36cxIFDVNaR8USHgkNh5qJLMzoZxIFDURfWHoSBQ3YxFLyEgUNlJCS-g==?alt=proto
Preview:	CgkKBw1TWkfFGgAKGwoHDURfWHoaAAoHDdjEUvIaAAoHDZSQkvoaAA==

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	231660
Entropy (8bit):	5.566324777630717
Encrypted:	false
SSDEEP:	3072:b+rsgWEoH8y9IZtJdez8jgxYD3CvRuYx+YbM8nQVW01krDtzGw3e4mjKyQc:SrUHd9kB9Gvj+YbM8Qp1RwO4mx
MD5:	628EFCA30415EFCA0C03367E153777B8
SHA1:	034D0F3196AAB2CB410629118F6B2739417ED370
SHA-256:	AD529D762E87571CF8FF5C09744220722BE5A19953EEF766E2ABB8151D1B67AD
SHA-512:	D99EB7803811DA5AEB8E29618101C12D275FD1F5A17137DB29B28FBD508029C1DCAC7CB4271FC6C21CC248289B1CC1EB0EEFF63EF44584EEE08276290FADFB14
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-VX6FNWE6LE&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":6,"vtp_instanceDestinationId":"G-VX6FNWE6LE","tag_id":18},{"function":"__set_product_settings","priority":5,"vtp_instanceDestinationId":"G-VX6FNWE6LE","vtp_foreignTldMacroResult":["macro",5],"vtp_isChinaVipRegionMacroResult":["macro",6],"tag_id":17},{"function":"__

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2326)
Category:	downloaded
Size (bytes):	211406
Entropy (8bit):	5.564703085416998
Encrypted:	false
SSDEEP:	3072:vbAlZFi9SCBvkVprC+WJcYbADupPSQzsU1S73rSvc:javRtWJB1mrT
MD5:	757570397FE8AD0B94B75DDCDC160BA2
SHA1:	F4885C9B0944BECE15E87C8F15D91118B8D9EA8F
SHA-256:	C5C1AFED412E5789454807EA8F4C88F90FC70C54B96B6719A60BB5F9DB3391B9
SHA-512:	3B913B0A1DD2AE7EB3535E158978DAD81F998C0CFFB2ED5D4072179BBDCE099AB09A089497B21607A3926CADE415171545ADCF3AF31984814D432D1294C51EE3
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.uGHZxV7XvKA.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfrMIccDr9tE16dVkW9efHRLLXAdtQ/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Hh,Ih,Jh,Rh,bi,ci,di,ei,ii;Hh=function(a){return _.Aa?_.Ba?_.Ba.brands.some(function(b){return(b=b.brand)&&-1!=b.indexOf(a)}):!1:!1};Ih=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Jh=function(){return _.Ca()?Hh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.Ca()?0:_.v("Edge"))\|\|_.v("Silk")};_.Kh=function(){return _.v("Safari")&&!(Jh()\|\|(_.Ca()?0:_.v("Coast"))\|\|_.Da()\|\|(_.Ca()?0:_.v("Edge"))\|\|(_.Ca()?Hh("Microsoft Edge"):_.v("Edg/"))\|\|(_.Ca()?Hh("Opera"):_.v("OPR"))\|\|Ih()\|\|_.v("Silk")\|\|_.v("Android"))};._.Lh=function(){return _.v("Android")&&!(Jh()\|\|Ih()\|\|_.Da()\|\|_.v("Silk"))};_.Mh=function(a){if(!_.jg){a:{var b=document.createElement("a");try{b.href=a}catch(c){a=void 0;break a}a=b.protocol;a=":"===a\|\|""===a?"https:":a}return a}try{b=new URL(a)}catch(c){return"https:"}return b.protocol};_.Nh=function(a){if("javascript:"!==_.Mh(a))return a};_.Ph=function(a){return _.Oh&&null!=a&&a instanceof Uint8

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	45254
Entropy (8bit):	5.0524898494677215
Encrypted:	false
SSDEEP:	192:pVRN2zVgJ8FBvcXFT5lLT7csPldICcpzvxRd6Y78/Hj0bX7oqOR/+9by0ct3Ia5q:vRwzumBvcXZ7sCO78477hOtvICkrjt
MD5:	7619825B456D39A424E1D68CB58D09D4
SHA1:	E89682F740B63A6FCC3C11189343AF814A997667
SHA-256:	EFA015EAC0CB4EB8D01D3870CF69FF8AF357B3E783EA051C34A7B55DF2DFE947
SHA-512:	003BE8083856BCF6C49B483F85F7DC179F970106C802AB57CE300F4D3E04DB1B77510C258520A273FBA8DCF66F324FCE0AFACE55D373E11087E44FE1117CA0FC
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/itscValidations.js?modifiedDate=2023-12-21T12:52
Preview:	/*.. This JS contains Common validation Functions used by RPTP applications.. /..var isDirtyData = false;..var DIRTY_FLAG_VALIDATION = "Warning: Any unsaved changes will be lost.";..var enableOnchangeTracking = false;..var preventClick= false;..$(document).ready(function() {...if(enableOnchangeTracking) {....$(":input").each(function(index) {.....$(this).change(function() {......isDirtyData = true;.....});....});...}.....});..../.. This function validates the date submitted by user... * @param inputDate - the date entered by user.. */..function validateDate(inputDate){...var isValid = false; ...if(inputDate != undefined && inputDate != ""){....try{.....$.datepicker.parseDate(jQconfigDateFormatVal, inputDate);.....isValid = true;....}catch(e){.....console.log(e);.....return false;....}...}else{....return false;...}...//If date is valid, check date is in range...//The year should be between 1901 and 2099, both included...if(isValid){....var inputDtObj = getJSDateFromInput(inputDa

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5423
Entropy (8bit):	4.9274375654565645
Encrypted:	false
SSDEEP:	96:GoCgh8TiTVTieN4QM59ThP3aXUF8utpMtPyq:nCnRGYZeGVMtPyq
MD5:	B0D16DFC3A5C8942A7666F24061B1007
SHA1:	3E788F81358AE8671F5D75BBFC8E0AFC0275F26A
SHA-256:	73AA1AD4D833DE633BE13C919BBEBC6E71DF86946C85B3E75150C7BF11440249
SHA-512:	DF495FDF9D90E43ECF7ABB1EF0E74732DBE5BFB2B0EB02EFF6CC632B6D7206E39F0FF0EB9FB1E31588B5F5C342329F202E70398D31DC843E720C5B9243AE5BD3
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/base.css
Preview:	html {.. font-size: 100%;.. font-family: 'Open Sans', sans-serif;.. -ms-text-size-adjust: 100%;.. -webkit-text-size-adjust: 100%;.. -webkit-font-smoothing: antialiased;.. font-smoothing: antialiased;..}..body {.. margin: 0;.. background: #ffffff;.. height: 100%;..}...solid-menus * {.. -webkit-box-sizing: border-box;.. -moz-box-sizing: border-box;.. -ms-box-sizing: border-box;.. -o-box-sizing: border-box;.. box-sizing: border-box;..}...solid-menus article,...solid-menus aside,...solid-menus details,...solid-menus figcaption,...solid-menus figure,...solid-menus footer,...solid-menus header,...solid-menus hgroup,...solid-menus main,...solid-menus menu,...solid-menus nav,...solid-menus section,...solid-menus summary {.. display: block;..}...solid-menus audio,...solid-menus canvas,...solid-menus progress,...solid-menus video {.. display: inline-block;.. vertical-align: baseline;..}...solid-menus audio:not([controls]) {.. display: none;.. height: 0;..}...solid-menus [hidde

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 7 x 10
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.595458313557534
Encrypted:	false
SSDEEP:	3:CJeRHmlUrgj+RklTET5:Ymrgj+RuTEV
MD5:	645F5A2EA1C267F980045BBEF5FA379E
SHA1:	F28F61B9FCD566971537AD74B8D9479CE927B1C7
SHA-256:	54C322EAF33EB6F6C2B7AF1CDA7C99B7278D219FF658E99E7E8338F520D568EC
SHA-512:	1156B70EAEAE26AFA6CBDC86ACF279B85825B7EA15BC274C10CBE9359C00D4A7E4D27C1B2F3A7C8C97530F6CB00105451CC649CE38B31C625B1656696B968F3B
Malicious:	false
Reputation:	low
Preview:	GIF89a............'......!.......,..................drVx#....;

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	235228
Entropy (8bit):	5.566356554047404
Encrypted:	false
SSDEEP:	3072:8uT4sgWEoH8y9IZfJoez8jBxYD3CvRuYx+YbM8nQV71krPtzGw3e4PjKyQ3:pcUHd9kW4Gvj+YbM8Qt1xwO4PO
MD5:	34122DD5574BAD0BD1CD5F2B83484A99
SHA1:	2C6AA21EB630AF8CE8AB0570ABC4E4CC5028308F
SHA-256:	D52854ACB4B0077E1FDC6EF734D52ED0232988DC337912DAAAE9F80E13DFA24D
SHA-512:	23EC911A155146B2FCC0830FA351FB7F95C3B02D1EB9A9D82E70304C08BF224A689E2E02EBADCED3C4A8599683B18A487FA385E38017C9D14C96C17EA281FFCE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-LSF75XJL4E
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","marylandtaxes\\.gov"],"tag_id":18},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":20},{"funct

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32746)
Category:	downloaded
Size (bytes):	425856
Entropy (8bit):	5.329220337888249
Encrypted:	false
SSDEEP:	6144:FZi0GNVLDQYL/7i72yj5YF7fkrGM69/B9UIzwHgNf:+0GN1/7i72+5YF7fkry9UIzwHgNf
MD5:	C39995548BC3AC94EC39AB64BE5DBB1D
SHA1:	0FDF40F89B70706DBCA7BBB2ED131A3690273EBC
SHA-256:	2D7C7930EB39D59CD8C2DC00652977DA3ED72347E7CD465F7B540E10E2121C22
SHA-512:	462318C39DC2348C1E96658400B494BA7B2AB50B73A4DC3E0B8BCA9C0EEC4EFBB955B724122E2CD248CD59DF74AF7154208123F146D5F133814E89C4E0A51597
Malicious:	false
Reputation:	low
URL:	https://app.swiftype.com/install/v2/st.js
Preview:	!function(){"use strict";window.__st_moment=window.moment,window.__st_rome=window.rome}(),/!. jQuery JavaScript Library v3.5.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2020-05-04T22:49Z. */.function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(!t.document)throw new Error("jQuery requires a window with a document");return e(t)}:e(t)}("undefined"!=typeof window?window:this,function(t,e){"use strict";function n(t,e,n){n=n\|\|St;var i,r,o=n.createElement("script");if(o.text=t,e)for(i in bt)(r=e[i]\|\|e.getAttribute&&e.getAttribute(i))&&o.setAttribute(i,r);n.head.appendChild(o).parentNode.removeChild(o)}function i(t){return null==t?t+"":"object"==typeof t\|\|"function"==typeof t?ft[dt.call(t)]\|\|"object":typeof t}function r(t){var e=!!t&&"length"in t&&t.lengt

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 97 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	721
Entropy (8bit):	7.544911572016387
Encrypted:	false
SSDEEP:	12:6v/7Pt/kFwYSGJ/sHPi2gTa6tJY3lwKOyO2bnju25kV3Y75LvzKm2fxm1+Tc:wGqHa2gOyclEyO2bjnki75LvGPfxW
MD5:	632421D6703469743380A93FF16D4F21
SHA1:	485D7C1DF0F530CFC776EA926E3C58D8D429108B
SHA-256:	85C089FBC72B373EA2516F69CFEF78CECA0135FB99D2B7378EA5988B57AA10F9
SHA-512:	6B46F2E777FFA59C9D1A0FF4D3E50231147993307374ACE34772C929DE8FC4813447CDD3CA7A498446F13DFFA709DD7C508B548270F4E28017CDAE69E8477C01
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/nav6.png
Preview:	.PNG........IHDR...a.........V..t....sRGB.........gAMA......a.....pHYs..........(J....fIDAThC...A..{...Q.>r'(.Ta.I!6...]..I. ..9, 0$.....u...$......e...ev.._.dv>w....l.y..B<....52...O....NH......".g..8...!}m1.{.Z...;a.X......oD..D...i....}..\|.."}u.k....?)..[B<p..'WD?.4..j.>o....9..9...........R..+[+..?.u..L..U#O...Q..*.....@~..W.Dz..QT...w..q..5=........3.?.Y=."@vDy..A......!....F&.5_,.a<.J..9.#.X..\|...&.5.u...w...+]..S...?....>...g._.o.......~...b.C.1.s._..cu.....a..s.....'..8S#w.~.A...N...2.h\....>.sQ.3....Z?_#.%..4s....S......d{p....).......O.........(..lt..a%'.L...K0HO%...C.....`w...zL2...8._.Y.c3.u.m..Ev...H.5.0'.L!...@f......NH....NH.......l.fQ.n.....IEND.B`.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	13103
Entropy (8bit):	7.917909926515831
Encrypted:	false
SSDEEP:	384:tLg47ctgZ1UG9Md7uGPfsoDALkin3aDUd5/ts:1g47kI7GlnBWaDcVK
MD5:	39A488ED78AC04BEC54E365CAB6C6A3E
SHA1:	59B31538A19F61E13DE90720BD7DC0002B23A6FE
SHA-256:	7D9F108C89E7AD26D254734E79CA0587DA5D750816B24BE9BB5822748EAA9E4C
SHA-512:	CEFD90E23946559C569D57903F37EDE6F157AC92D67B35D95B30DFEA2F6EEE05FC73BEA18BAF263ADC19D313B270573DE2E7D113D1AED442D9F2CE1997C8D776
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?.. .IDATx...PSw.....PM...O.)./._........D_.LW..v...K.gV;.V.?...S...3......p..K..2..5..`.H....E.?.......=..99.I.<..tb8..wN....>....%u...........w...............&< h..............`..................&< h..............`..................&< h..............`.3..B..........B.D"..H...W.....w%...=...vvy..{...........iQ."O53O%G:.........7..]..]..{x...O.PR.........1y..$7(e..&...%....]._`t2]p.4......dgH.J..\.\...A.E.b.\.}k{.45...a.)....I...........B.F..Q...E._.a..-~....X.."y9.4H.dgH+7h.J.x....;..<..B.,5.=)KM+Q........8[.{&z.."4.....7L%.&.=.t.v...E.-_`4O%?y......GN].[.<`D..-..8.RT.xo.....c.-.=..b........g[.g[.O\Y........@Q..r..b.u...8..A..R.>._O.&.FA."7....T..XT.0...9X..7].....4.....S.3..6/.$.Z.{..-..ob.%.6A.....F..k.m.T9.R.6..o4i.`..&.O?.z.>.......6...zkY>).............)K.N.=GN]i....T..~l...a..O..V-U%'=-.H~.X...;..'...]...5..y9.L..d*Q.._}s..q........bAv....+..G.A".tvy.z..f...RT......z....._3..C.H$...

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 108, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9649
Entropy (8bit):	7.954590695280449
Encrypted:	false
SSDEEP:	192:pmQ3Y4DSYqr6wHvN1nRpaMHNpjkvmPTImZjYDsiXLcyocK58xueYfHeOK2DvgsZq:UQolY7wPrRhj1LbYDJVocK58xu/PVZq
MD5:	A53E6573383E07E1B7B016057D792FCE
SHA1:	4B3109321D2B6AB347437B412A23797437FCEB5A
SHA-256:	27A6F00B01318626A195EF8FAFBB0F8EAD61EC26A67CA08EB08B923CDF6FEDE0
SHA-512:	A73A6C204B125F6527D5826E0479113B2082EBE07B0B1483E4395DB200E3A4A5BF1B0741449D7093AC2884EAD70F9195A5FF498244D5658C4DA7EA1A372B5D4E
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/business/glmedia/newHeader/Information%20for%20Business%20Taxpayers.png
Preview:	.PNG........IHDR.......l......h.....iCCPICC profile..(.}.=H.P..OSE...;.T.P.,..8J..`...Zu0y..4iHR\....?.U..g].\.A.....I.EJ./).....}.w.....Qa..5...e..11.[.{^.....cDb..H/f.Y_..Mu..Y.}.VP.....sL7,...MK.O.b%I!>'.7..\.]~.\tX..!#..'......;....x.8.....Y...[..J...._..k+i...#.%$....5.Q..(..)&Rt....;.$.dr....TH....~..,LM.I....b...@.......m7O..3p.....0.Iz..E...m...{...0..K..H~ZB.....7..[.o.[....@.f.\|....cE.^.xwo....i...m.r.t.xM....PLTE......43.....').(,...'2vkl.....+v7=.:N..%h..v.#\|.,.YlR3k.$..0..8.3P.}.V..r.,..<.%D_.y.5<..Q.(qS]h.7@.%...g%M..............l..l.....k%$t53.43\|zy...l..d..[..t..l..b..t"#\|44.44.,,y@@.......PR.ef.CEt.....l..d..t..l..............s\|..$:............bj{..........jx..........,..D.......................$..4..4..<..D..M..d....%..................,..D..Q..V..h..v........$..;..D..L..@..]...............d."..2..\..t.................L`Oem....;L.$,E.. $%.+4...........45.,,.$$.,,a............53 963=;...knm+/-{.\|.........................AL>........cuuk...VVR...

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	464
Entropy (8bit):	5.086429892864221
Encrypted:	false
SSDEEP:	12:/hIX40Yi9IzFv6wyPpnrJko6RpINf8Ppno0c:/e40n+pCwyBFkTTBop
MD5:	8715D7F6ADCE651B059D3E368B50F118
SHA1:	4DFC9CD9C6ABE11FB66B5080513D5C906DE2B6F5
SHA-256:	2A8D052B5F8DB0F6A2A256727EC17617589B4F58051F09F09B957FE605CEAE3F
SHA-512:	9D7DF99096FC7A8AA5B0F864C416BB35829D6FED9A7A816A60130E0E63E9638ED76FF2E00DF64AE41901671AA84188C21EE01635CECFA11E74AA7F498D871698
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glinclude/script.js
Preview:	// ..//begin rollover script....function navSwitch(x, y) {......if (y == 'in') {........//this[0] = new Image();........//this[0].src = document[x].src;........//this[1] = new Image();......document[x].src = "/individuals/glmedia/newHeader/" + x + "_over.gif";........//document[x].src = this[1].src;.......}...else {....//document[x].src=this[0].src;....document[x].src = "/individuals/glmedia/newHeader/" + x + ".png";...}..}....//end rollover script..//-->..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1278), with no line terminators
Category:	downloaded
Size (bytes):	1278
Entropy (8bit):	5.819002459362415
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJlz6+KVCLTLv138EgFB5vtTGJTlWtqn1/I8AsLqo40RWUnYN:VKEci9KonR3evtTA8En1/3BLrwUnG
MD5:	63191B756022077F1AB266677240C299
SHA1:	ABC5161079208D24BD2B9C1CD0664E3FA77325F1
SHA-256:	4FB80DEAA11CE65FEFDBF768E8957E3B1452DD9ECC2EA082D8EB12F3B0106995
SHA-512:	8262D04BB3660892C8696EB80A3C959A46F2EAA0FD86751FF414B0EF5E5E475B235EE84A3D6BC8DDC336D44A0ABD1098A68A0C92D9F07DAF8ABC62F6285E815C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?onload=loadCaptcha&render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('loadCaptcha');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js';po.crossOrigin='anonymous';po.in

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.81843370584671
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpgKTwet4IPk1:wpoSySv6yF8pEy4G+
MD5:	F6881874D11D80ECEA221B40CDA39A1D
SHA1:	2974BD4BA0165F71E7AC8FDD50B1EF564AE07FFD
SHA-256:	9A3644ADFF640BED294FB56BC0955894C779C18854BA19DB5DAF534A766A1515
SHA-512:	2E1750980F1777E19F17BAC3779556CC589E1B947F4CAA584F22A2E3D2F61BE85A2AA4547D91B54E47488FC1E66CB84631A4CD9C5A42A388DA451CF1844D13C6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9bEh4JDYeaiSzM6GcSBQ1EX1h6EgUN2MRS8hIFDZSQkvo=?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgAKGwoHDURfWHoaAAoHDdjEUvIaAAoHDZSQkvoaAA==

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.598652005434406
Encrypted:	false
SSDEEP:	3:Hn8ohkbAut4Is:H8ohkbX4L
MD5:	0D71AA7B565465C900CCE6A59C85DB5E
SHA1:	EB1C25670B385A72BD27176B1FFD0938969C69E8
SHA-256:	BB46E56D9736C99F689D4A2FBEA876071ACE18B5DB1B27715591884BD6DF7DC6
SHA-512:	BBF2518E52866E718C974A47F344318755949D4E586FC22719C8734569813C05151781F0111406D935FDAD7D5C9567A902820686F6E1277BDB610A75F6145771
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmcClDbSZGpYxIFDb2Fgw8SFwmIIPjowPGhehIFDURfWHoSBQ3YxFLy?alt=proto
Preview:	CgkKBw29hYMPGgAKEgoHDURfWHoaAAoHDdjEUvIaAA==

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 188 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1322
Entropy (8bit):	7.777591308772541
Encrypted:	false
SSDEEP:	24:RVb8ZgK/XtD1L6rhJR3jV/AexTFhN4SddqPHtPDBDTSRxMbPGo9:RtxotpOr/5Vo4T3N4SdoPRDBHUMbPz9
MD5:	6AFFEFEF426B7088DF45A8F39ED8EDD3
SHA1:	BC7D58B9C31EA7A0A96B001397FC823BC16F7555
SHA-256:	4ECA152594FD7980EE10E3D3493F7C916802640F52A548B97636266AFC8703E2
SHA-512:	348CD81A46F2C360F43AFD82B149121B99BDDC7BEF3DFEB144C4711F4F2FA627D026CFFAD921872BE61F7A9917F40C75D3380E714ED75A261D751CAE2D0F081C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Z......sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.=s.@.......\|..&C...]2.r...6.S..].t4NG.h.E.....d.&.al.....f...=.gERdKIp\|.D.t..[.......j4VQ.Q\,....r.,.P8.w,......3x.B...W.5x..n.?x].i.y..E.....%..:.....![....SS....9..Z.g.....I.>..?Ux..-..>...d.\...![...T.....La.7.Z.t.z.\8&...9).R./.=i.....a...L..,@...`A.qZ..k..e..(wLRT.+\|...T..z8u....`..V..Hyp....3..m...^h..u.....x./.r...K..D.....\|..e...c.I..}S...]..F._h..w.et.......ho..}..=!7..}l......... }.3K.8O..P..p...i...%.Fz....x..CR...1.?....cy0\e.....'..G.Bc..........:....o.N.R..n.......&.6..a.d`...!..$E.}.+..vk...m.Xa..<,...u..6..8y..Y5FY7....9...8........Z.9S.w.....C...)..(..j....I..!..v..I.zz,N.I...i..^...z.x...MZ...0.i...8.v.=1f..2X....2...(._.P.!UaHk....=..Z.%o........$....#..>{...-..L....3..`.`z.....D.A.g.RN.q..$.K.Hx.r/....E.z..\...D..t.....8...u.H.}h.c.z_ .....[....M.0BF.c....(Z.&....E.....VaYe.......ao..U/.Q.d..~X.zP.u`.....q..F"..#./.{.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	5996
Entropy (8bit):	5.420591934941908
Encrypted:	false
SSDEEP:	96:ZOEbaIJOEbaiDFZ8OEbaXkOEbahYOEbavOEbakyhZcyJzV+zmnWOEbafubqGIFuY:aIKAXzhXQkuyE2bqGIwYjlXYO
MD5:	F7562F6C5F51F3076915C17748309BF4
SHA1:	375616D25F0E7F5D8F54587C29F6A2259D7B2347
SHA-256:	12EEBBA255CE6F856459CAB6B183B507BE0417A322F46FAF7DD71B3C4B0EEC27
SHA-512:	C4C278F4DC497EFD124324144C80612C835D8FB681386D0049C094914C98FA0BD22AEAB9586016BAE58BEF493510773B43CA69E46ED9BCF569700DBE03C0BF92
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open+Sans&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext */.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVIGxA.woff2) for

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	173
Entropy (8bit):	4.525155360228597
Encrypted:	false
SSDEEP:	3:UaMKWxET/seyovtTrse2JVClLgm2JVoQJY2e2JVDjMe2JVtIJWWCMen:U/KWxErsfOrsXQavNbXiX2Pe
MD5:	B489FCA63C74851C8C626494E3DA3C29
SHA1:	A9059408DC14B6FFE8F9A46A0251B7B671FB2EC3
SHA-256:	E4C7D467782C5DED52C10710BEF9866054107E400DAB8A2D8DDB48B87CC4E598
SHA-512:	8019954AAA559B5368618EC9FA74BF9F546DF03B41E8925D3A8CD6C3C987AC2A66CE1E72F09B9432F5F1E325700A06A5B7E636F521898B1D931DE151BA466621
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/styles.css
Preview:	/@import url('bootstrap.min.css');/..@import url('base.css');..@import url('layout.css');..@import url('module.css');..@import url('state.css');..@import url('theme.css');

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32033)
Category:	downloaded
Size (bytes):	37045
Entropy (8bit):	5.174934618594778
Encrypted:	false
SSDEEP:	768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
MD5:	5869C96CC8F19086AEE625D670D741F9
SHA1:	430A443D74830FE9BE26EFCA431F448C1B3740F9
SHA-256:	53964478A7C634E8DAD34ECC303DD8048D00DCE4993906DE1BACF67F663486EF
SHA-512:	8B3B64A1BB2F9E329F02D4CD7479065630184EBAED942EE61A9FF9E1CE34C28C0EECB854458977815CF3704A8697FA8A5D096D2761F032B74B70D51DA3E37F45
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	3.315789272504005
Encrypted:	false
SSDEEP:	3:CU7llexltxlBc6:1lluc6
MD5:	6D69C4DE0545F6FC9BA3DCD899E29501
SHA1:	201A59B8ED906C84C99E9BE323D3C5DD0A0AD0D4
SHA-256:	7F86128FC63CBAB878D570AE894EF2B7FA8694A35367E99EF351545C26335930
SHA-512:	640C029AD0D3CDC51ECA67C4867514A4BC400AF8D229821935F2FE988596E6339A4A6D63FE4C3A01F953BF7A460D0EA4F6170B535BD7AA96F739EBF765CA1733
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/business/glmedia/1ptrans.gif
Preview:	GIF89a........3....!.......,........@...Q.;.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 100, 16-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	387
Entropy (8bit):	6.778458654112956
Encrypted:	false
SSDEEP:	12:6v/7Wo1QtlsZVCDygfx6n+PnrtT1pA+nzS+byEMvH7:no14Su3fx9nZjA+nzjbyEMvb
MD5:	091EB5205D5B2E9E47C44436DF33C950
SHA1:	4CFE8D841703762AA6FCA84411813C8B4EAD4EBC
SHA-256:	9623FAA139B0F6CFB91733669EE1226800801F815752DB489F4C6E1EB29D8B2B
SHA-512:	6DA11F9EA2B2D14FBE91AB2C164CA98D6E37782C59FD9B450B9634600305F3C5352C29135019808417457B5A4517F39F55E8FB0919FD007C1DDA7A86E5A82743
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......d........t....bKGD.......X......pHYs...H...H.F.k>....IDAT(..=j...@...t)..N...P..t...%..=C...frw.EL.v).@E..mH......P.......Z._......Q.....1......U9...u1mB.va6......._...u..:a{...h.O...U}.&..v..>2.5p......M.+.:.M.....u..1..>.V..A.../.9../^d...c...%tEXtdate:create.2013-10-20T19:55:58-07:00O?N1...%tEXtdate:modify.2013-10-20T19:55:58-07:00>b......IEND.B`.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 280 x 100
Category:	downloaded
Size (bytes):	4548
Entropy (8bit):	7.685013352964227
Encrypted:	false
SSDEEP:	96:WZl3Yb8GLo6kTGxlgEIUhr3n2vrBaLbBcJ:ycLb6GxlgEIq32vlYOJ
MD5:	5BDFF07FC72B8EE7ACA4422E6FD0FF9E
SHA1:	5EF88D8373CEC71A8881CDBCD0542F51EC1B466C
SHA-256:	745B80D8C9691BB2F83651A38771D98B6F0B0B62A8D799FEA723D3C58F012A63
SHA-512:	AADD6DD7321E1CDE78CA3BAC346424998B736D0C7DD6565D075E2CC778E7A764A514072C84E78BD93DB6F93B9D119F32A5481B61AE8C603ED46B74C1EB4E919E
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeDynamic/themes/html/dynamicSpots/overlay-gif/processing-message2.gif
Preview:	GIF89a..d..H.......\|...c....K..[..:..........k....{.......k..........R.....c..Js.B..1Z.{...1c...c...........k.........!{....1.......................s...........Bs!J{Z{...........Bc....{.....Rs....k......1k..............................................................................................................................................................................!..NETSCAPE2.0.....!.....H.,......d.@...G........................................." .............G...........%.%........................................'.....$.....$(.`...A...)\.p......x..........B.. 7$......(S.\...0C...@...........A........G..X.........T...Lk2...@N..fB..`.B..8p...G...t-......Dt...z.%D.-.e...D...o........3k.l...e.b..0...O....4..!...E.!..i...@..H........65D..%7........N..q.....B......O.%....(......vL.?.G..,[.l.......@@.I.$...-..T=-.....4..#...........v.TCq.. Jm.@OK.5.d.........R.P0H.4...MD...`G$...{...W......G0.c.:.!AbI.2.c.....Y......U...x.d$.)..fuXT!G.R"..

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30033), with CRLF line terminators
Category:	downloaded
Size (bytes):	174742
Entropy (8bit):	5.246591669094926
Encrypted:	false
SSDEEP:	1536:4FIBhNwFSM13LSGQeX8el8slMp06ngfbFL:UH4hVnI
MD5:	31113F073EBED697D847AA61D2866D70
SHA1:	6C04CBA797E2A0457B087DA43AA822C900E991E3
SHA-256:	218C5968847C8A6D4C330E3478B3ADEA80AD0BF6D38C095AA8A546FBF80C42CF
SHA-512:	58645BB1CC98FA088692AAEB638337D231750AAE53C2A999D43749ADAAEC015C40FEC108D8C0453F8D31FC41047B24A24643302CF7FBF36556005035B84B376C
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!GWWJERcu-9Ti3pOi7lLbAg/sp/mashup:ra:collection?soffset=0&eoffset=5&themeID=ZJ_MOCCHA82M0Q700AN8112B100G1&locale=en&mime-type=text%2Fcss&lm=1703152666000&entry=rsimobile__0.0%3Ahead_css
Preview:	/! jQuery UI - v1.11.2 - 2014-10-16.. http://jqueryui.com..* Includes: core.css, accordion.css, autocomplete.css, button.css, datepicker.css, dialog.css, draggable.css, menu.css, progressbar.css, resizable.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css..* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=highlight_soft&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=flat&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=glass&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=glass&bgImgOpacityHover=75&borderColorHover=999999&fcHover=212121&iconColorHove

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1334 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17281
Entropy (8bit):	7.857324306603345
Encrypted:	false
SSDEEP:	384:SIlrNyFpP3Yq32plr7Hafi75tLdVBJtg4FD6Rk2n:SkZyvYq2afiGkI
MD5:	7DC090DEF538D83B1C3589F2996DA03E
SHA1:	C1327CE28E52247A3E1323D0F4DD2033D116EE0C
SHA-256:	C1D748E1725B372059F3DE7C9F8D723E9AD1CB8727C447A7255B2723540CE41C
SHA-512:	908662E27618E061DAB4D21D81664B3EECA6019F34945DC7514C08A687E5EB0131B61F3A51541B9DB0685BD80BAECAC7C97FBD46ADB26BC63996D33388245C5F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...,......(......pHYs...#...#.x.?v.. .IDATx...n$W./..6.l.~qp...OP.'...d............/.E4.....M>.....s...._ ...B'..f...?...BRwU222"2..^{.Z.......9........07.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......f.O>2......yQ..=m......a..L.`.....5................`.......S........S..k....>e...b........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;....b....Eq..9W....(>...}../x.Z,..8+?...........0C{....vx.Z..Eq^...(.w}..@*.&.........h.....9.&.......`..@>..........>e...jqT..g.&...b...]PV....K......@wTl.....b./..<....e../.&.tK.....(W.>.I3...aQ.wEQ.....{.M..v.{.6.X.l.......M..v.O..`;.6...%......`...]sa!!..............SV

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 400, 16-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.490520061465319
Encrypted:	false
SSDEEP:	6:6v/lhPh1rZTp5mtlNOU7sVi2pMntm1AwaB40pkuRO+6xzgN+bd/LZlB2EMvd/bp:6v/7J1rZVQtlYeB80mmp1tqzS+bRLbBC
MD5:	3D0EB2D8CB47CD8F4952282EBC864F8D
SHA1:	B72EC5B81F2503F944139EA2D68B651064DC1140
SHA-256:	366E9AED0413B9D92D3FE82CA594995C0D149E1C8619DEC98344778BC37A0305
SHA-512:	7D3769D0AD7A4A3E6C99E71B6C4BA6B8CE3467348FDE4AF6EFEE8FB26B9A88DDA25FB56890D99004CB020A992321F2E5AA601479B78468628E73E5AB5EA30DB3
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png
Preview:	.PNG........IHDR...............A.....bKGD.......X......pHYs...H...H.F.k>....IDATH...!........fs.jpc.5.4...l&...08N@2;<..71....A.H..N.......w.....0.o.4-.....N..8B.....3dN.k.......]..+<1....2..\|^.Z..}unW.....&..k.E.}t."m...C>B3.N..L....%tEXtdate:create.2013-10-20T19:55:57-07:00.w>....%tEXtdate:modify.2013-10-20T19:55:57-07:00.*.d....IEND.B`.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 100, 16-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	6.503018210126439
Encrypted:	false
SSDEEP:	6:6v/lhPeozp5mtlNYkvkpLixj26g3j1sGf8M+I92zgN+bd/LZlB2EMvd/bp:6v/7Wo1QtlO7lOdyjOJhzS+bRLbB2EMn
MD5:	32F7D8E6E713C9F11BFAD0C63D57D088
SHA1:	68CEC424E8F4FF1A7FA6CBAB672FC2A441962CFB
SHA-256:	435D301E9CE1104D8A1357EB5A18E5E10C8C73D3C6FCE937859E82FF3C9DD2FA
SHA-512:	A17CEDA0DD92C5094E87505C9E96E265A815A76D83CF988F799DDCCEC96CFEFD4B715354F8C59534D9C7D13358492AC6834BF730E0273061ACEBD9907BC8D85F
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png
Preview:	.PNG........IHDR.......d........t....bKGD.......X......pHYs...H...H.F.k>....IDAT(.....@...?........B..PE...0.....P..4..hr...k.........R.5..........Q..~...#..%.i.d..a..x....s.@.z....n.r..}#.y..R..LFX.\..n..o..C.d......%tEXtdate:create.2013-10-20T19:55:57-07:00.w>....%tEXtdate:modify.2013-10-20T19:55:57-07:00.*.d....IEND.B`.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64393)
Category:	downloaded
Size (bytes):	596795
Entropy (8bit):	5.427379793615106
Encrypted:	false
SSDEEP:	3072:lKjjyOxeL/T2NdV4MLlUe0Mawl/dVAv+GDCmuebSMKIV8:leyO8v2zCNp+GDCmV2
MD5:	C868D8165735D127A035BE786AA04993
SHA1:	1DFB8DE58119406FF463E04E0FD9A79BEE6BCB53
SHA-256:	61DDFFB244B6B3BAA419678F0A7228F4C743FABAFA44440BD0EE59F7820F60A0
SHA-512:	6CFACE28D0158AB021FE5DED6A2F19302D67E85EA5C4D5E95635D2EFA2DA81990CCBA970EA01117B515E27C2404846392FD0861E767845E51F83B7377D79054C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NMG247C
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"41",. . "macros":[{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-111504782-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":false},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HCNCkY:QY
MD5:	FC10C2818B864FCC38006936127A647C
SHA1:	8DFA775095871ACE8C1DFCF13355D2065357C2F6
SHA-256:	B561DE696009B98E613484A1A0BA09326B1C90DA362766D0B954CECCC899F16F
SHA-512:	2D03E67202EB4E789E04133B8FBAEB3A851005003CEFB67EF41614E6E5982DB0EA37AAF37F8A0A0ACA3CFC9F2AD8CED95FDF78CF7F41D664D22B2A870B1F42A2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmGi_9qQr6KCBIFDWdns_4=?alt=proto
Preview:	CgkKBw1nZ7P+GgA=

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6130
Entropy (8bit):	5.073475539093749
Encrypted:	false
SSDEEP:	96:R/fifS744aoLjzTPNsO+OLhbGJ4S08J7PPfn:BfifS74JaNsO+8S08Jrfn
MD5:	6B10B6643EECAB60F0BAFB3F6B202D3A
SHA1:	EA7A31ED1633F42D937203AB38EBD8B46AC7417E
SHA-256:	C66580E92FD5FD83CE49839B5B525B5FF2CCC6BC9EDDCD602DEED9BE3136DDC4
SHA-512:	6A0C4B97E5C438FE3B5C0055C744CFFBE5521ED8EE350C93EF1CB10A555BB1EE3616DA9373E61F3CB1A5B56E6D1C879BBD9C2A442924327DB9B6FE94F7DF7857
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/theme-01.css
Preview:	/* --- /...solid-menus {.. / navigation /.. / main-nav /.. / sub-menu-1s /.. / home-menu /.. / buttons /.. / tabs /.. / blog /.. / forms */..}...solid-menus div#navigation {.. background: #0099ff;..}...solid-menus div#navigation .main-nav > li {.. background: #0099ff;..}...solid-menus div#navigation .main-nav > li:hover {.. background: #ffffff;..}...solid-menus div#navigation-top {.. background: #2d3192;..}...solid-menus div#navigation-top .main-nav > li {.. background: #2d3192;..}...solid-menus div#navigation-top .main-nav > li:hover {.. background: transparent;..}...solid-menus ul.main-nav > li:hover > a {.. color: #ffffff;..}...solid-menus ul.main-nav > li#home:hover {.. background: #ffffff;..}...solid-menus .home,...solid-menus .drop-down,...solid-menus .multi-drop,...solid-menus .social,...solid-menus .full-width,...solid-menus .gallery,...solid-menus .tabs,...solid-menus .blog,...solid-menus .sign-up {.. background: #ffffff;..}...solid-menus .home

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	77435
Entropy (8bit):	5.008678152479943
Encrypted:	false
SSDEEP:	1536:O0LsmpYTMIn6ujsmpYLsmpYw0PkiuVCQ0PkQuVCc0Pk3uVCG0PkAuVC+uVC30Pkq:Ok
MD5:	A0EF27FFE5B08340FF780A96E2C8259B
SHA1:	8D5DF1864C50D03C2A8D4BF45A7C1C9422AC8C90
SHA-256:	500602BDA2C3A21EF6D397B9DC4BD92264351742F388F269EAF6CC3C381DF5CF
SHA-512:	0A8A84507597935D0430A78310E778C4765628C72E44D2C5200588AEAB3B93E486684BBEEB614EE00DE34B7FB59EB6E574668DD1258B804AEB9595E803991166
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/module.css
Preview:	#wrapper {.. margin: 0 auto ;.. min-width: 100%;.. min-height: 100%;.. /height: 100%;/.. /* min-height: 100%;.. margin-bottom: -10px;/..}...solid-menus {.. position: relative;.. max-width: 100%;.. / background /.. / element widths /.. / margins /.. / padding /.. / offsets /.. / alignments /.. / visibility /.. / texts /.. / wrapping /.. / borders /.. / background /.. / box-shadow /.. / navigation container /.. / main title /.. / Main Navigation /.. / links /.. / home-menu /.. / Sub-menu 1 /.. / Sub Menu 2, Sub Menu 3 ... Sub Menu 7 /.. / SIDE MENU /.. / SIDE MENU WIDE /.. / lists /.. / panelss /.. / fly-leafs /.. / div container /.. / home /.. / drop downs /.. / specific portions on mega-menu (home) /.. / MULTI - DROP /.. / FULL WIDTH /.. / SOCIAL /.. / GALLERY - Best Deals /.. / TABS /.. / BLOG /.. / SIGN UP /.. / Buttons /.. / forms /.. / font-awesome /.. / con

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3524
Entropy (8bit):	4.911774956857994
Encrypted:	false
SSDEEP:	48:IEfv9hwzVM19TWhA2coF2yCzp12olVJZqNt/3V68d+7uKcy:ZDmVg1Wh7cqofLqv/acy
MD5:	9E0DC23FD10C3499126664DA1D91A37F
SHA1:	554AEBD393EF407593F3D3FA8687154C78662074
SHA-256:	2AE911C11218E6793C2BE25880BFDF20821C2F03DA26EC12CF7B4D1336B1265E
SHA-512:	4C4103D8AD65836F9C8F26FD935F7F4910149E256E636D362483C6CDA609076618AA60DD70F0F242BA7A1B537CE14505C530A9CFCB6BC6E1CED7C6BCE63C1C06
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/layout.css
Preview:	.solid-menus {.. /* Helper Class /.. / flex /.. / floats /.. / General Layout /.. / Special Columns /.. / layout table cell */..}...solid-menus .l-group:after {.. content: "";.. height: 0;.. display: table;.. clear: both;.. visibility: hidden;..}...solid-menus .l-none {.. display: none;..}...solid-menus .l-block {.. display: block;..}...solid-menus .l-flex {.. display: flex;..}...solid-menus .l-flex-hvc {.. display: flex;.. align-items: center;.. flex-direction: column;.. justify-content: center;..}...solid-menus .l-float-left {.. float: left !important;..}...solid-menus .l-float-right {.. float: right !important;..}...solid-menus .l-float-none {.. float: none;..}...solid-menus .l-align-center {.. text-align: center;..}...solid-menus .l-align-right {.. text-align: right;..}...solid-menus .l-text-indent {.. text-indent: 1.50em;..}...solid-menus .l-va-top {.. vertical-align: top;..}...solid-menus .l-container {.. margin: 0 auto;..}...solid-menus .l-inl

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	8362
Entropy (8bit):	7.881028399929829
Encrypted:	false
SSDEEP:	192:T6UwAoysGz+SDpFsDXTH2W8c0FZ86GozwNW3gJ6D4z:T6vFysHKFsDHWRZ86GozwQ3gJ6e
MD5:	7B421A3B96D6CC610C36E1D73C9183B9
SHA1:	E767E3CE981E01235C7090174CD447C71EB0B339
SHA-256:	1A5799E35829FFA1D25B1310BA85BC0532F8733E14B68C7FA77220F5C383EA3E
SHA-512:	5A2D039F87D773BBF17D740326AFF5246447C43870C57DBE5770D251F19A95C6A32FF66B606EC176D70CAF36D0D7B7800488C6BC245FD11D886AE754417A4674
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/Additional-Info.png
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?.. .IDATx.........M."H..Me"..`.=4.`..h9..4V+p.....%.e....p.....\....a.j.i/..[p.V{!$......c..<P.r.dh=.....\|.R....L.yG........nv5..;..y.....y1?.....d_.....A.....................<.4....x.h... ......@.!......C@...........................R<".C.S"...[....N..p.}....:>.B.h.....Q.".s.(..$e..&......W...u_Q}x.Pm...`..Q!.:..HR<b....5E.T.U..N..K.....`z..P:..-..qLm.e..mw..G$...... Fg.^.T>.T..j........`..Q.bV^.$t....m2ZTo.'..3'.bT .V.....j.&l........../$...........m...HV../....IX..... ..ph.B2.(...MQK.R....".....M..^...u!........\|!94.T..jn......\rh.T................\93.C....V.Y,.a........ H..im.61.~V.eN....k............N.u.....`.....?\|.9..=.p_\..t..bI..c?...{...u..OIQr.B8.......R?t...h....@...l........-].P=...............O^x.918.]............_....tz..]}.T>..iw{.R........H'#...?.....N......\|-..n.X..fj...+[.,.4....{....,.#.7b/.4......H.+gh.P*..zy.?...7./..E'.K..{o....R.h.....D3....{....}^.^.......

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	641
Entropy (8bit):	5.051752764006207
Encrypted:	false
SSDEEP:	12:UitLJROA5uaBuiADSRE20Flb7ZHMkl2ICUSp2cmzlum80x7EzOFdOC0C:hjwaBXHE1rnRfw/Uvhzlum8q1SC
MD5:	90E29070DE7DCD28A451465EC74047BE
SHA1:	AF717E217E39503F4DCAAE216218D34540AABF9A
SHA-256:	F663FD5D5698E04A8E56DE60C13C54ABCB6943ADCB21C3D5E80866D0EDA0604D
SHA-512:	BE74C4DACA9CCFF1FC63FB9950EE7F87228DCEBBFC3E5267FF78EBBD70F47E4A597895477B3FC40D032DFCF3BCE65E004BB917E37C8CBB120B86808EC0DD888F
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/js/ie10-viewport-bug-workaround.js
Preview:	/!. IE10 viewport hack for Surface/desktop Windows 8 bug. * Copyright 2014-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */..// See the Getting Started docs for more information:.// http://getbootstrap.com/getting-started/#support-ie10-width..(function () {. 'use strict';.. if (navigator.userAgent.match(/IEMobile\/10\.0/)) {. var msViewportStyle = document.createElement('style'). msViewportStyle.appendChild(. document.createTextNode(. '@-ms-viewport{width:auto!important}'. ). ). document.querySelector('head').appendChild(msViewportStyle). }..})();.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	930
Entropy (8bit):	7.741708568821904
Encrypted:	false
SSDEEP:	24:L9E3P25VRvzi0wkDl4M/oNxs4/8elLeRH:5EOlzg+l4MGsA8epeR
MD5:	79792623B03DD0359E8FBAFE74EA5195
SHA1:	A733806558104DF8E44572C1FB02BFFA3B898EDE
SHA-256:	4688B08E44F4D96BAAD2537967D4F5D5EAFA5584C56D6C692C033C8FC18C4151
SHA-512:	F330A9D7F5E9F278054D56593BEF76E52CE8E35494DF638AA5B1B88E2C1E0716F4070BB52FB93C26D65852A724D4794FC100F17DFDE3B39FFC2601C5CB9AF363
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/img/icons/help.png
Preview:	.PNG........IHDR..............V%.....tEXtSoftware.Adobe ImageReadyq.e<...DIDATx.$.]l.U...w....L.e....J.R..H..mJ.(B5%..\|Pl..%.E^@..011...}P..M4~..hc.)1.1.F.u)E.-Ba......xw.y..3.....0.w.......b...xylb..WV...R}.tn....(.V@%.T.....P....m[;..$Q...}<.'W,0s.2.....:6H.Y.~..]..;..=.."_\ezn...n ."...;...6.3...G.9......uU...'9v.8...c..<.T...<@.^......^.........L..G}o9.oh,.....0??.S....'..J.t:..g.dsr#..McY...PW.P(..N.S.hf..2.....U5.r\|.-n...yn.s.t.Tt2.].Z..w?.G...l..0jT..85..Ah!.8G..&..a...@.:.U........W0.....n...(.Yz..K.....a.u......o.H.... N.db..O..8(....._...X....&.B.w.%.....w.+j...(..ApS5{..14.[..uAu&.Q....l..Vr.....3b.5-...5.q...hj.LSX.:.z....2[7.G...D..K......FZ1.'N.@YV.RF...e.Z(..Y.w....sh....?7.\|WW.......+5.R.j......<?OL....xa_.V...e...S37......[hn[.........uY\\..?8..Ct...M}t....i.fW.2..O..r.......~.8...y_....<....q.O......V.4...Q...9..q.s.h.@.*.....-.v.L.......AOk.t.D....IEND.B`.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	49296
Entropy (8bit):	4.846537242556699
Encrypted:	false
SSDEEP:	384:A7VAWrrqgJgpB9fkVbAV6RpjZ/sxhoVjDu:eA9RkVbAi4KS
MD5:	1B2E49A3E56F6F63BBDCEF136AAF8FD6
SHA1:	24D375778E150139FBE31C13F85300A1F406AD25
SHA-256:	4BEDDA411A655AEA83819C64BF4689B8AAB2636215C51FB41F135EB4A3BC0A3F
SHA-512:	BC6AF100DD8981AC4FD2401CCC5902E4FD245F3C431327669EF6CB34C4A261415FCFC980291294F8FC9A538C3E7CE119A374D029A23A1C1FECE5452EBC9F052E
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/font-icons.css
Preview:	@font-face {..font-family: 'font-icons';..src:url('fonts/font-icons.eot');..src:url('fonts/font-icons.eot') format('embedded-opentype'),...url('fonts/font-icons.woff') format('woff'),...url('fonts/font-icons.ttf') format('truetype'),...url('fonts/font-icons.svg') format('svg');..font-weight: normal;..font-style: normal;.}..@font-face {..font-family: 'lined-icons';..src:url('fonts/lined-icons.eot');..src:url('fonts/lined-icons.eot') format('embedded-opentype'),...url('fonts/lined-icons.woff') format('woff'),...url('fonts/lined-icons.ttf') format('truetype'),...url('fonts/lined-icons.svg') format('svg');..font-weight: normal;..font-style: normal;.}..@font-face {..font-family: 'Simple-Line-Icons';..src:url('fonts/Simple-Line-Icons.eot');..src:url('fonts/Simple-Line-Icons.eot?#iefix') format('embedded-opentype'),...url('fonts/Simple-Line-Icons.woff') format('woff'),...url('fonts/Simple-Line-Icons.ttf') format('truetype'),...url('fonts/Simple-Line-Icons.svg#Simple-Line-Icons') format('svg')

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1334 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17281
Entropy (8bit):	7.857324306603345
Encrypted:	false
SSDEEP:	384:SIlrNyFpP3Yq32plr7Hafi75tLdVBJtg4FD6Rk2n:SkZyvYq2afiGkI
MD5:	7DC090DEF538D83B1C3589F2996DA03E
SHA1:	C1327CE28E52247A3E1323D0F4DD2033D116EE0C
SHA-256:	C1D748E1725B372059F3DE7C9F8D723E9AD1CB8727C447A7255B2723540CE41C
SHA-512:	908662E27618E061DAB4D21D81664B3EECA6019F34945DC7514C08A687E5EB0131B61F3A51541B9DB0685BD80BAECAC7C97FBD46ADB26BC63996D33388245C5F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...,......(......pHYs...#...#.x.?v.. .IDATx...n$W./..6.l.~qp...OP.'...d............/.E4.....M>.....s...._ ...B'..f...?...BRwU222"2..^{.Z.......9........07.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......f.O>2......yQ..=m......a..L.`.....5................`.......S........S..k....>e...b........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;....b....Eq..9W....(>...}../x.Z,..8+?...........0C{....vx.Z..Eq^...(.w}..@*.&.........h.....9.&.......`..@>..........>e...jqT..g.&...b...]PV....K......@wTl.....b./..<....e../.&.tK.....(W.>.I3...aQ.wEQ.....{.M..v.{.6.X.l.......M..v.O..`;.6...%......`...]sa!!..............SV

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	34268
Entropy (8bit):	5.046911761171461
Encrypted:	false
SSDEEP:	768:mDBPbo0760KGKcu50huVCF1WniuVC21WnuuVCY1WnMuVCp1Wnb1WncuVC8Aj45af:a60KGKcu2uVCF1WniuVC21WnuuVCY1WF
MD5:	AA68C64D8BDEF2AED2D2B351471B52B7
SHA1:	9E98B64E5FBCBC752A01FCF1EDF5E4A432DDD721
SHA-256:	B0CE672AD38818B478B69BD2F50D28145D28FA4B3C9629B93023CFCD59A8C198
SHA-512:	890D24A3EEE48892841AB0D0C5C96CE565A27AF50D38323674FB72C7C14217CC72607B2D8B11D1EB63A37E7CC659C25F034D873A5D4F64EB72160CFA331F3404
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/state.css
Preview:	@import url('animation.css');...solid-menus {.. /* main navigation /.. / trigger-hover /.. / trigger-click /.. / home menu /.. / side-menu-wide /.. / full width /.. / tab markers /.. / dropdown /.. / multi-drop /.. / social /.. / buttons /.. / image overlay animations, laptops /.. / overlay social 1 /.. / overlay-social-1-2 /.. / overlay-social-2-2 /.. / overlay-social-3 /.. / threeD, netbooks /.. / flipX /.. / flip Y /.. / flip Down /.. / slides, monitors /.. / sweep, monitors /.. / zoom states /.. / overlay-blocks /.. / overlay-blocks-swivel-right /.. / overlay-blocks-swivel-left /.. / overlay-blocks-swivel-alternate /.. / overlay-blocks-blinds-top /.. / overlay-blocks-blinds-bottom /.. / overlay-blocks-blinds-450 /.. / overlay-blocks-flaps-top /.. / overlay-blocks-flaps-bottom /.. / overlay-blocks-flaps-twist /.. / overlay-software-1 /.. / overlay-software-1 /.. / overlay-softw

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 32984, version 1.0
Category:	downloaded
Size (bytes):	32984
Entropy (8bit):	7.990226086147573
Encrypted:	true
SSDEEP:	768:xT3H1rCnom10LEYzNpoDz2N10ppiWa6exTaMdkiI+HIG:xbMomgBzQz2gOH6exT1UG
MD5:	A8398A7C113D56340ABE1634AC5DD8CA
SHA1:	62765E5F9A4217244A8A72247BEC53CCF773D06A
SHA-256:	13011155900E1367055C7857B78438B6E57CB5162D947C530FD0CE2FFE868FD3
SHA-512:	62EAFA5276F00DD0EF71DB6E3244240C2DC51F7FF6ACF715D3808A63DB7C0074F4DEF2750200090ECD0392C9ECF455D1360EFA588B871E40B5DFA2C3C21ADF90
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/f02478/00000000000000007735a6f1/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3
Preview:	wOF2OTTO...............}...........................S?DYNA..?GDYN}..n..b.`..,.6.$..\...... .%...8....... ......^..MU...~..?.....?B.....8Iw...)G..._........i...2.Yw@.u.e....H..m....&M..#.G7{...8..N..}^.yAz....R...6.$........E.I...Hu...R..t`E..;.V.=..F........-Krk..8...-...U.r..?.N.O..uy..oK'..........hR...`..q...}..%C..f..\-y.#..&..2......s.Kuy7.X.$..N.N.\|b..z)VK.I.s...f^.'......v..!+`j...BK.T...b`....VQ.E.{...k(t..fD.8..=.`....(..>..fT...n..<...y.#.C,.5..P\...;U.sE.b..&..oN.PNh......].I...k.0S~B.]...i...5JO\|F..'J.*. .{e...L:.uOw{2H.W.....!z...Vw..I.Q2..."BH.....G..!..I.1B.....~.R..B..1.}0..~..Q...`\.u....u...5...^-G.+...S.d.?.W5....]....9..\.h.w&s.d.....mh.......b._....V...;i..SY....v..\| . 3d......i.U{..!.{..W.l...G..W.X.Z.Ny.....)V,_..m..,X......w.)Q.x).c....cj9#...l.Z.hg......#.h...+C0w..3.t..I5j`........\"....i.r.sO.......-.......$.g..C.B..%.g"k"..-f..j..w.[.~~....e._...E..Mt...".B\|...l..Y...]...v.]..e....#...Q....~..2E.YX..+...Y....yK...R.T

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 188 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1322
Entropy (8bit):	7.777591308772541
Encrypted:	false
SSDEEP:	24:RVb8ZgK/XtD1L6rhJR3jV/AexTFhN4SddqPHtPDBDTSRxMbPGo9:RtxotpOr/5Vo4T3N4SdoPRDBHUMbPz9
MD5:	6AFFEFEF426B7088DF45A8F39ED8EDD3
SHA1:	BC7D58B9C31EA7A0A96B001397FC823BC16F7555
SHA-256:	4ECA152594FD7980EE10E3D3493F7C916802640F52A548B97636266AFC8703E2
SHA-512:	348CD81A46F2C360F43AFD82B149121B99BDDC7BEF3DFEB144C4711F4F2FA627D026CFFAD921872BE61F7A9917F40C75D3380E714ED75A261D751CAE2D0F081C
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/nav3.png
Preview:	.PNG........IHDR..............Z......sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.=s.@.......\|..&C...]2.r...6.S..].t4NG.h.E.....d.&.al.....f...=.gERdKIp\|.D.t..[.......j4VQ.Q\,....r.,.P8.w,......3x.B...W.5x..n.?x].i.y..E.....%..:.....![....SS....9..Z.g.....I.>..?Ux..-..>...d.\...![...T.....La.7.Z.t.z.\8&...9).R./.=i.....a...L..,@...`A.qZ..k..e..(wLRT.+\|...T..z8u....`..V..Hyp....3..m...^h..u.....x./.r...K..D.....\|..e...c.I..}S...]..F._h..w.et.......ho..}..=!7..}l......... }.3K.8O..P..p...i...%.Fz....x..CR...1.?....cy0\e.....'..G.Bc..........:....o.N.R..n.......&.6..a.d`...!..$E.}.+..vk...m.Xa..<,...u..6..8y..Y5FY7....9...8........Z.9S.w.....C...)..(..j....I..!..v..I.zz,N.I...i..^...z.x...MZ...0.i...8.v.=1f..2X....2...(._.P.!UaHk....=..Z.%o........$....#..>{...-..L....3..`.`z.....D.A.g.RN.q..$.K.Hx.r/....E.z..\...D..t.....8...u.H.}h.c.z_ .....[....M.0BF.c....(Z.&....E.....VaYe.......ao..U/.Q.d..~X.zP.u`.....q..F"..#./.{.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	289812
Entropy (8bit):	5.066504901639094
Encrypted:	false
SSDEEP:	6144:WJshNVlG+TC1lFhTzeKpTcYmD2zK8U1Js3Px+WK+N7TFyygRWL/Ia5geNTIPfgy1:4jTcYmD4I4Px+WK+N7TFyjITiPflAqqi
MD5:	7E26506326A182C4175E54ACDA7EF15E
SHA1:	01EE1A965E756292430031C46F258D6E2D3A961D
SHA-256:	DF3941E6CDAEC28533AD72B7053EC05F7172BE88ECADA345C42736BC2FFBA4D2
SHA-512:	097EEC0CEA7B51302AFA2D4560895FF54A36EF1E28B3E9067A84FBAE0C2F63EE1D9A3A95D08B84FC1979855B239D03D08933A1017D4EDABDA3E5B8EC141BEFFC
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.js
Preview:	/!. jQuery JavaScript Library v3.6.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2022-08-26T17:52Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket trac-14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....retur

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 97 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	721
Entropy (8bit):	7.544911572016387
Encrypted:	false
SSDEEP:	12:6v/7Pt/kFwYSGJ/sHPi2gTa6tJY3lwKOyO2bnju25kV3Y75LvzKm2fxm1+Tc:wGqHa2gOyclEyO2bjnki75LvGPfxW
MD5:	632421D6703469743380A93FF16D4F21
SHA1:	485D7C1DF0F530CFC776EA926E3C58D8D429108B
SHA-256:	85C089FBC72B373EA2516F69CFEF78CECA0135FB99D2B7378EA5988B57AA10F9
SHA-512:	6B46F2E777FFA59C9D1A0FF4D3E50231147993307374ACE34772C929DE8FC4813447CDD3CA7A498446F13DFFA709DD7C508B548270F4E28017CDAE69E8477C01
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...a.........V..t....sRGB.........gAMA......a.....pHYs..........(J....fIDAThC...A..{...Q.>r'(.Ta.I!6...]..I. ..9, 0$.....u...$......e...ev.._.dv>w....l.y..B<....52...O....NH......".g..8...!}m1.{.Z...;a.X......oD..D...i....}..\|.."}u.k....?)..[B<p..'WD?.4..j.>o....9..9...........R..+[+..?.u..L..U#O...Q..*.....@~..W.Dz..QT...w..q..5=........3.?.Y=."@vDy..A......!....F&.5_,.a<.J..9.#.X..\|...&.5.u...w...+]..S...?....>...g._.o.......~...b.C.1.s._..cu.....a..s.....'..8S#w.~.A...N...2.h\....>.sQ.3....Z?_#.%..4s....S......d{p....).......O.........(..lt..a%'.L...K0HO%...C.....`w...zL2...8._.Y.c3.u.m..Ev...H.5.0'.L!...@f......NH....NH.......l.fQ.n.....IEND.B`.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	360
Entropy (8bit):	4.639454557751752
Encrypted:	false
SSDEEP:	3:MwfFLUIvSZMAT1KfFLUIvSoCj6CqO1KfFLUIvS+RpPsRp5MHofcKfFLUIvS+RpNF:CZMAX7puRw0o+u9xTo2bh/HL+jC
MD5:	B841C3BC3B85B9FC3FC08810C0D10790
SHA1:	C65D750A198BE50FFC88F50406D2B4399F08CD40
SHA-256:	15EB46BB76742FBF943429918A666B6C45AB6DEC3BB34C78115C30CABCB4B534
SHA-512:	5E9E59F812419BA58F1D67D9D34AF8B3759380769C2451561DD1E1CE6A1731AD44DD4342D4CD5D383A7E967A0E98FAF6381F44ADB973EC6F8BB514D6CE7EE43B
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/theme.css
Preview:	.solid-menus .theme-margin-top {. margin-top: 1em;.}..solid-menus .theme-margin-right {. margin-right: 1em;.}..solid-menus .theme-margin-bottom {. margin-bottom: 1em !important;.}..solid-menus .theme-margin-bottom-2x {. margin-bottom: 2em !important;.}..solid-menus .theme-header-background {. background: #1F1E1E;. color: white;. border-radius: 5px;.}.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	91625
Entropy (8bit):	5.924031002638035
Encrypted:	false
SSDEEP:	1536:796P/+PAbEzKWnWiJQHSU6NZtF6wItF3OeTSx8u6xZuPUEJ13jxSzbvQWyG596tI:79WFr5ywApY
MD5:	5E7DE27995936EC339BD1781A6833A98
SHA1:	9DCD592D3F3B35E4FC77824CC638AA19374312D6
SHA-256:	2552D8D62D9C60F59B3B11A5D083D1EBD090C72DE809FC7C76FB339825302241
SHA-512:	79357D3364CBA534C42470ABBFEDA79BFC42EFA044D141432612CA3B27BB2520EBE1E72929057DA36809FAD37EA5F8FBC330B70DE40AECBEEDB3A103E117EF6E
Malicious:	false
Reputation:	low
URL:	https://s.swiftypecdn.com/assets/new_embed-2552d8d62d9c60f59b3b11a5d083d1ebd090c72de809fc7c76fb339825302241.css
Preview:	.irs{position:relative;display:block;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.irs-line{position:relative;display:block;overflow:hidden;outline:none !important}.irs-line-left,.irs-line-mid,.irs-line-right{position:absolute;display:block;top:0}.irs-line-left{left:0;width:11%}.irs-line-mid{left:9%;width:82%}.irs-line-right{right:0;width:11%}.irs-bar{position:absolute;display:block;left:0;width:0}.irs-bar-edge{position:absolute;display:block;top:0;left:0}.irs-shadow{position:absolute;display:none;left:0;width:0}.irs-slider{position:absolute;display:block;cursor:default;z-index:1}.irs-slider.type_last{z-index:2}.irs-min{position:absolute;display:block;left:0;cursor:default}.irs-max{position:absolute;display:block;right:0;cursor:default}.irs-from,.irs-to,.irs-single{position:absolute;display:block;top:0;left:0;cursor:default;white-space:nowrap}.irs-grid{position:absolute;display:none;bottom:0;left:0;width:100%;height:20px}.irs-with-grid .irs-grid{

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	13103
Entropy (8bit):	7.917909926515831
Encrypted:	false
SSDEEP:	384:tLg47ctgZ1UG9Md7uGPfsoDALkin3aDUd5/ts:1g47kI7GlnBWaDcVK
MD5:	39A488ED78AC04BEC54E365CAB6C6A3E
SHA1:	59B31538A19F61E13DE90720BD7DC0002B23A6FE
SHA-256:	7D9F108C89E7AD26D254734E79CA0587DA5D750816B24BE9BB5822748EAA9E4C
SHA-512:	CEFD90E23946559C569D57903F37EDE6F157AC92D67B35D95B30DFEA2F6EEE05FC73BEA18BAF263ADC19D313B270573DE2E7D113D1AED442D9F2CE1997C8D776
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/License-Permit-Search.png
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?.. .IDATx...PSw.....PM...O.)./._........D_.LW..v...K.gV;.V.?...S...3......p..K..2..5..`.H....E.?.......=..99.I.<..tb8..wN....>....%u...........w...............&< h..............`..................&< h..............`..................&< h..............`.3..B..........B.D"..H...W.....w%...=...vvy..{...........iQ."O53O%G:.........7..]..]..{x...O.PR.........1y..$7(e..&...%....]._`t2]p.4......dgH.J..\.\...A.E.b.\.}k{.45...a.)....I...........B.F..Q...E._.a..-~....X.."y9.4H.dgH+7h.J.x....;..<..B.,5.=)KM+Q........8[.{&z.."4.....7L%.&.=.t.v...E.-_`4O%?y......GN].[.<`D..-..8.RT.xo.....c.-.=..b........g[.g[.O\Y........@Q..r..b.u...8..A..R.>._O.&.FA."7....T..XT.0...9X..7].....4.....S.3..6/.$.Z.{..-..ob.%.6A.....F..k.m.T9.R.6..o4i.`..&.O?.z.>.......6...zkY>).............)K.N.=GN]i....T..~l...a..O..V-U%'=-.H~.X...;..'...]...5..y9.L..d*Q.._}s..q........bAv....+..G.A".tvy.z..f...RT......z....._3..C.H$...

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 134 x 70
Category:	dropped
Size (bytes):	3925
Entropy (8bit):	7.801127935048643
Encrypted:	false
SSDEEP:	96:cPZIOG0GlAC3L6NsZKS7d60aJTBEeBwzAhqO2jgfJE:ECZ0UA2LWS7d1aJTWeByAAHjV
MD5:	0AA4E7A537CA8F5A92BCB9B8A1978CD1
SHA1:	57095D530C4D0D719ADB044530F06C863B0AC992
SHA-256:	8C572CE80DE3EF66CB01EFCF14F262F45EF78A8DE0CB953BF9358B07A68151CD
SHA-512:	0A0853BD4C694041E7ED150A5E75413A28DE6382ACE7F3892DD0D953ED46C5973F8733583C809EC34CC20EE9EFB41280B7E262338C895645D7CAF1CD1826F754
Malicious:	false
Reputation:	low
Preview:	GIF89a..F...................................................................................................................................................................................................................................................................................\|........x..y..y..\|.....r..x..q..u..q..t..s..x..o..y..p..p..h..k..j..y.{`.~f.v].\|d..{.u[.~l.qW.\|i.u`.xf.mX.aJ.bL.dN.hR.gQ.jW.kX.[E.eQ.ZE.]H.WE.\K._N.cT.Q>.VF.N>.H8.H9.O@.SF.@2.VL.A4.D9._X.0%.1%.5+..&.:2.LF.LF.!..#..!..&.... .....)&.&'.............&)..#..$..&..'..(..(....+...../..0..4~.4}.7\|.=z...................................................................................................................................................................................!.......,......F........H......\....#.4....s.3j..#..vH."E.R...S.\.q..^.n....&q,s..I..0Y.....KS1.H.n..J.P.Ck.PJ..!...z.T...`....K+T.1..]..IY.Aki....].1..]..H..U....,09..+^.B.[N....a.....D.....C.,..Ye.S..K..fM.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	286578
Entropy (8bit):	5.559418759964728
Encrypted:	false
SSDEEP:	3072:/K4ag7sgWEoH8y9IZEJoez8j2xYD3CmRuYZ+czM8nQVN1tMjtzGw3e4UswovKUQ3:y4xUHd9kTvGmv+czM8Qj1jwO4Usu
MD5:	77D3D8BB0592AA18D74A7B80F5CBFDF9
SHA1:	BE4B1C1D6A15A2B472232D50E800314E763C936A
SHA-256:	9A0B3DA07F0826475451AF6F413BFD5A2CBE01B055401F204C06B323985FF6ED
SHA-512:	CAED16C6A1C4A243835AD1F04F537D34CA665F3FF71D42EBA0A09B4D5439BB444C3E9383F5958B82436368D3815C34E2910C78947245A81DD2AAE1CF72C46DC4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-C0MRJNQTD1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 121 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1002
Entropy (8bit):	7.746844131704571
Encrypted:	false
SSDEEP:	24:P35RcI5Bt27gQgNxnpGhHZkdQ3mZyEquaJ4YuZo8Mtb:P37z5HLVg6dY1lj4pdA
MD5:	A5C90E9456FDECD4CC6BF75931D1B561
SHA1:	8B5336281A1DEAF796754BBB56FCC7AEAAB8254A
SHA-256:	7F9B32DDB3FA486918A07A3AF7CDB7416C72E7ABBE57DD034C5ED158843F2376
SHA-512:	3F2B165DCED1B769758817D322F86CD8B09E447DF888DA25205A90036B2C32265FB7E422ACA5D84F249C6E567CD58E23D77F493EF37F90253D3F4DC5AD98ABC8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...y.........b.Ah....sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.r.@...5<......h...K........i.R..v.....4.+.a...../.<.c....d-{%.&.L,}.Y{.=.s.U.f..... ..]..h.(.\.J#..........".8.u.r.m>..x...o...zw.)..N.d72.y.D.v&...TpuQ.m.i.m..M........mu..d6...".D.?.LU..P......^{.N9..6.=..\|..o....y.{\6.x'....Jv.He$....9B.y..y..a..EzL..xjK..4k....\......M.it..3.?..l...+.:.]P.9)s..4..Dr..t.A....Q.g..j...F.'......3..0~..[..].]...6..,R..._..g.Xc.c.YdB...J..g.d..g..'.U=..7..m.....8D..u<.C}.1.........k. =..^ ..i..C..t_U.....4.e.~\.....,.....w........t..3r.;.....o..O~.,8...Q.S........Dp....V^....(.l.\U...S...w]pqkX...126.?.".y..?.,...u[.1..67.s.....:f?A..@../..]h..c.i1.bp...\|1.6........yX.g.h...!2.+,~R.6..e...q........=R.>..#......8.}x.p.@....y.....w..!'..5..K.%..#.`..,.x.g.&Z...B....)ssOf.....(.@3.. .......q_..#m`bN>.r....'..Wsa.8.P.shq:..f..F..1.k..L..... ..9f.G.#.g.J~..}..f.f...K.q>Td...%W...k.\MJ#......4r.(..........n.....IEND.B

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 7 x 10
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.627716378073663
Encrypted:	false
SSDEEP:	3:CJeRTQgj+RklTET5:YwQgj+RuTEV
MD5:	B11EB0CC948502783F73FD1D12ACE7EF
SHA1:	35D779C71833B1AF20AFD118EBFA5EBE82DF899A
SHA-256:	3D6F66792FC656ABF4D56E2527D5C39EB1C0C2DB9EEB624B4BBB825337197BD2
SHA-512:	04CD59289033F55B0CC0F7E0D3AE46E41EE86284552E7950D136FC811C3C389B9D37CE71AC77A50C8F04D1A9B8BD4C931160B5EEE10F5F26862BCAF9E4E1D45A
Malicious:	false
Reputation:	low
Preview:	GIF89a..........=z.......!.......,..................drVx#....;

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	70117
Entropy (8bit):	4.765155219121754
Encrypted:	false
SSDEEP:	768:8bUii2ukQHIsKQCsB/m6tsTO3DNnYiRh6040borc8+wHY:8gii2+IOCsBmUsa3DNnYibe0cZV4
MD5:	4CD5B86BABA794F3E4F6E54B501F0B6E
SHA1:	6F6A097E312259A142F4CEF43E0C52D6224823F0
SHA-256:	A62A847FB029EC2329B3C92B0D0B1239366017E314FF430FC8F5B67A78F9238D
SHA-512:	E539DB475A26C4CDB3543C206DDFFAC2EF32C6F02FD7F1BA50BBCCECEFC9F1E217DAA3A87459D13742A1B6D81D45D5CF711F072A609B18729F75397B56E7686B
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/font-awesome-5.10.2/css/all.css
Preview:	/!. Font Awesome Free 5.10.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,..fas,..far,..fal,..fad,..fab {. -moz-osx-font-smoothing: grayscale;. -webkit-font-smoothing: antialiased;. display: inline-block;. font-style: normal;. font-variant: normal;. text-rendering: auto;. line-height: 1; }...fa-lg {. font-size: 1.33333em;. line-height: 0.75em;. vertical-align: -.0667em; }...fa-xs {. font-size: .75em; }...fa-sm {. font-size: .875em; }...fa-1x {. font-size: 1em; }...fa-2x {. font-size: 2em; }...fa-3x {. font-size: 3em; }...fa-4x {. font-size: 4em; }...fa-5x {. font-size: 5em; }...fa-6x {. font-size: 6em; }...fa-7x {. font-size: 7em; }...fa-8x {. font-size: 8em; }...fa-9x {. font-size: 9em; }...fa-10x {. font-size: 10em; }...fa-fw {. text-align: center;. width: 1.25em; }...fa-ul {. list-style-type: none;. margin-left: 2.5em;. padding-left: 0; }. .

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 75408, version 330.15859
Category:	downloaded
Size (bytes):	75408
Entropy (8bit):	7.997143546582975
Encrypted:	true
SSDEEP:	1536:T2tGzfR+ZLtE6zaM3tSmcpoN9xiGX66h3qbLLPcmcRcjA+1:ytGfR+ZLXdwSL3Xj3EbVd08
MD5:	D6D8D5DA9214DC7D46B297672A602D55
SHA1:	9991033CE701C9A3D092BA2263A6A89C4D7E21DA
SHA-256:	80FE90CB559538158BC235F4E539D9BCAE203E19FAB7C6970AAD37B0154348FF
SHA-512:	6C2F42D8547EEEE5D8F95B653E1B3DDE318B1D280A7226D9B6DA326B5DE2ECAC2F7C55D2A45DC5C4CE88ABA308E9A872A5EF3666CC0028A56A8B81B473EEE7E1
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/font-awesome-5.10.2/webfonts/fa-solid-900.woff2
Preview:	wOF2......&........X..&4.J=.....................?FFTM....`..r........c.6.$..\|..... ..+..4[KR....#TTt....,.4....J...N...n...\.f....oJ.2..c..="` .Tjj..PHbO...M....\J.c,.[.A.4..T.(G....!%..........qJ3....Y-f.............$..4........#.S>.0.O4.{3.A......\.X..'....L.W\|...k_..=...Ab...BH".S.)..Z...KX.m...]..7Uzi........2..a..Sd...b.vV..eD{)M)j....{......[o.:k....<...tq...u..D...........O..&.h......R(..!T....S..5.......pj.+...\ \...].T.....v..Q....k.74..0<?....e.......Z.WDm.F..!.......P...(..,..@.N<=.1....0.........6f._.....@.Dv..zobMvG..J.5...6L[ ........._......LV.P.6K-......".....N..)5.?3...e$..gT.6........#7Bo..g.>..a.....`>V.=L..@..o..>..1`.90.b..37h..... $...B...wa....l..?..A....4...^4.......pU....,..6.........m.~4Y8.I.z\|".....rU..1.O.N.(...J..........yn....P.....Ro...=3...C......l.v.+...^._j .\.9H.F...o3.<..v...~X...ByT4V+..K.8.p?...[..(0$l..<....P......p....k.zj.!......h..K....j.W.......l.u.)&...(..3@X.d.~.....`...P..,y.....$[

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	44
Entropy (8bit):	3.315789272504005
Encrypted:	false
SSDEEP:	3:CU7llexltxlBc6:1lluc6
MD5:	6D69C4DE0545F6FC9BA3DCD899E29501
SHA1:	201A59B8ED906C84C99E9BE323D3C5DD0A0AD0D4
SHA-256:	7F86128FC63CBAB878D570AE894EF2B7FA8694A35367E99EF351545C26335930
SHA-512:	640C029AD0D3CDC51ECA67C4867514A4BC400AF8D229821935F2FE988596E6339A4A6D63FE4C3A01F953BF7A460D0EA4F6170B535BD7AA96F739EBF765CA1733
Malicious:	false
Reputation:	low
Preview:	GIF89a........3....!.......,........@...Q.;.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9307
Entropy (8bit):	5.091292332240942
Encrypted:	false
SSDEEP:	96:qJ9j/ccnwNgRPRfWQA/subqSDIROYmLRYIRBwROBkjG1jENduxChCSP8ePnVk3PR:u0AwhaU+Gy/+XiEN
MD5:	80DADD402B8FCBB20A8800928513B13C
SHA1:	7BFC652F13BC8330C4B8EA02E85F96FE02C09814
SHA-256:	3BDCBBA647E830BD9771E4EF053D433CEB212BCAA889BB3CA99F2F6DF1787131
SHA-512:	29BD4A69A19FA7FA8E2E7B19F8D2ED55C12AEEC97DF0055AC4E2D1BB735C065D4CD5FC9F89F42D4D4F0B8259034FFB8DBC9696747F35D09ED77B06ABD3411802
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glstyles/appstylesheet.css
Preview:	/* GLOBAL APPLICATION STYLES /..../ COLOR PALLETTE: ...Dark Red:#990000...Dark Blue: #00264D...Silver: #F5F5F5../..../ ================================================================= /../ Application Utility Section.......... /../ Optional - goes in the upper right corner of the content block.. /../ Used as a place for utility links such as contact, logout, etc.. /../ ================================================================= */..#appUtil td..{...padding-top:..5px;...padding-right:..10px;...text-align:...right;...color:....#777777;...letter-spacing:..-1.5;...font-variant:..small-caps;...font-size:...1em;...font-weight:..bold;..}....#appUtil a:link {...color:....#777777;...letter-spacing:..-1.5;...font-variant:..small-caps;...font-size:...1em;...font-weight:..bold;...text-decoration:.none;..}....#app_util a:hover {...color:....#AAAAAA;...letter-spacing:..-1.5;...font-variant:..small-caps;...font-size:...1em;...font-weight:..bold;...text-decoration:.none;..}....#app_

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://cc.swiftype.com/cc.js?engine_key=XFBwKZR-z-7xV9bsZPzb&url=https%3A%2F%2Fwww.marylandtaxes.gov%2FMDTaxConnect%2Findex.php
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.898299152238227
Encrypted:	false
SSDEEP:	3:Hn8ohk/p0HPltTbb+Pj5noSrciYn:H8ohkh0vXbbkj5nPfYn
MD5:	FA95DD12E08D521A4516742361E612A7
SHA1:	9AFA03D2FC37014E55192D0E0FADDFC889E53EF2
SHA-256:	384B06A541D6994C721341062AB951684B2504408FEABD1FA04D89B179FD1F73
SHA-512:	09E0F010428E8BFB6355E3AF8F9F3BBF6E8A6A91F6B9568C7681D783420596129CFFEC878DA82F6FE3AE23DE4C63369F4F4787C5081F0C43CBEF7AD94D4CB719
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmcClDbSZGpYxIFDb2Fgw8SFwnhGbSpt_hnuBIFDW5pnT4SBQ3OQUx6EhcJiCD46MDxoXoSBQ1EX1h6EgUN2MRS8g==?alt=proto
Preview:	CgkKBw29hYMPGgAKGgoLDW5pnT4aBAhWGAIKCw3OQUx6GgQISxgCChIKBw1EX1h6GgAKBw3YxFLyGgA=

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1643), with CRLF line terminators
Category:	downloaded
Size (bytes):	303702
Entropy (8bit):	4.824692713502251
Encrypted:	false
SSDEEP:	6144:q1v8Y/G7AKoWQut02UbnWbnMhpLLlCCxU9p7Bq:q1v8Y/G0KoHuCFIMhlLlCCxU9ptq
MD5:	C771EA0CD7A99504105B14FA214D2AFE
SHA1:	B5C7D3459A41CDD69F8B48DB7A4AE071C82F0091
SHA-256:	E8D484AAD6B7BEB09B044D07DFB3AB22CE9D57CC936DB2ED57ED8C615F455C30
SHA-512:	B7448DCC798F5B22CC54CECC79D1CA601427D8A89ED0FBA44C2D5795DD294B72AD3FF978FE474657856505FA9DC3C5FEE3B983B3CFFE672D0AB24800C5786BE5
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/internationalPhone.js?modifiedDate=2023-12-21T12:52
Preview:	var h, a, b, elementId;....function phoneNumberDetail(phone, countryPhoneCode, fieldId) {...a = phone;...b = countryPhoneCode;...elementId = fieldId;..}..(function() {...var aa = "function" == typeof Object.defineProperties ? Object.defineProperty : function(a, b, c) {.....if (c.get \|\| c.set) throw new TypeError("ES3 does not support getters and setters.");.....a != Array.prototype && a != Object.prototype && (a[b] = c.value)....},....ba = "undefined" != typeof window && window === this ? this : "undefined" != typeof global ? global : this;.....function ca(a, b) {....if (b) {.....for (var c = ba, d = a.split("."), e = 0; e < d.length - 1; e++) {......var f = d[e];......f in c \|\| (c[f] = {});......c = c[f].....}.....d = d[d.length - 1];.....e = c[d];.....f = b(e);.....f != e && null != f && aa(c, d, {......configurable: !0,......writable: !0,......value: f.....})....}...}...ca("String.prototype.repeat", function(a) {....return a ? a : function(a) {.....var b;.....if (null == this) throw

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17265), with no line terminators
Category:	downloaded
Size (bytes):	17265
Entropy (8bit):	5.6124843571072995
Encrypted:	false
SSDEEP:	384:ENmDG2zKGE2+YnVQ7gKMIwu5VIc9g4a/rEJjpWn8Cw:5JzpE2EpMIV/K4WE9Gw
MD5:	5B536CDBB5025EE82FE0782ECB4568C6
SHA1:	23350D4CA27A454209C870288D91008AB5782B1B
SHA-256:	CF2BC8471CA9269F57B173FB6C5AD405DF0963FCC24AEDB26BE6E495D94C4E4F
SHA-512:	418FE0EF4557DBFD56F176270D35E94CB1161690F0592D52A944501D1A48D1867DC25AD0DECF841FE9F3D8C4538447D982F24EDD5A0018A64DF724BB18643B92
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/zyvIRxypJp9XsXP7bFrUBd8JY_zCSu2ya-bkldlMTk8.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var B=function(d){return d},X=this\|\|self,J=function(d,z){if(z=(d=X.trustedTypes,null),!d\|\|!d.createPolicy)return z;try{z=d.createPolicy("bg",{createHTML:B,createScript:B,createScriptURL:B})}catch(I){X.console&&X.console.error(I.message)}return z};(0,eval)(function(d,z){return(z=J())&&1===d.eval(z.createScript("1"))?function(I){return z.createScript(I)}:function(I){return""+I}}(X)(Array(7824Math.random()\|0).join("\n")+'(function(){var zN=function(d,z,X,I,V,a){for(V=(I=(X=(z=m((a=d[da]\|\|{},d)),a.wk=m(d),a.N=[],d.T==d?(b(d)\|0)-1:1),m(d)),0);V<X;V++)a.N.push(m(d));for(a.Je=f(d,z),a.es=f(d,I);X--;)a.N[X]=f(d,a.N[X]);return a},BO=function(d,z,X){return((X=Z[d.l](d.he),X)[d.l]=function(){return z},X).concat=function(I){z=I},X},iD=function(d,z,X){if("object"==(X=typeof d,X))if(d){if(d instanceof Array)return"array";if(d instanceof Object)return X;if("[object Window]"==(z=Object.prototype.toSt

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 7 x 10
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.627716378073663
Encrypted:	false
SSDEEP:	3:CJeRTQgj+RklTET5:YwQgj+RuTEV
MD5:	B11EB0CC948502783F73FD1D12ACE7EF
SHA1:	35D779C71833B1AF20AFD118EBFA5EBE82DF899A
SHA-256:	3D6F66792FC656ABF4D56E2527D5C39EB1C0C2DB9EEB624B4BBB825337197BD2
SHA-512:	04CD59289033F55B0CC0F7E0D3AE46E41EE86284552E7950D136FC811C3C389B9D37CE71AC77A50C8F04D1A9B8BD4C931160B5EEE10F5F26862BCAF9E4E1D45A
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Business/glMedia/bluebullet.gif
Preview:	GIF89a..........=z.......!.......,..................drVx#....;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 100, 16-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	387
Entropy (8bit):	6.778458654112956
Encrypted:	false
SSDEEP:	12:6v/7Wo1QtlsZVCDygfx6n+PnrtT1pA+nzS+byEMvH7:no14Su3fx9nZjA+nzjbyEMvb
MD5:	091EB5205D5B2E9E47C44436DF33C950
SHA1:	4CFE8D841703762AA6FCA84411813C8B4EAD4EBC
SHA-256:	9623FAA139B0F6CFB91733669EE1226800801F815752DB489F4C6E1EB29D8B2B
SHA-512:	6DA11F9EA2B2D14FBE91AB2C164CA98D6E37782C59FD9B450B9634600305F3C5352C29135019808417457B5A4517F39F55E8FB0919FD007C1DDA7A86E5A82743
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png
Preview:	.PNG........IHDR.......d........t....bKGD.......X......pHYs...H...H.F.k>....IDAT(..=j...@...t)..N...P..t...%..=C...frw.EL.v).@E..mH......P.......Z._......Q.....1......U9...u1mB.va6......._...u..:a{...h.O...U}.&..v..>2.5p......M.+.:.M.....u..1..>.V..A.../.9../^d...c...%tEXtdate:create.2013-10-20T19:55:58-07:00O?N1...%tEXtdate:modify.2013-10-20T19:55:58-07:00>b......IEND.B`.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=wA/d=0/rs=AN8SPfq5gedF4FIOWZgYyMCNZA5tU966ig/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 134 x 70
Category:	downloaded
Size (bytes):	3925
Entropy (8bit):	7.801127935048643
Encrypted:	false
SSDEEP:	96:cPZIOG0GlAC3L6NsZKS7d60aJTBEeBwzAhqO2jgfJE:ECZ0UA2LWS7d1aJTWeByAAHjV
MD5:	0AA4E7A537CA8F5A92BCB9B8A1978CD1
SHA1:	57095D530C4D0D719ADB044530F06C863B0AC992
SHA-256:	8C572CE80DE3EF66CB01EFCF14F262F45EF78A8DE0CB953BF9358B07A68151CD
SHA-512:	0A0853BD4C694041E7ED150A5E75413A28DE6382ACE7F3892DD0D953ED46C5973F8733583C809EC34CC20EE9EFB41280B7E262338C895645D7CAF1CD1826F754
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/ifileblue_Logo.gif
Preview:	GIF89a..F...................................................................................................................................................................................................................................................................................\|........x..y..y..\|.....r..x..q..u..q..t..s..x..o..y..p..p..h..k..j..y.{`.~f.v].\|d..{.u[.~l.qW.\|i.u`.xf.mX.aJ.bL.dN.hR.gQ.jW.kX.[E.eQ.ZE.]H.WE.\K._N.cT.Q>.VF.N>.H8.H9.O@.SF.@2.VL.A4.D9._X.0%.1%.5+..&.:2.LF.LF.!..#..!..&.... .....)&.&'.............&)..#..$..&..'..(..(....+...../..0..4~.4}.7\|.=z...................................................................................................................................................................................!.......,......F........H......\....#.4....s.3j..#..vH."E.R...S.\.q..^.n....&q,s..I..0Y.....KS1.H.n..J.P.Ck.PJ..!...z.T...`....K+T.1..]..IY.Aki....].1..]..H..U....,09..+^.B.[N....a.....D.....C.,..Ye.S..K..fM.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 216 x 124
Category:	downloaded
Size (bytes):	2413
Entropy (8bit):	7.756791915971488
Encrypted:	false
SSDEEP:	48:ivxs6+Nm9iYtG7lERO1Po1kY+uxnqQJIYphM9/p+I7ErcN9zM9l5ly8v:iy3m9SEwGqEpqh5nHM9jly8v
MD5:	C3C24D591485BC33037EFF0AF0C62E17
SHA1:	C8960A4FEE4397E01CAF83C53C604B1797384AAF
SHA-256:	C3A8AE56A583D9AC2FF38D88446366D3E01D02E0C73BC11473DDEC7E2754D7E0
SHA-512:	7EB237B633966D991E3A36531A0B02B3E2F9FFAF46307C70B83F3A2FB314D6882CEC0E0A0DB6652E55B9A1C723726AC6EB4ACEEAE12A2D0A88236509D7A74934
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Business/glMedia/bFile_Logo.gif
Preview:	GIF89a..\|.............. .%+.TY.cg.wz....(0.-5.07.8?.FM....~...............................................!.......,......\|....` .di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z.n...\|N.....~...................................................X.......................Q.............L...........J.........:......H.......F...... /..~..4..p..Z.,XK.DB.qB".H.I.Z....._..(S..\..J..\..P...U...2a@..>,..e...`!I\|.%..D!...90tW..B}%0...U.j..b...fUq5.A.....V.H...iq50...I...1.b....ym9...h...W..XL..I ...^f...0..Q..b....k..E..f%...el.e..o.Rq8..{J.._. .T........r.W.)hc....@.Z.m\|........\|....R.b......b....A......x..5.f......4.@.....mM.`.N.L'.p....l.8../...M_.......4..-.R^...R.p..7B0.....<p....&....e.~L.P......y).TU.C.F.=.9..3..L.2]...7.......Y..D..p........(8.......O.....S...THB.%.!f-....P.2...#...s..........:.....D)......\|."g...B.......".Y....f^...c...i.Ki.b...2-......-....P..p..jj.KptZ..PUK.?.;..0.......%....@.}...0v..j...*C..4p....)/....."\.W...b.;.....?0.....

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5116), with no line terminators
Category:	downloaded
Size (bytes):	5116
Entropy (8bit):	5.185609564511474
Encrypted:	false
SSDEEP:	96:6xHAOBPbkFxCjv5NOTOrOYLiPU1W0FmkSy3KsiC5adT1ByLYqHHZk6nvLJ/gS70I:6xHAOBPbkzMOTOrOYLi7YiLqHHJpB
MD5:	CF8590B6EB084B7BC5980ACE65AD5647
SHA1:	B8124E5915A6792D8F0E60E6237C04D2B700FB98
SHA-256:	D9D57573F24E5E5FCADE95A3E8D5BE04B8560DE08882F8D43C0A0C2E0D596345
SHA-512:	4FA109E074CCE0330496E23A7F9461611FC7D5F0C38EDC6DC0E5655A555E6C943BEFA208104F3AF0633918ECC74E8C57FA06C1BE533723CA193E426C867ACD89
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/css/rsi/RSI_Custom.css?modifiedDate=2024-02-13T12:52
Preview:	@charset "utf-8";.custom-style{font-size:10px !important;width:12% !important;min-width:12% !important;max-width:12% !important}.custom-style1{font-size:10px !important;width:20% !important;min-width:20% !important;max-width:20% !important}.custom-style2{font-size:10px !important;width:8% !important;min-width:8% !important;max-width:8% !important}.custom-style3{font-size:10px !important;width:12% !important;min-width:12% !important;max-width:12% !important}.custom-style4{font-size:10px !important;width:12% !important;min-width:12% !important;max-width:12% !important}.custom-style5{font-size:10px !important;width:15% !important;min-width:15% !important;max-width:15% !important}.custom-style6{font-size:10px !important;width:5% !important;min-width:5% !important;max-width:5% !important}.custom-style7{font-size:10px !important;width:10% !important;min-width:10% !important;max-width:10% !important}.custom-style8{font-size:10px !important;width:3% !important;min-width:3% !important;max-width

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	75154
Entropy (8bit):	4.555155476401433
Encrypted:	false
SSDEEP:	192:QxVBHukkXnGaUg8JXgH+Yj5fXPJlXeB5evPVS6b5VWBX8xaKOKbXgH+ScjhXPJly:+F7/dApl7SUh1q
MD5:	58AA124B0B704368C3FF487E92D0B4DD
SHA1:	0A56F64FB163EE448C85EA14999B166E5CCF80C8
SHA-256:	946D0E4272B50C3F0A2B63637D36BCD791736D2A26D12FFAE024E6C560571AED
SHA-512:	E7CDE5E3DB3BE67E321EF1DDE897BC2303D2D82209EFBDA4DF524609F4E76FF6C271CE27DD064E325BF055901071F4B89BE1B7CCFC30D905D1288B9D6BEC46F8
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/assests/css/animation.css
Preview:	/* CSS3 Animations /..../ fadeIn */....@-o-keyframes fadeIn {.... 0% {.... opacity: 0.2;.... }.... 40% {.... opacity: 0.4;.... }.... 60% {.... opacity: 0.6;.... }.... 80% {.... opacity: 0.8;.... }.... .. 100% {.... opacity: 1;.... }....}....@keyframes fadeIn {.... 0% {.... opacity: 0.2;.... }.... 40% {.... opacity: 0.4;.... }.... 60% {.... opacity: 0.6;.... }.... 80% {.... opacity: 0.8;.... }.... .. 100% {.... opacity: 1;.... }....}....@-webkit-keyframes fadeIn {.... 0% {.... opacity: 0.2;.... }.... 40% {.... opacity: 0.4;.... }.... 60% {.... opacity: 0.6;.... }.... 80% {.... opacity: 0.8;.... }.... .. 100% {.... opacity: 1;.... }....}....@-moz-keyframes fadeIn {.... 0% {.... opacity: 0.2;.... }.... 40% {.... opacity: 0.4;.... }.... 60% {.... opacity: 0.6;.... }.... 80% {.... op

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1334 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17281
Entropy (8bit):	7.857324306603345
Encrypted:	false
SSDEEP:	384:SIlrNyFpP3Yq32plr7Hafi75tLdVBJtg4FD6Rk2n:SkZyvYq2afiGkI
MD5:	7DC090DEF538D83B1C3589F2996DA03E
SHA1:	C1327CE28E52247A3E1323D0F4DD2033D116EE0C
SHA-256:	C1D748E1725B372059F3DE7C9F8D723E9AD1CB8727C447A7255B2723540CE41C
SHA-512:	908662E27618E061DAB4D21D81664B3EECA6019F34945DC7514C08A687E5EB0131B61F3A51541B9DB0685BD80BAECAC7C97FBD46ADB26BC63996D33388245C5F
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/MyMDTaxesLogo.png
Preview:	.PNG........IHDR...6...,......(......pHYs...#...#.x.?v.. .IDATx...n$W./..6.l.~qp...OP.'...d............/.E4.....M>.....s...._ ...B'..f...?...BRwU222"2..^{.Z.......9........07.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......f.O>2......yQ..=m......a..L.`.....5................`.......S........S..k....>e...b........&....0;.M....`v.........6.......l......#......fG.......`........&....0;.M....`v.........6.......l......#......fG.......`........&....0;....b....Eq..9W....(>...}../x.Z,..8+?...........0C{....vx.Z..Eq^...(.w}..@*.&.........h.....9.&.......`..@>..........>e...jqT..g.&...b...]PV....K......@wTl.....b./..<....e../.&.tK.....(W.>.I3...aQ.wEQ.....{.M..v.{.6.X.l.......M..v.O..`;.6...%......`...]sa!!..............SV

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 121 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1101
Entropy (8bit):	7.7030117114510706
Encrypted:	false
SSDEEP:	12:6v/7H+e/kFrWvY+pV7bWc4EkKb3eQjAojNjbVmf+eGO3H5WzP6vfX1sp9QDG3GJI:9WvDZ74EkO3LPNS5QylsMC3bPyXUYFnQ
MD5:	72629A38FFF71366690370E7A583C544
SHA1:	ED4806026C21F35F6F691F7A709987CF23B0F691
SHA-256:	30EC21253CBC4BDB2472C13323AB2E659BA43AFCB65D7582CB83B13B9756EB3D
SHA-512:	5C2879C6AF423801C37D8A37E5A96DB6E86275EDAB5D8BC96EE3F5C84557750EED2C77FA7D6A135B6CCB75993AD3D80519B3632AFF4A37774508965F27D23811
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/nav4.png
Preview:	.PNG........IHDR...y.........b.Ah....sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.r.A.......0.pl....4).6](Ic... .....i..%4..dl85....N........8.3&.o8.n.v......B.<....r.=.\..........k@..5 ..o.3...15.-v..\|.......m.>...K..}....%._...W..V.ucZ....n.3...i..{...3..C..z.Y..?..H6.0.......8...Y.o.....iwdsW.l^%e..Wr>~".$...c.y......Sp../]c$}f.Q.._e......~\z..5I.G..........w\|.'.a.(\|.Y.O.....z9`%.h.=...+_H4...._..O...jL...LJ.?dP~ .P.N.W.pyeH@.7.0..."..dH.aZQ.....3N..B?'o.>...mw.....9N..:m....i}.x...:u.z.u.....r.>.pq..%....J..\|...!..J;.k..H..N&.$C.%.u..ETkE...gK.3z.N.....qb....:R.....W1....(...6k.#..@..E.n<0f.2.I3!..(....6..^....-..... k.....%g.PP..x.4${CV.&....4. [.LR.I...}&9..$.F.-..j...<..Vp....7...s..)F.&.\|r........7..(.9..L..7z)"}yuQ....%.j2...V.....V.#..$z.L..O..sX..&..:2~..b.a~.8x.......&.C..*..]:s(..{..Icz.c..k..$r....6(.lL.z....x.T..$.Qm.=9.o.O.-......-2..dVp.....I.j ..0d.?d.....L..Dc.g.).&..dRm.....p7I...CK

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7697
Entropy (8bit):	4.84816543632196
Encrypted:	false
SSDEEP:	96:5vihkQdujmlrDXJwaNX3UaVqxy+bBFPCUujrG3SWMm/GzBFrFXFU:IhhduSRD+aNX3Uaj+tF6Uu23Sp4
MD5:	D7731FFD1093BD0104F1903C149531E4
SHA1:	AAFD9F63FE4E0BCA9B50FD33CE4E80010C990384
SHA-256:	F5B68F88B08B9BCAEE62B7D8201A3EE56F68074683328C20D84E40E4C94D45AA
SHA-512:	8E9FAB410861E15AA64E885A29EFA75071D381C9DC455B0D3DF74C900184494F11094FFF8C4BD597B3C288C25E745F270F431DAAD238D7D39DC4A8CD9EC7066E
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glStyles/appcss.css
Preview:	/* A.subitem classes can be used to display the visited link as / / different ..color. / / ------------------------------------------------------------ / ..A.subitem:visited, A.subitem:link, A.subitem:hover { font-family : Arial; ..font-weight : bold; font-style : normal; / text-decoration : none; / } ..A.subitem:visited { color : #669999; } A.subitem:link { color : #003399; } ..A.subitem:hover { color : #cc0000; } / td.aRight & td.aCenter should match ..the default td tag with / / the exception of alignment. / / ..------------------------------------------------------------ / td.aRight, ..td.aCenter { font-size: 9.5pt; font-family: arial; color: black; } td.aRight { ..text-align: right; } td.aCenter{ text-align: center; } / the ..table.appDataEntry class is used to create a table for / / the purposes of ..data entry. Presently this style does not / / have any special design but ..should be used in case we decide / / to do something special with data entry ..tab

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (733)
Category:	downloaded
Size (bytes):	499483
Entropy (8bit):	5.689959239730183
Encrypted:	false
SSDEEP:	6144:NvawYKfp4y5Wivn2HgBwIwhl998Ep6rihru6tbOq8hSlmYNuxF:tawL4y5lGn/8Ep4/UOLhobc
MD5:	C37774BE5504A3A7DEF09EFF73263BC3
SHA1:	C5160A2908B3FD4230ED5CF521728FABAF3B5C06
SHA-256:	4FD66999FB60AD3289DFAEE132FF52C0B1ECBA71661E4CBFE47D09AC4F1CD5A1
SHA-512:	0B6BD8B8BA94B177597517B641FADE09F843F22C3F02D9B1BA6440A19ACACAA598AECA3C2315D106D560E78837E1E9FA74111856D52F40CA9A7865D4F4EEC9C3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js
Preview:	(function(){/.. SPDX-License-Identifier: Apache-2.0././.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT./.var l=function(){return[function(N,C,H,p,U,E,y,z,c,h){if((N\|(c=["call",36,14],56))==N)Z[c[0]](this,C);if(3==(((N&((N&c[2])==N&&(p?(E=l[29](77,p,H),null===E\|\|void 0===E?U=C:U=new pU(E,ES),h=U):h=C),73))==N&&(p=A[4](24,C,yp,H),U=void 0,U=void 0===U?0:U,h=A[c[1]](12,C,f[4](19,v[20](33,H,p)),U)),4==(N>>2&15))&&(h=H.replace(/<\//g,C).replace(/\]\]>/g,"]]\\>")),(N^32)&15))if(E=A[4](7),U=void 0===p?0:p,H){for(z=C;z<H.length;z++)y=E[c[0]](H,z),U=(U<<5)-U+y,U&=U;h=U}else h=U;return h},function(N,C,H,p,U,E,.y,z,c,h,K,e,u){if(!((N^34)>>((17<=(N<<((N\|72)==(e=["Tc",'" style="display:none" tabindex="0">',29],N)&&(U=W[e[2]](55,this),C=f[4](25,this),H

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1639
Entropy (8bit):	7.859432072023189
Encrypted:	false
SSDEEP:	24:nJkFza0FBATkRP6RKoN+jKoP06KhwIFZGufvEL78ExBCJRuQKPOaL+qKpm2lQdwd:qpaFwlPoN/oM6Kbzlfve3BCJRCWaDUrL
MD5:	3F252DFD5F9F6A790F1D926ED5AAEEFE
SHA1:	87EE0AD1360B58B4729C9300FA6CC8543998F9B5
SHA-256:	6E00110EE6EB53E308634B4E17345446F104739EDFC7D7F99EC2A37C8F2EFA82
SHA-512:	88B0025C96F224A3F82E9E701CCBECD4409E36524C68D1EC2A87B04EB29BA96820F6386979F8F0EB2AC571E0DF70AF5600E8730C362174E64F23396A19949F34
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/images/favicon.ico
Preview:	.PNG........IHDR... ... ............tEXtSoftware.Adobe ImageReadyq.e<....IDATx.V[lUE..=s.m.....B..h.a.1..AP.~@.(....>L.LL.$M...I....D@.R.......i..D.BQ,X.J_..gf\{...B.....sf.c........".s..rJ)...W\|..)O..........:.0...y.aLkl`#.&`..5:.W.....U....._..c......C..".ON;...y.U.4Y....Wj.......@.a.'cb...U...#..%.C>R._.z0.....Ow./.t>"X.9A........Jz.........6..............b~ti.....T.F]G.s.x..(....S.N.wo&..d...r.W...M..8...h...3.Lb...g..644..!"0..{..wv.5._.D...i.,+1..@l>.R.Kq..VUU..."..Q.z......FZ...7..W....Iq>N...S+.W........jVdI6..EL....4.../._..2....Z$!p..q>.J...QS0...<s.,..../mY&..b..3..QwW_..........@.n..'..) .g.Z..{f..S...c..Hj...6.f.........i......91.....2&.......:..1`..[O.#@S. .o.W./.}.s......]\F..@@R.E..O......g..<.%)n.c..:...W..e....a..@...={6-.!....V.o..n.%....v....{...[/.....iwh.n..F..5/....."b...=Hw...4.X.....o=....Z..<.s..86..}.~\|Yy...x=\|.....-].b..K.../...t.......ha]....I..7..6<~.~.C..;z..\|......G.;F+s....TN..hWT.F..l.U7.I.W.......

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6318
Entropy (8bit):	7.935390422687396
Encrypted:	false
SSDEEP:	192:nSDS0tKg9E05TXDrPrpbRodG9fziQTldTC:SJXE05DDrPfodGBiYC
MD5:	FC60A97D7515FA4F42A447914B2B6772
SHA1:	85A60D732C54237B1AF764AE27E93A3DF0B1B7AF
SHA-256:	02CFA68D4359ED3FCF76F23119382EBBA308919F2C611C2CB15F9B2E1C4B535D
SHA-512:	35A351A3099304E174D520CC67ED4107C7BFB18DC2F71D991F815BF343DBCB99DAEA126DF945D9E31E67193AC8355E0D4466070EB679E8730E7413DE1C647E12
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/img/timeout-icon.png
Preview:	.PNG........IHDR...<...6......g......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm_wZVoBm36cxIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 216 x 124
Category:	dropped
Size (bytes):	2413
Entropy (8bit):	7.756791915971488
Encrypted:	false
SSDEEP:	48:ivxs6+Nm9iYtG7lERO1Po1kY+uxnqQJIYphM9/p+I7ErcN9zM9l5ly8v:iy3m9SEwGqEpqh5nHM9jly8v
MD5:	C3C24D591485BC33037EFF0AF0C62E17
SHA1:	C8960A4FEE4397E01CAF83C53C604B1797384AAF
SHA-256:	C3A8AE56A583D9AC2FF38D88446366D3E01D02E0C73BC11473DDEC7E2754D7E0
SHA-512:	7EB237B633966D991E3A36531A0B02B3E2F9FFAF46307C70B83F3A2FB314D6882CEC0E0A0DB6652E55B9A1C723726AC6EB4ACEEAE12A2D0A88236509D7A74934
Malicious:	false
Reputation:	low
Preview:	GIF89a..\|.............. .%+.TY.cg.wz....(0.-5.07.8?.FM....~...............................................!.......,......\|....` .di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z.n...\|N.....~...................................................X.......................Q.............L...........J.........:......H.......F...... /..~..4..p..Z.,XK.DB.qB".H.I.Z....._..(S..\..J..\..P...U...2a@..>,..e...`!I\|.%..D!...90tW..B}%0...U.j..b...fUq5.A.....V.H...iq50...I...1.b....ym9...h...W..XL..I ...^f...0..Q..b....k..E..f%...el.e..o.Rq8..{J.._. .T........r.W.)hc....@.Z.m\|........\|....R.b......b....A......x..5.f......4.@.....mM.`.N.L'.p....l.8../...M_.......4..-.R^...R.p..7B0.....<p....&....e.~L.P......y).TU.C.F.=.9..3..L.2]...7.......Y..D..p........(8.......O.....S...THB.%.!f-....P.2...#...s..........:.....D)......\|."g...B.......".Y....f^...c...i.Ki.b...2-......-....P..p..jj.KptZ..PUK.?.;..0.......%....@.}...0v..j...*C..4p....)/....."\.W...b.;.....?0.....

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (733)
Category:	downloaded
Size (bytes):	499483
Entropy (8bit):	5.689959239730183
Encrypted:	false
SSDEEP:	6144:NvawYKfp4y5Wivn2HgBwIwhl998Ep6rihru6tbOq8hSlmYNuxF:tawL4y5lGn/8Ep4/UOLhobc
MD5:	C37774BE5504A3A7DEF09EFF73263BC3
SHA1:	C5160A2908B3FD4230ED5CF521728FABAF3B5C06
SHA-256:	4FD66999FB60AD3289DFAEE132FF52C0B1ECBA71661E4CBFE47D09AC4F1CD5A1
SHA-512:	0B6BD8B8BA94B177597517B641FADE09F843F22C3F02D9B1BA6440A19ACACAA598AECA3C2315D106D560E78837E1E9FA74111856D52F40CA9A7865D4F4EEC9C3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js
Preview:	(function(){/.. SPDX-License-Identifier: Apache-2.0././.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT./.var l=function(){return[function(N,C,H,p,U,E,y,z,c,h){if((N\|(c=["call",36,14],56))==N)Z[c[0]](this,C);if(3==(((N&((N&c[2])==N&&(p?(E=l[29](77,p,H),null===E\|\|void 0===E?U=C:U=new pU(E,ES),h=U):h=C),73))==N&&(p=A[4](24,C,yp,H),U=void 0,U=void 0===U?0:U,h=A[c[1]](12,C,f[4](19,v[20](33,H,p)),U)),4==(N>>2&15))&&(h=H.replace(/<\//g,C).replace(/\]\]>/g,"]]\\>")),(N^32)&15))if(E=A[4](7),U=void 0===p?0:p,H){for(z=C;z<H.length;z++)y=E[c[0]](H,z),U=(U<<5)-U+y,U&=U;h=U}else h=U;return h},function(N,C,H,p,U,E,.y,z,c,h,K,e,u){if(!((N^34)>>((17<=(N<<((N\|72)==(e=["Tc",'" style="display:none" tabindex="0">',29],N)&&(U=W[e[2]](55,this),C=f[4](25,this),H

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15721
Entropy (8bit):	5.294650049975058
Encrypted:	false
SSDEEP:	192:4u/CH+cDI+8w5smhQtNcOysoptcUDyszn9cOysoo/wxYC5qHLs5wcpL/GewVht:4kCewH/vJSYC5qHI5wiLzYht
MD5:	8FE4633BD08BCF0B1C2018743616B486
SHA1:	C3A8BE0BD99047309F3A9E01241985905D51F95C
SHA-256:	63114E186F8970E44DA9C33B8327EDC3642F1DF5102CC4F54A914CE699A5B4BE
SHA-512:	E6F3F437246BB46C9B471BD184565E1C5240B13CCB095E85684050BB0618334A51107CFD958C45327E80AA898914F7161C10D33F3DDAE60AABEE729AE3CFFB2E
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/js/rsiPortalDateHandlerJS.js?modifiedDate=2023-12-21T12:52
Preview:	/*.. This JS file contains functions related to date framework used by Portal applications... /..var SLASH_KEYS_ARR = [191, 111];..var DASH_KEYS_ARR = [189, 109];..var PERIOD_KEYS_ARR = [190, 110];..var SPACE_KEYS_ARR = [32];..../.. This method is polyfill for IE... * https://docs.microsoft.com/en-us/scripting/javascript/reference/startswith-method-string-javascript.. /..if (!String.prototype.startsWith) {...String.prototype.startsWith = function(search, pos) {....return this.substr(!pos \|\| pos < 0 ? 0 : +pos, search.length) === search;...};..}..../* on Page load, initialize date controls*/..$(function(){...//Initialize date picker...var dtCtrlCount = $('.dateControl').length;...if(dtCtrlCount > 0){ // Checking if there are any date controls on the page....$('.dateControl').each(function(){.....initializeDateControl($(this));....});....//Date picker Today button....$.datepicker._gotoToday = function(id) {.....$(id).datepicker('setDate', new Date()).datepicker('hide').blur();.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 97 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	7.325374192068574
Encrypted:	false
SSDEEP:	12:6v/7Pt/kFt0hJz99X22Ct2cMyhz29JsDNNene/q3aKKFgURwj5j+E:luB9X22CoVlCztlKwgG4l
MD5:	C7FDA308F337B54D4C18827123653326
SHA1:	BD4C29196712A6776B7D90DA421C744590B7A0A2
SHA-256:	0D4C32FB0B404BFB154471DAFAF604CCA7822F6668A7C0434A23455821FD3334
SHA-512:	70D3EF716A268B5A8BC15CEE37ECA12131FBAC9EE9FBBF62C16EEC1B538F2BAEF2B8CD97F4304BA1E2FD5EAA98DC5EA74414A23638E7FF4D18A8BF1073EDDF49
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Individuals/glmedia/newHeader/nav7.png
Preview:	.PNG........IHDR...a.........V..t....sRGB.........gAMA......a.....pHYs..........(J.....IDAThC.N.1..}y.......$....e........X...X.>AY..1."X`.'......N...I..U.....gB..S.d......HA0@...R...%.y....d!t......#e..R...\|K..2J.J..(..r.N.....\|."eM.S.^e..l..Q..W.j....a9[....A.3..D....>t8Z.....?.......D....=.j.....b!.n.}`.....,...6.7..a.H4...r..2.{a,.........O....P{o...l.........../ ..............Sf..sf.O....Hf....o.tK..gV5.XZ.91AcF..X...b..[4cHw...0....V6wK.%.1W..-4..j>7....:n...3..8..=x^.....$....XL...R....`..... D...F..f........IEND.B`.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (320), with CRLF line terminators
Category:	downloaded
Size (bytes):	56800
Entropy (8bit):	4.700973040918367
Encrypted:	false
SSDEEP:	384:dA9BEHn4QampTUgIzIdyRfS6TTXzz+aOrm+wazQUBdUatu5Op73A6GIWCBRkCKWB:qQYQd5Ugr8KQWA6DA6/WCBlZ+hW8w
MD5:	91B500A661503F65953AF7F7707CE5AF
SHA1:	2F3DFC6D1CC1505267827BD169EFA318DE757F3B
SHA-256:	C8B0055EA71CD91E0C244A1E9CCBCB16184982DDAAD4B1075D1BEFA6C1391187
SHA-512:	DA695EAC3AFCEAD2317CB316A7B54E3818D12A7495163B27402F3B8750719F3CCA7627FA5F96B1DE000AC65ACC800B096553993139D0F83BD2E86C7E64250488
Malicious:	false
Reputation:	low
URL:	https://www.marylandtaxes.gov/favicon.ico
Preview:	<!DOCTYPE html> ..<html class="no-js" lang="en"> InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" -->..<head>.. InstanceBeginEditable name="head" -->.. InstanceEndEditable -->.. Head BEGIN -->.... Head include BEGIN -->.... Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-NMG247C');</script>.. End Google Tag Manager -->.... Google tag (gtag.js) -->..<script async src="https://www.googletagmanager.com/gtag/js?id=G-LSF75XJL4E"></script>..<script>.. window.dataLayer = window.dataLayer \|\| [];.. function gtag(){dataLayer.push(arguments);}.. gtag('js', new Date());.... gtag('config', 'G-LSF75XJL4E');..</s

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (516)
Category:	downloaded
Size (bytes):	3351
Entropy (8bit):	5.2592679774938365
Encrypted:	false
SSDEEP:	48:35Y2zQVw5PK5swwyGW6GUtGbM4FGMtGs6GkMwGIGBGXMsVhfGuGhGGMb1m:pbzQF5Ew26M4FzWMCM0hIMg
MD5:	D7F20178EF89CB02154126D03A89D5C5
SHA1:	736A2EA83CD5411B46B28144FACCD345B4DAD3F6
SHA-256:	2A0FF8BF610EA19EF0DE3EC2DBF6F6C56D4FA0F263779DE5A4671CE16D626079
SHA-512:	E2B4CE74B62A15EBC2F3CB24397E261D8F4C6D245D3F7366B81693530D1B8C0CC25D43112A0253C44A987805C4E88E8C65BE2A6FB51402B12294BA72C388E5EC
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/kcq1izb.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . goudy-old-style:. * - http://typekit.com/eulas/00000000000000007735a6eb. * - http://typekit.com/eulas/00000000000000007735a6ed. * - http://typekit.com/eulas/00000000000000007735a6ef. * - http://typekit.com/eulas/00000000000000007735a6f1. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2023-01-20 14:59:09 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=kcq1izb&ht=tk&f=25769.25770.25771.25772&a=102056799&app=typekit&e=css");..@font-face {.font-family:"goudy-old-style";.src:url("https://use.typekit.net/af/4d44c2/00000000000000007735a6eb/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3") format("woff2"),url("https://use.typekit.net/af/4d44c2/00

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.989054234716049
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQK43xrcphyAeWaee:PLKdXNQKqAeL
MD5:	1167D6356DB396071EE04367695481DB
SHA1:	BAAC3F93333B125BDAAE6945D12501BD2331699D
SHA-256:	7D4765F9E5EF9C44C30128CF2055EA61529F0C9FDF121B4DDCA394DA954D82DF
SHA-512:	A601002BBFD89C96CDFB1B3D4CDC01586953E19E497BDE8C11B186F92052FD7373CBCA794109F64F944EE079CE99F15DA607BBE5B9A3243C5D14A97D1C1E86CA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js');

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32007), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	283094
Entropy (8bit):	5.368958613503723
Encrypted:	false
SSDEEP:	6144:yKs6WlDCyoqA7/A/Xnn5ZOlhcpQRxm42aB07pm:6P90R843
MD5:	6411371F918F2B8B014F7CE509BD5725
SHA1:	F44841C97BD0AC48A083AC0B664ED50FC539D574
SHA-256:	F02E621F7E68C25B38DA7C7DD7B183BFB86FC7ED369F3C353431860D0810D6D0
SHA-512:	499DCF820CBEE87D3C0B4D136521B713F685300E18AD4DBB20F79DB848814B4642619558EC10D7D6361C45C8A1E06ED6FFA908C898218E1B5E5CC5CD3A4F0D51
Malicious:	false
Reputation:	low
URL:	https://mdtaxconnect.gov/rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/mashup/ra:collection?themeID=ZJ_MOCCHA82M0Q700AN8112B100G1&locale=en&mime-type=text%2Fjavascript&lm=1695019440000&entry=wp_client_main__0.0%3Ahead_js&entry=wp_client_ext__0.0%3Ahead_js&entry=rsimobile__0.0%3Ahead_js
Preview:	.try{/ Licensed Materials - Property of IBM, 5724-E76 and 5724-E77, (C) Copyright IBM Corp. 2011, 2012 - All Rights reserved. /.(function(){.var w=window,i$=function(){.if(i$.qel){.return i$.qel.apply(this,arguments);.}.};.w.i$=i$;.i$.global=w;.if(typeof (console)=="undefined"){.var f=function(){.};.console={log:f,debug:f,info:f,warn:f,error:f,assert:f};.}.i$.partial=function(f){.var _1=i$.toArray(arguments).slice(1);.return function(){.var _2=_1.slice(0),_3=i$.toArray(arguments),i=0;.for(;i<_2.length;i++){.if(_2[i]===undefined){._2[i]=_3.shift();.}.}._2.push.apply(_2,_3);.return f.apply(this,_2);.};.};.i$.scope=function(s,f){.var of=f;.f=function(){.return (i$.isString(of)?s[of]:of).apply(s,arguments);.};.return i$.partial.apply(this,i$.toArray(arguments).slice(1));.};.i$.error=function(_4,_5){.console.error(_5\|\|new Error(_4));.};.i$.forEach=function(_6,f,_7){.if(_7==null){._7=0;.}.for(var i=(_7>=0)?_7:0;i<_6.length;i++){.f(_6[i],i,_6);.}.};.i$.forIn=function(o,f){.for(var i in o

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 752 x 134, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	9060
Entropy (8bit):	7.900639361602294
Encrypted:	false
SSDEEP:	192:Nbt39QBiqkOmNbr+beh3m6t7bTX0zzky7W/1MD1oTjlWB:nyBm1r+bQDt7vXTcWNMDSTh2
MD5:	EC73ECF20DD6F285189FF25BDFB9C086
SHA1:	497223A33DE109F9ED5239DF0A39BA68498231EC
SHA-256:	9E4CB9CA79BE942073F3A3F7484820F26D39AE5BDE0A244884A6CF26B44D2616
SHA-512:	1E48AB464939E667D93D1BE3AE0A91A74B7CA95D4138EB8142C3697B335A2AC78C74A4DAC3068179BAAF300E640BA3D15ABC6E23053D7D1FF34E09DEFF02201E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4 ).....pHYs..........&.?.. .IDATx...mL[Yz.p..@..........,.#VF...z..B.R.v..CIf.F.J$..i.Q6o..B&..Yih.....;...h..H.....>.,R,..E...:q(.._..U..>.;w.=........O.@.r\|}m...s.s.o}.c.....@................=.4....{.h...@........!......C@...........t..............=.4....{.h...@........!......C@...........t.........#....!jk./....^..#...h...v.....~.U.w...<....{.CN...;B.cw..fS]U.w)......=.9....8'/y.x.]...;..eg".....q4J.mk1o........zh...JJ_wk[...;..4a...JH..%.....t=..=......t4.U.u.};MuUgN....9........X"Y...CN.....XY..{i...u.EM.9..x.KE............w.P..6V..C........hVT.!....(M.......[.Q}.6!.y....}xo.....X....m-..s..d.CN...;..lL,.<y.{o...{d....Ca.tu4...B.......Z..p.u.Q.e..R[c...gvE2.i...x..lvaJZ......@.5.U..iv}....C......?..z..C......@..+.....;^mk1.bZ.........? ..5......@N.:..;^U^.Z2.(.....+]...g/.`.w4~...C.c]{..............5............rh.w..Z.m>[..`....+.......n]qMx.d6...gvU...'.4.....1.u.Xe..C....{./.y...qWG..1V.........c.......N(.........u:..]..z.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3900
Entropy (8bit):	5.121135727783125
Encrypted:	false
SSDEEP:	96:+71+vVgRy/kEQgKV6gikNyycSYH8jr77YAox7L:+71+vuRy/kEQgK/ikNy3SYH8jr77YAoZ
MD5:	D353A323D4C07938509EB6E9F8FB004B
SHA1:	CE03EFFF9B4A772BE880AEBA6C65759DDA2DAE5D
SHA-256:	4654BCF1A5A7988C03BAB16F300C331D8CF11AD38026A2BC5F569835EE31D8E0
SHA-512:	64CF91F053F6990C41B371FE76264B775D9C3441B5F833E823B23A5D840D87875CBB9732F48B535EC4CA0132EA628E4D00CA303D29D6A8A1B4E256EAC4000A38
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Business/glAppIncl/src_DollarsAndCents.js
Preview:	function ReturnDollarsVal(sVal){...var iReturn = parseInt(DeFormatDollars(sVal));...if(isNaN(iReturn)) iReturn = 0;...return iReturn;..}..function ReturnCentsVal(sVal){...var iReturn = parseInt(DeFormatCents(sVal));...if(isNaN(iReturn)) iReturn = 0;...return iReturn;..}....function TabOnLength(chkFld, tabFld, tabLen, e, OnChangeCheckOptional){...if ( (chkFld.value.length >= tabLen) && (e.keyCode >= 30) ).. { .. .if(chkFld.onchange() \|\| OnChangeCheckOptional){..... tabFld.focus();..... return true;....}....else....{.....return false;....}.. }..}....function TabOnCharacter(chkFld, tabFld, tabChar, OnChangeCheckOptional){...var i = 0;...for (i = 0; i < chkFld.value.length; i++).. { .. var c = chkFld.value.charAt(i);.. if (c == tabChar) {.....chkFld.value = chkFld.value.substring(0, chkFld.value.length - 1);.....if(chkFld.onchange() \|\| OnChangeCheckOptional){...... tabFld.focus();...... return true;.....}.....else.....{......return false;.....}.. }..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	44
Entropy (8bit):	3.315789272504005
Encrypted:	false
SSDEEP:	3:CU7llexltxlBc6:1lluc6
MD5:	6D69C4DE0545F6FC9BA3DCD899E29501
SHA1:	201A59B8ED906C84C99E9BE323D3C5DD0A0AD0D4
SHA-256:	7F86128FC63CBAB878D570AE894EF2B7FA8694A35367E99EF351545C26335930
SHA-512:	640C029AD0D3CDC51ECA67C4867514A4BC400AF8D229821935F2FE988596E6339A4A6D63FE4C3A01F953BF7A460D0EA4F6170B535BD7AA96F739EBF765CA1733
Malicious:	false
Reputation:	low
Preview:	GIF89a........3....!.......,........@...Q.;.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1976
Entropy (8bit):	4.721786819362883
Encrypted:	false
SSDEEP:	48:U/bhTN68n08/1yn8/1ye/1yusF/1y7HqHylltvjfAEo9z/Vs:U/bhRPB9z9/9xY9OKHy/trfAEo9z/q
MD5:	2D38F61DE0880ECC5510C5951A88F5A7
SHA1:	FE973AC0E269C914709E5A3C75A980D80E67DC96
SHA-256:	395E3BA48EB39E44374E19653799D249145606EA88D47EDF03D61BE7425FE89B
SHA-512:	BEED61FB78D8E96B4D244FF2F1CB6E68F0E5700286E5D09FF06F78815F49A3C45FAEF290861BBF3FDFE95827C57F94AF30552147C2BFCA5F5BBF48BCB28C7398
Malicious:	false
Reputation:	low
URL:	https://interactive.marylandtaxes.gov/Business/glStyles/defaultcss.htm
Preview:	body {.....margin: 0px;.....background-color: #ffffff;.....}....td .. {.....font-size: 75%;.....font-family: arial;.....color: black;.....text-align: left;.....}...../..td .. {.....font-size: 9.5pt;.....font-family: arial;.....color: black;.....text-align: left;.....}.../.......h3 {.....font-family: arial;.....font-size: 16pt;.....color: #000000;.....font-weight: bold;.....}...........A:link.except {.. ...color : '#000000';.. ...font-family : Arial;.. ...font-weight : bold;.. ...font-style : normal;.. ...text-decoration : none;.. ...}.. .. .. A:visited.except {.. ...color : '#000000';.. ...font-family : Arial;.. ...font-weight : bold;.. ...font-style : normal;.. ...text-decoration : none;.. ...}.......A:link.clue {.. ...color : '#ffffff';.. ...font-family : Arial;.. ...font-weight : bold;.. ...font-style : normal;.. ...text-decoration : none;.. ...}........A:visited.clue {.. ...color : '#ffffff';.. ...font-family : Arial;.. ...font-weight : bold;.. ...font-style : normal;.. ...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 20, 2024 16:12:40.387200117 CET	49674	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:12:40.387295008 CET	49675	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:12:40.543500900 CET	49673	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:12:46.938317060 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:46.938359022 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:46.938419104 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:46.938738108 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:46.938747883 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:46.938792944 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:46.938998938 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:46.939013958 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:46.939232111 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:46.939240932 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.166831970 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.167043924 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:47.167068958 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.169012070 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.169075012 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:47.170033932 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:47.170113087 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.170236111 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:47.213900089 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.229371071 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:47.229583025 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:47.229613066 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:47.230140924 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:47.230201006 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:47.231210947 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:47.231260061 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:47.232172966 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:47.232258081 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:47.232518911 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:47.232532024 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:47.274204016 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:47.274204016 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:47.274236917 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.374947071 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.375016928 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:47.375045061 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.375109911 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.375157118 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:47.376019955 CET	49707	443	192.168.2.5	172.253.62.84
Feb 20, 2024 16:12:47.376049995 CET	443	49707	172.253.62.84	192.168.2.5
Feb 20, 2024 16:12:47.501198053 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:47.501334906 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:47.501406908 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:47.503662109 CET	49706	443	192.168.2.5	142.251.40.238
Feb 20, 2024 16:12:47.503690004 CET	443	49706	142.251.40.238	192.168.2.5
Feb 20, 2024 16:12:47.787241936 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:47.787290096 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:47.787365913 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:47.787808895 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:47.787822962 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:47.788541079 CET	49711	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:47.788575888 CET	443	49711	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:47.788701057 CET	49711	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:47.788887024 CET	49711	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:47.788896084 CET	443	49711	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.122927904 CET	443	49711	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.123317957 CET	49711	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.123327017 CET	443	49711	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.124459982 CET	443	49711	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.124548912 CET	49711	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.125654936 CET	49711	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.125735998 CET	443	49711	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.125952959 CET	49711	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.125960112 CET	443	49711	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.130789995 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.131066084 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.131089926 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.134656906 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.134746075 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.135123014 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.135297060 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.182276964 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.182295084 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.231034994 CET	443	49711	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.231148005 CET	49711	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.231941938 CET	49711	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.231957912 CET	443	49711	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.235898018 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.277945042 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573308945 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573374033 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573400021 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573457956 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.573489904 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573507071 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573518991 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.573524952 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573556900 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.573563099 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573581934 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.573612928 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.573616028 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573656082 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573673964 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573678017 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.573719025 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.573731899 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573756933 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.573790073 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.573816061 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.598010063 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.598042965 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.598120928 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.602058887 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.602082014 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.603225946 CET	49713	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.603281021 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.603384972 CET	49713	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.603645086 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.603708982 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.603787899 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.605848074 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.605880022 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.605931044 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.606722116 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.606745958 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.606791973 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.608606100 CET	49713	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.608622074 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.608886957 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.608927965 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.609302998 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.609325886 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.609741926 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.609757900 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.670902014 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.670972109 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.671036959 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.671070099 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.671089888 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.671114922 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.671210051 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.671257019 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.671276093 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.671283960 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.671319008 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.695590973 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:48.695626020 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:48.695698977 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:48.697434902 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:48.697463036 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:48.697519064 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:48.702965975 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:48.702991962 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:48.703521013 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:48.703530073 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:48.703603983 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:48.703900099 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:48.703916073 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:48.704380035 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:48.704390049 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:48.906568050 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.938091993 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:48.938112974 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:48.939340115 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:48.947278023 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.959608078 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.965435028 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.977283955 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.978818893 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.983618975 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:48.983623028 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:48.984498978 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:48.989862919 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.989880085 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.990010023 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:48.990019083 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:48.990097046 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:48.990103006 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:48.990247965 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:48.990252972 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:48.990434885 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.990580082 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.990592957 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.990639925 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:48.990695953 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:48.990725994 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.990734100 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.990828991 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.990843058 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.990942955 CET	49713	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.990961075 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.991420031 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:48.991468906 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:48.991489887 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.991547108 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:48.991611004 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:48.991692066 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.991723061 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:48.991748095 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.991771936 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:48.992433071 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.992505074 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.994409084 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.994498014 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.996189117 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.996269941 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.998651028 CET	49713	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.998809099 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:48.999277115 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:48.999366999 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:48.999665022 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:48.999743938 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.000885963 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.001137972 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.001816988 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.001923084 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.002049923 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.002132893 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.002248049 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.002342939 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.002589941 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.002710104 CET	49713	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.002758026 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.002768040 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.002809048 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.002815962 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.002861977 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.002871990 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.003019094 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.003029108 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.003097057 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.003103971 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.003194094 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.003201008 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.045274973 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.045279980 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.045299053 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.045299053 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.045303106 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.045304060 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.045908928 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.049904108 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.107671022 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.107702017 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.107814074 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.107825994 CET	49713	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.107865095 CET	49713	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.109143972 CET	49713	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.109164000 CET	443	49713	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.109911919 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.109951019 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.110080004 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.110984087 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.111000061 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.115420103 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.115479946 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.115524054 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.115540028 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.115554094 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.115593910 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.115611076 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.115689039 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.115725040 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.115731001 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.115786076 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.115822077 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.115827084 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116312027 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116352081 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116364956 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.116373062 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116416931 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.116425037 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116499901 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116539001 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.116544962 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116811037 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116851091 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116867065 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.116873026 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.116909027 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.116954088 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.117516041 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.117553949 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.117568016 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.117579937 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.117620945 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.117638111 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.117707014 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.117744923 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.117749929 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.118010044 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.118057966 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.118134975 CET	49718	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:49.118146896 CET	443	49718	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:49.141433954 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.141488075 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.141513109 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.141539097 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.141551018 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.141597033 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.141602993 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.147336960 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.147387981 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.147393942 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.153498888 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.153554916 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.153559923 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.157655954 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.157792091 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.157850027 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.157857895 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.157984972 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158034086 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.158041000 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158127069 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158173084 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.158179045 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158265114 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158319950 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.158325911 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158396959 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158442020 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.158447981 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158518076 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158566952 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.158572912 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158781052 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158828020 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.158833981 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158911943 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.158955097 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.158962965 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159045935 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159101963 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.159107924 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159208059 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159255028 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.159260988 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159560919 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159615040 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.159621000 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159780025 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159832954 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.159837961 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159919024 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.159955978 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.159957886 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.159965038 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.160001993 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.160007000 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.160423994 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.160471916 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.160478115 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.160561085 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.160604954 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.160612106 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.160887957 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.160929918 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.160937071 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.161252022 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.161302090 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.161308050 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.161406994 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.161453009 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.161458969 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.161545038 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.161590099 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.161596060 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.161685944 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.161726952 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.161734104 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.162125111 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.162188053 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.162194014 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.165735960 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.165793896 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.165801048 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.171896935 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.171945095 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.171951056 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.209229946 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.209264040 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.209275007 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.209314108 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.209320068 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.209327936 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.209335089 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.209361076 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.209361076 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.209378004 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.209398985 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.210437059 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.210503101 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.210524082 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.210545063 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.210556984 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.210573912 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.210592985 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.210602999 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.210613966 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.210647106 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.210656881 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.210671902 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.210702896 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.212555885 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.212563038 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.229176044 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.229245901 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.229254007 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.232104063 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.232158899 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.232166052 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.238596916 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.238646030 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.238652945 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.244333029 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.244385958 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.244394064 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.246237993 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.246268034 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.246308088 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.247133970 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.247193098 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.247200012 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.247594118 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.247649908 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.247656107 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.247699976 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.247802019 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.247881889 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.248202085 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.248254061 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.248727083 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.248785019 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.248883009 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.248955011 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.249115944 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.249166012 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.249300957 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.249351978 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.249378920 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.249598026 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.249663115 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.249994993 CET	49717	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:12:49.250010014 CET	443	49717	104.18.10.207	192.168.2.5
Feb 20, 2024 16:12:49.250535965 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.250586987 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.250595093 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.256722927 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.256774902 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.256783009 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.258878946 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.262725115 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.262783051 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.262789965 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.268821955 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.268878937 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.268884897 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.274799109 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.274842978 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.274851084 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.280904055 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.280955076 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.280975103 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.286186934 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.286242008 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.286250114 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.291670084 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.291716099 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.291723013 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.297168016 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.297221899 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.297229052 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.302534103 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.302598953 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.302607059 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.308216095 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.308283091 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.308290005 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.308656931 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.308685064 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.308722973 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.308734894 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.308749914 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.308753014 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.308775902 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.308782101 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.308795929 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.308811903 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.308851957 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.312822104 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.312860012 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.312870026 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.312886000 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.312896013 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.312925100 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.312932968 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.312947989 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.312973976 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.312993050 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.313003063 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.313018084 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.313024998 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.313046932 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.313644886 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.313698053 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.313704967 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.319039106 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.319103956 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.319113016 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.322865009 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.322937012 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.322943926 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.326706886 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.326775074 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.326782942 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.326988935 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.327023983 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.327045918 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.327053070 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.327064991 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.327075958 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.327084064 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.327112913 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.327143908 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.327253103 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.327279091 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.327306986 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.327313900 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.327326059 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.327357054 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.328686953 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.328726053 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.328785896 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.328823090 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.328835964 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.328926086 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.328974962 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.329094887 CET	49710	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.329112053 CET	443	49710	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.329518080 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.329540968 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.329603910 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.330193043 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.330240011 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.330246925 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.330408096 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.330420971 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.333776951 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.333838940 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.333844900 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.337790966 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.337882042 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.337893009 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.340816021 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.340878963 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.340886116 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.344553947 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.344651937 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.344657898 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.349647045 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.349704027 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.349724054 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.349733114 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.349775076 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.353163958 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.356283903 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.356693983 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.356761932 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.356769085 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.360199928 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.360251904 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.360270977 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.360279083 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.360327959 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.363697052 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.363961935 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.364029884 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.364121914 CET	49719	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:12:49.364131927 CET	443	49719	142.250.72.110	192.168.2.5
Feb 20, 2024 16:12:49.406606913 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.406662941 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.406778097 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.406795025 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.406832933 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.406847000 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.410720110 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.410753965 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.410844088 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.410854101 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.410892010 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.410964966 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.410984993 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.411016941 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.411022902 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.411042929 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.411077023 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.411844969 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.411863089 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.411932945 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.411941051 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.411981106 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.418577909 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.418934107 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.418951988 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.419404984 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.419773102 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.419842005 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.419891119 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.425543070 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.425560951 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.425651073 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.425659895 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.425704956 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.426387072 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.426409960 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.426470041 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.426476955 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.426506996 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.426526070 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.426757097 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.426773071 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.426846981 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.426855087 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.426896095 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.465908051 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.465914011 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.507066011 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.507116079 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.507195950 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.507210970 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.507232904 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.507261992 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.510747910 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.510781050 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.510854959 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.510860920 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.510871887 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.510890961 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.510896921 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.510927916 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.510935068 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.510967016 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.510987043 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.511147976 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.511173010 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.511209011 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.511214972 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.511245966 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.511267900 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.511836052 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.511857033 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.511904955 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.511910915 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.511940956 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.511964083 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.512182951 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.512202978 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.512243986 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.512248993 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.512279987 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.512298107 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.524851084 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.524876118 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.524972916 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.524981976 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.525029898 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.526031971 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.526047945 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.526112080 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.526119947 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.526165962 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.526592016 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.526607037 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.526678085 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.526685953 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.526727915 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.527053118 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527070045 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527132988 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.527139902 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527189970 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.527385950 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527426004 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527462006 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.527467966 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527488947 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527498960 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.527523041 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527544975 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.527544975 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.527550936 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527580023 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.527623892 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.527671099 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.528386116 CET	49712	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.528398037 CET	443	49712	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.529102087 CET	49724	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.529155970 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.529263020 CET	49724	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.531943083 CET	49724	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.531971931 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.550820112 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.550868034 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.550972939 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.550983906 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.551013947 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.551023006 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.552437067 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.552478075 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.552527905 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.552536964 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.552561998 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.552581072 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.609030962 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.609060049 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.609148026 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.609159946 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.609213114 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.611596107 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.611620903 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.611691952 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.611712933 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.611758947 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.612211943 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.612231016 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.612301111 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.612308025 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.612351894 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.612355947 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.612370014 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.612392902 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.612416983 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.612423897 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.612457037 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.612476110 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.616585970 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.616606951 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.616681099 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.616688967 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.616749048 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.617611885 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.617633104 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.617697001 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.617706060 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.617747068 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.618552923 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.618575096 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.618638039 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.618647099 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.618705988 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.618855953 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.618913889 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.618921041 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.618957996 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.618964911 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.619004011 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.621864080 CET	49716	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.621880054 CET	443	49716	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.622386932 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.622421026 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.622493982 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.623419046 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.623435020 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.623771906 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.623800993 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.623810053 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.623841047 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.623872042 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.623897076 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.623904943 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.623928070 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.623928070 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.623992920 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.624488115 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.624507904 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.624584913 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.624584913 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.624593019 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.624656916 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.641832113 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.641944885 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.641990900 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.642132044 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.642474890 CET	49714	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.642496109 CET	443	49714	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.642882109 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.642903090 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.642962933 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.643770933 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.643785954 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.648669958 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.648921013 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.648947001 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.649766922 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.650310993 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.650398970 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.650480986 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.693926096 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.706664085 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.706710100 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.706839085 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.706849098 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.706974030 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.709903955 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:12:49.709932089 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:12:49.710084915 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:12:49.710391998 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:12:49.710406065 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:12:49.722383022 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.722414970 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.722505093 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.722517014 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.722558022 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.722558022 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.722687006 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.722748995 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.722757101 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.722825050 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.722826958 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.722872972 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.723253012 CET	49721	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.723264933 CET	443	49721	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.723731041 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.723757982 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.723823071 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.724752903 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.724765062 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.747791052 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.747839928 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.747908115 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.747916937 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.747960091 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.805434942 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.805501938 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.805537939 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.805547953 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.805583954 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.805596113 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.837621927 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.838311911 CET	49724	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.838341951 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.838745117 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.839833975 CET	49724	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.839916945 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.840028048 CET	49724	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.855267048 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.855329037 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.855374098 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.855614901 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.855643034 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.855658054 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.855720997 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.885899067 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.903126001 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.903197050 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.903245926 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.903260946 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.903294086 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.903311014 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.937776089 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.938085079 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.938097954 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.939251900 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.939414024 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.939759970 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.939821959 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.939882994 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.939891100 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.944344044 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.944390059 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.944447994 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.944463015 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.944479942 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.944499969 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.953340054 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.953382969 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.953454018 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.953465939 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.953500032 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.953522921 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.953865051 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.953941107 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.953941107 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.953970909 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.954000950 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.954024076 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.956017017 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.956068993 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.956115961 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.956121922 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.956165075 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.957129955 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.957346916 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.957357883 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.958576918 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.958645105 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.958965063 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.959032059 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.959177017 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.959183931 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:49.980564117 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:49.992252111 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:12:49.992656946 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:12:49.992669106 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:12:49.994312048 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:12:49.994445086 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:12:49.995440960 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:12:49.995524883 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:12:49.996460915 CET	49674	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:12:49.996465921 CET	49675	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:12:50.001410961 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.001514912 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.001533031 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.001599073 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.001704931 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.002028942 CET	49715	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.002041101 CET	443	49715	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.012449026 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.030200958 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.030251980 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.030340910 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.031157970 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.031176090 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.037616968 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.041867971 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:12:50.041879892 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:12:50.041929960 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.041954994 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.041970968 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.042043924 CET	49724	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.042084932 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.042141914 CET	49724	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.049134970 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.049149036 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.049587965 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.051578999 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.051640987 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.051693916 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.051706076 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.051739931 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.051760912 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.051927090 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.051975012 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.052005053 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.052010059 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.052043915 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.052067995 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.052347898 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.052397013 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.052433968 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.052439928 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.052484989 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.052530050 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.052714109 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.052757978 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.052797079 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.052802086 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.052829981 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.052853107 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.053565979 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.053649902 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.053755999 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.054124117 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.054168940 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.054204941 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.054209948 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.054260015 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.054629087 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.054692984 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.054712057 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.054718018 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.054745913 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.054769039 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.063297987 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.063323021 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.063329935 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.063350916 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.063359022 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.063364029 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.063395023 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.063405991 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.063416958 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.063432932 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.063460112 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.087445021 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:12:50.093904972 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.106534004 CET	49724	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.106568098 CET	443	49724	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.109167099 CET	49726	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.109190941 CET	443	49726	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.112967014 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.113013983 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.113087893 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.113563061 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.113580942 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.143932104 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.143954992 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.143961906 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.144001007 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.144033909 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.144124031 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.144124031 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.144140959 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.144150972 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.144167900 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.144248962 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.144248962 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.144258022 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.144423008 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.149555922 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.149609089 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.149668932 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.149679899 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.149713039 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.149743080 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.150079012 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.150121927 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.150141954 CET	49673	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:12:50.150204897 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.150211096 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.150250912 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.150434971 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.150477886 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.150501966 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.150506973 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.150551081 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.150597095 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.150903940 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.150947094 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.150981903 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.150985956 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.151027918 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.151393890 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.151437998 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.151469946 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.151474953 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.151501894 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.151523113 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.151736021 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.151779890 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.151818037 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.151823044 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.151850939 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.151875973 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.151993990 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.152036905 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.152067900 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.152074099 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.152111053 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.152139902 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.152309895 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.152350903 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.152375937 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.152381897 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.152405977 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.152420998 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.152425051 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.152520895 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.152582884 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.154350996 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.161168098 CET	49723	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.161180019 CET	443	49723	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.242438078 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.242484093 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.242552042 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.242599010 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.242599010 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.242599010 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.260775089 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.260811090 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.260831118 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.260876894 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.260896921 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.260915041 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.260931969 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.261075020 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.261112928 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.261132002 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.261137962 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.261162043 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.261178970 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.320521116 CET	49725	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.320544958 CET	443	49725	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.322580099 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.322621107 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.322690010 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.323183060 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.323214054 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.323277950 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.327785015 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.327800989 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.328180075 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.328203917 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.359483957 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.359510899 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.359575033 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.359582901 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.359617949 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.359642029 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.359853983 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.359888077 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.359925985 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.359932899 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.359950066 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.359966993 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.360313892 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.360337019 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.360369921 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.360375881 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.360424042 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.373800039 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.413444996 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.419634104 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.424160004 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.424175978 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.424722910 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.428128004 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.428141117 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.428761005 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.429487944 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.429603100 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.431227922 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.431325912 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.432210922 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.432605028 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.451317072 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.451349020 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.451421022 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.452059984 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.452074051 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.459104061 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.459131002 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.459184885 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.459197998 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.459238052 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.459475040 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.459496975 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.459558964 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.459564924 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.459605932 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.459925890 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.459945917 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.459981918 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.459989071 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.460037947 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.460321903 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.460342884 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.460378885 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.460383892 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.460417032 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.460436106 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.460767984 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.460788012 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.460834026 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.460839987 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.460875988 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.460890055 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.461225033 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.461246014 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.461278915 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.461286068 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.461313009 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.461334944 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.473901987 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.473905087 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.547806978 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.547844887 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.547899961 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.547920942 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.547936916 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.547983885 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.551637888 CET	49729	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.551659107 CET	443	49729	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.557590961 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.557620049 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.557687998 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.557702065 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.557742119 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.557950020 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.557974100 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.558089972 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.558095932 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.558156967 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.558440924 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.558464050 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.558542967 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.558548927 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.558587074 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.558881998 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.558901072 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.558942080 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.558948040 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.558978081 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.559000015 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.559392929 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.559412956 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.559474945 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.559482098 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.559551954 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.559899092 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.559926033 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.559984922 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.559989929 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.560020924 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.560036898 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.560189009 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.560208082 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.560228109 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.560229063 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.560281038 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.560286045 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.560314894 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.560348034 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.560359955 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.560405970 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.560461998 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.560467958 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.560501099 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.560555935 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.561429977 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.562911034 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.562930107 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.565294981 CET	49728	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.565309048 CET	443	49728	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.632904053 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.632931948 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.632952929 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.632986069 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.633002996 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.633032084 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.633044958 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.633055925 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.633065939 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.633090019 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.633124113 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.633148909 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.665477991 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.665525913 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.665682077 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.666656017 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.666675091 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.683284044 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.685481071 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.685494900 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.685986996 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.690577984 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.690668106 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.691025019 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.693733931 CET	49730	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.693754911 CET	443	49730	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.694874048 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.697547913 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.697561026 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.698661089 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.698745012 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.699618101 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.699678898 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.701060057 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.701067924 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.723463058 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.723548889 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.723630905 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.724297047 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.724329948 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.737911940 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.747001886 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.761812925 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.767558098 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.767580032 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.767955065 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.803239107 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.803352118 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.803412914 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.803425074 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.803495884 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.803504944 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.803545952 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.804090023 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.804128885 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.804177046 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.808159113 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.808182001 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.808187962 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.808274031 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.808286905 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.808317900 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.849908113 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.883033037 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.885643959 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.885665894 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.886173964 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.914990902 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.915019035 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.915075064 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.915088892 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.915105104 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.915137053 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.915169954 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.930344105 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.944504976 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.944647074 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.948333979 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:50.983165026 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:50.989903927 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.003190994 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.003211021 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.004971027 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.005044937 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.005637884 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.005723953 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.006195068 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.006206989 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.035460949 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.047051907 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.086445093 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.108917952 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.108942032 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.108952045 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.108980894 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.108989000 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.108993053 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.109011889 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.109026909 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.109045982 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.109051943 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.109088898 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.109179020 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.110938072 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.110953093 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.111526012 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.112247944 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.112370968 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.112581015 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.153907061 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.156356096 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.156379938 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.156416893 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.156440973 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.156451941 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.156466961 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.156492949 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.156513929 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.194677114 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.194715023 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.194785118 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.204310894 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.204327106 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.219818115 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.219846964 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.219856977 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.219883919 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.219913960 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.219916105 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.219935894 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.219950914 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.219957113 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.219969034 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.220005989 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.385895967 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.415009975 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.415024042 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.416205883 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.416270018 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.428584099 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.428694010 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.429604053 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.429613113 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.463453054 CET	49737	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.463483095 CET	443	49737	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.464512110 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.464570045 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.464651108 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.467398882 CET	49731	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.467416048 CET	443	49731	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.469757080 CET	49732	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.469779015 CET	443	49732	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.471115112 CET	49736	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.471148014 CET	443	49736	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.477664948 CET	49738	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.477683067 CET	443	49738	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.479089022 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.488176107 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.488200903 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.499401093 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.499440908 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.499515057 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.500319958 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.500354052 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.500410080 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.501148939 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.501179934 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.501281023 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.505038023 CET	49739	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.505048990 CET	443	49739	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.507363081 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.507380962 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.507868052 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.507889032 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.508662939 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.508675098 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.509792089 CET	443	49703	23.1.237.91	192.168.2.5
Feb 20, 2024 16:12:51.509885073 CET	49703	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:12:51.610001087 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610070944 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610115051 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610157967 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610166073 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.610193968 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610209942 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.610243082 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610286951 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.610290051 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610304117 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610348940 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.610354900 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610409021 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610454082 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610472918 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.610477924 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610517979 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.610522985 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610560894 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.610601902 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.610608101 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.611121893 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.611169100 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.611174107 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.611216068 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.611258984 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.611259937 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.611268997 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.611308098 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.611311913 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.612060070 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.612106085 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.612123013 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.612128019 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.612164021 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.612169027 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.612226009 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.612263918 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.612267971 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.612277031 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.612330914 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.612966061 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.613125086 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.613204002 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.613210917 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.613435030 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.613477945 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.613518953 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.613524914 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.613656044 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.613784075 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.613920927 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.613991976 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.614032984 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.614038944 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.614140987 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.614176989 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.614185095 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.614190102 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.614226103 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.614634991 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.614677906 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.614886999 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.614937067 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.698261023 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.698358059 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.698370934 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.698470116 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.699086905 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.699157000 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.699409008 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.699465990 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.699604034 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.699652910 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.699657917 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.699696064 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.699698925 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.699872971 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.700059891 CET	49740	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:12:51.700076103 CET	443	49740	104.17.25.14	192.168.2.5
Feb 20, 2024 16:12:51.797869921 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.798316002 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.798333883 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.799532890 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.800018072 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.800213099 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.800219059 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.800263882 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.824888945 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:51.824939013 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:51.825083971 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:51.828058004 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:51.828075886 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:51.835200071 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.835496902 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.835544109 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.836802006 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.837202072 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.837384939 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.837398052 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.837424994 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.851106882 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.857007980 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.857258081 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.857281923 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.860572100 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.860645056 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.861018896 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.861098051 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.861193895 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.867557049 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.867893934 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.867912054 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.869093895 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.869148970 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.869477987 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.869540930 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.869749069 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.869759083 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.883203983 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.901912928 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.914505005 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.914511919 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.914539099 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.941507101 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.941571951 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.941591978 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.941670895 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.941694975 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.941755056 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.943300009 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.944350004 CET	49743	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.944379091 CET	443	49743	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.961000919 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.964628935 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.964683056 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.964704037 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.964742899 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.964754105 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.964778900 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.964797020 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.964891911 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.964941978 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.965538979 CET	49744	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.965554953 CET	443	49744	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.973731041 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.973829985 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:51.974288940 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.974512100 CET	49745	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:51.974519968 CET	443	49745	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001090050 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001147032 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001167059 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001185894 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001204967 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.001224041 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001243114 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001259089 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.001269102 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001322985 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.001322985 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.001331091 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001553059 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001627922 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.001635075 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001704931 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.001810074 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.002579927 CET	49742	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.002592087 CET	443	49742	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.028095961 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:52.028192997 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:52.255865097 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.255886078 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.255954981 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.256263018 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.256273031 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.256328106 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.256997108 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.257009983 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.257349968 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.257364035 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.615277052 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.619935036 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.633599997 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.633610964 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.633799076 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.633807898 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.635241985 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.635328054 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.635358095 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.635413885 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.637895107 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.637979984 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.638853073 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.638957024 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.639189005 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.639195919 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.639245987 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.639254093 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.640014887 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:52.640038967 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:52.640424013 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:52.680147886 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.680159092 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.680437088 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:52.742182970 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.742211103 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.742221117 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.742274046 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.742284060 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.742297888 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.742316008 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.742357016 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.766175032 CET	49750	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.766187906 CET	443	49750	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.839196920 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.839359999 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.839371920 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.839401960 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.839432001 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.839436054 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.839449883 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.839462996 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.839476109 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.839493990 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.839500904 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.839529037 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.839570045 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.850229025 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:52.865700960 CET	49749	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.865716934 CET	443	49749	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.893913031 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:52.910579920 CET	49755	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.910614967 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.910700083 CET	49755	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.911596060 CET	49755	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.911609888 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.916994095 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.917026997 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.917088032 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.919296026 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.919313908 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.923288107 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.923327923 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.923677921 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.924282074 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.924299002 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.927122116 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.927153111 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.927242994 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.927647114 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.927659988 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.931200981 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.931226015 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.931278944 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.935604095 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.935617924 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.940321922 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.940363884 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.940422058 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.941054106 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:52.941076040 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:52.946641922 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:52.946754932 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:52.946820021 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:52.986074924 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:52.986098051 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:52.986133099 CET	49746	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:52.986140013 CET	443	49746	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.226713896 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.242456913 CET	49755	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.242474079 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.242862940 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.245296001 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.249249935 CET	49755	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.249361992 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.249752998 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.249767065 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.250303030 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.250725031 CET	49755	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.251096010 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.251183033 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.251209974 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.284264088 CET	49763	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:53.284301043 CET	443	49763	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.284373045 CET	49763	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:53.284837008 CET	49763	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:53.284849882 CET	443	49763	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.285092115 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.285315037 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.285331964 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.286389112 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.286670923 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.286686897 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.286757946 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.286834955 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.287255049 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.287374020 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.287482023 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.287491083 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.288248062 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.288352013 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.288731098 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.288863897 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.288868904 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.288887024 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.293525934 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.293543100 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.293909073 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.309465885 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.318917990 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.332473040 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.332736015 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.332746983 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.341458082 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.341483116 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.341579914 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.341609955 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.342832088 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.342900038 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.343218088 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.343277931 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.344032049 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.344116926 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.344325066 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.344403028 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.344510078 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.344518900 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.344568014 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.344574928 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.354507923 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.354536057 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.354562044 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.354599953 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.354610920 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.354650974 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.354664087 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.354696989 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.361572981 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.361599922 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.361660004 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.362308025 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.362320900 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.366288900 CET	49756	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.366307020 CET	443	49756	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.367238045 CET	49766	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.367259979 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.367330074 CET	49766	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.370548964 CET	49766	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.370562077 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.384057999 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.384057045 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.384104013 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.390702009 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.390724897 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.390733957 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.390775919 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.390793085 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.390803099 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.390826941 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.390881062 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.393637896 CET	49760	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.393652916 CET	443	49760	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.394429922 CET	49768	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.394458055 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.394675016 CET	49768	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.395961046 CET	49768	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.395977020 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.398150921 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.398175955 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.398184061 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.398241043 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.398286104 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.398286104 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.402987957 CET	49759	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.402995110 CET	443	49759	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.403491020 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.403502941 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.403559923 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.405433893 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.405445099 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448775053 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448801041 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448811054 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448852062 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448865891 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.448874950 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448890924 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448909044 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448915005 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.448939085 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.448951006 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448976994 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.448983908 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.448992968 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.449014902 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.449022055 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.449022055 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.449033022 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.449044943 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.449050903 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.449093103 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.449135065 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.449194908 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.452327013 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.452380896 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.452425957 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.452512026 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.452558041 CET	49755	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.452558041 CET	49755	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.460850954 CET	49755	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.460860014 CET	443	49755	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.461307049 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.461333990 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.461440086 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.466953039 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.466969967 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.467833996 CET	49758	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.467844963 CET	443	49758	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.469006062 CET	49757	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.469017029 CET	443	49757	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.501166105 CET	443	49763	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.501251936 CET	49763	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:53.524230003 CET	49763	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:53.524244070 CET	443	49763	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.524571896 CET	443	49763	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.529347897 CET	49763	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:53.569906950 CET	443	49763	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.669512987 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.673413038 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.673440933 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.673999071 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.675206900 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.675292969 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.675353050 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.677812099 CET	443	49763	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.677969933 CET	443	49763	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.678138018 CET	49763	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:53.682363987 CET	49763	443	192.168.2.5	23.51.58.94
Feb 20, 2024 16:12:53.682373047 CET	443	49763	23.51.58.94	192.168.2.5
Feb 20, 2024 16:12:53.689528942 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.692384958 CET	49766	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.692394972 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.693520069 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.694427967 CET	49766	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.694494963 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.694876909 CET	49766	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.704602957 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.705143929 CET	49768	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.705159903 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.705532074 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.706451893 CET	49768	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.706517935 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.707129002 CET	49768	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.712127924 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.712526083 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.712553024 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.714060068 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.714128017 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.715305090 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.715389013 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.715436935 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.717911005 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.729870081 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.737909079 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.749944925 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.757903099 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.760365963 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.760389090 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.772380114 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.772674084 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.772705078 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.774657965 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.774753094 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.776185989 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.776272058 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.777595997 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.777606964 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.778645039 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.778666019 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.778726101 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.778737068 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.778748035 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.778887987 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.782138109 CET	49764	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.782151937 CET	443	49764	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.797856092 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.797883987 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.797954082 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.797960997 CET	49766	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.798006058 CET	49766	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.798882961 CET	49766	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.798891068 CET	443	49766	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.806046963 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.809990883 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.810025930 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.810101032 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.810138941 CET	49768	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.810153008 CET	49768	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.811778069 CET	49768	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.811796904 CET	443	49768	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.821155071 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.826862097 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.826945066 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.827105045 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.827567101 CET	49769	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.827585936 CET	443	49769	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.982830048 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.982863903 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.982878923 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.982922077 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.982938051 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.982954025 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.982964039 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.982986927 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.983007908 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.983151913 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.983210087 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.983216047 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.983294010 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:53.983432055 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.984180927 CET	49770	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:53.984189987 CET	443	49770	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:55.850209951 CET	49775	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:55.850250959 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:55.850322008 CET	49775	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:55.851115942 CET	49776	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:55.851150990 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:55.851210117 CET	49776	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:55.851665020 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:55.851708889 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:55.851780891 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:55.852274895 CET	49775	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:55.852293968 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:55.853374958 CET	49776	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:55.853400946 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:55.853976011 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:55.853988886 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.180730104 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.217073917 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.217089891 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.218533993 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.218621969 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.219067097 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.219230890 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.219238997 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.219341040 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.223588943 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.223782063 CET	49776	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.223803043 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.223824978 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.223975897 CET	49775	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.223997116 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.224298000 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.224524975 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.224579096 CET	49776	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.224666119 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.224868059 CET	49775	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.224956036 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.225002050 CET	49776	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.225122929 CET	49775	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.269896984 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.269905090 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.276803970 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.276814938 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.330399036 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.330483913 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.330617905 CET	49775	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.421611071 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.424794912 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:56.426955938 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.427469969 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:56.427546024 CET	49776	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.720467091 CET	49775	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.720487118 CET	443	49775	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:58.721240044 CET	49776	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.721263885 CET	443	49776	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:58.721900940 CET	49777	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.721925974 CET	443	49777	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:58.735240936 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.735276937 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:58.735342026 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.736354113 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.736366034 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:58.879087925 CET	49781	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.879118919 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:58.879190922 CET	49781	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.879506111 CET	49781	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:58.879520893 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.039792061 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.041909933 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.041924953 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.042323112 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.043545008 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.043545008 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.043572903 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.043576002 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.043632984 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.130989075 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.133482933 CET	49782	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.133522034 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.133591890 CET	49782	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.133970022 CET	49782	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.133989096 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.157083988 CET	49783	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.157116890 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.157176018 CET	49783	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.157480001 CET	49783	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.157491922 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.159363985 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.159403086 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.159468889 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.159656048 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.159672976 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.171943903 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.171991110 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.172092915 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.172508001 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.172525883 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.191371918 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.192050934 CET	49781	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.192061901 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.192425966 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.192784071 CET	49781	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.192854881 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.193054914 CET	49781	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.193080902 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.193083048 CET	49781	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.193094015 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.243434906 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.243520021 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.243590117 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.246684074 CET	49780	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.246700048 CET	443	49780	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.254270077 CET	49786	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.254344940 CET	443	49786	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.254422903 CET	49786	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.254865885 CET	49786	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.254888058 CET	443	49786	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.393755913 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.393862963 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.393918991 CET	49781	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.395138025 CET	49781	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.395162106 CET	443	49781	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.403230906 CET	49787	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.403271914 CET	443	49787	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.403337002 CET	49787	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.404069901 CET	49787	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.404082060 CET	443	49787	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.440023899 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.440244913 CET	49782	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.440263987 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.440623999 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.441056967 CET	49782	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.441133022 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.441253901 CET	49782	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.464312077 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.464535952 CET	49783	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.464555025 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.465064049 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.465550900 CET	49783	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.465596914 CET	49783	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.465601921 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.465612888 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.465703964 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.465903044 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.465934038 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.466943026 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.467017889 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.467333078 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.467389107 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.467468977 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.467478037 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.485919952 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.489563942 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.489773035 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.489794016 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.490950108 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.491064072 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.491359949 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.491441011 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.491695881 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.491703033 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.558660984 CET	443	49786	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.559092999 CET	49786	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.559103012 CET	443	49786	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.560237885 CET	443	49786	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.560295105 CET	49786	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.560704947 CET	49786	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.560767889 CET	443	49786	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.561058998 CET	49786	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.561064005 CET	443	49786	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.561543941 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.561567068 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.561613083 CET	49782	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.561630011 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.561644077 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.561697006 CET	49782	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.562809944 CET	49782	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.562829018 CET	443	49782	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.567267895 CET	49783	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.567329884 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.568835974 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.568922997 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.568970919 CET	49783	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.570116997 CET	49783	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.570135117 CET	443	49783	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.669802904 CET	443	49786	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.669878006 CET	49786	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.670583010 CET	49786	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.670597076 CET	443	49786	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.671534061 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.673608065 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.673830032 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.673882961 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.674547911 CET	49784	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.674561024 CET	443	49784	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.693228006 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.693325043 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.693419933 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.693912029 CET	49785	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.693932056 CET	443	49785	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.708820105 CET	443	49787	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.709108114 CET	49787	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.709129095 CET	443	49787	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.710230112 CET	443	49787	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.710300922 CET	49787	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.710630894 CET	49787	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.710697889 CET	443	49787	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.710762978 CET	49787	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.710772038 CET	443	49787	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.812942028 CET	443	49787	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.813015938 CET	49787	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.814083099 CET	49787	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:12:59.814102888 CET	443	49787	20.141.131.150	192.168.2.5
Feb 20, 2024 16:12:59.970993042 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:12:59.971060991 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:12:59.971112967 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:13:00.777625084 CET	49727	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:13:00.777650118 CET	443	49727	142.251.40.164	192.168.2.5
Feb 20, 2024 16:13:00.778140068 CET	49789	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:00.778157949 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:00.778225899 CET	49789	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:00.778755903 CET	49789	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:00.778773069 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.099381924 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.108637094 CET	49789	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.108671904 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.109529972 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.123711109 CET	49789	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.123874903 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.124166965 CET	49789	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.124203920 CET	49789	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.124203920 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.124223948 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.125768900 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.125828981 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.125905037 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.126312017 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.126341105 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.324899912 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.325021029 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.325119972 CET	49789	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.325871944 CET	49789	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.325891972 CET	443	49789	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.330779076 CET	49793	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.330837011 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.330899000 CET	49793	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.331163883 CET	49793	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.331185102 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.433255911 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.434243917 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.434276104 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.435462952 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.435992002 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.436151981 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.436162949 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.436180115 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.480743885 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.636420012 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.638928890 CET	49793	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.638955116 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.639453888 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.639952898 CET	49793	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.640038013 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.640388012 CET	49793	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.681906939 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.738086939 CET	49703	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:01.738468885 CET	49703	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:01.739217997 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:01.739254951 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:01.739336967 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:01.739710093 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:01.739722013 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:01.742038965 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.742599964 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.742664099 CET	49793	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.744294882 CET	49793	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.744314909 CET	443	49793	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.747972012 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.748008966 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.748039007 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.748049974 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.748059034 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.748075008 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.748084068 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.748107910 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.748135090 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.749005079 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.749026060 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.749093056 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.749099970 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:01.749119997 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.749140024 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:01.789202929 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:01.789235115 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:01.789309025 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:01.793751001 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:01.793768883 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:01.890579939 CET	443	49703	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:01.890840054 CET	443	49703	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:01.991005898 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:01.991271973 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:01.991292953 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:01.991811037 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:01.992152929 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:01.992238045 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:01.992363930 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.033910036 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.056948900 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:02.057032108 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:02.143481016 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:02.143517971 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:02.143851042 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:02.143903017 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:02.144921064 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:02.144948006 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:02.145160913 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:02.145169020 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:02.211894035 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.212023973 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.212115049 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.212136984 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.212178946 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.212328911 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.212337971 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.217544079 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.217602015 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.217612028 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.223787069 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.223839998 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.223853111 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.230005980 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.230062008 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.230072975 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.235981941 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.236082077 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.236094952 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.242310047 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.242362976 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.242372990 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.292280912 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.292290926 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.299316883 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.299386978 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.299407959 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.302198887 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.302256107 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.302264929 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.308327913 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.308429956 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.308439016 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.314491987 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.314713955 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.314723969 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.320707083 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.320764065 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.320774078 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.327425003 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.327502012 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.327512026 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.332993031 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.333062887 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.333070993 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.339231014 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.339443922 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.339452028 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.345170975 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.345484972 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.345493078 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.350750923 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.350945950 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.350955009 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.356368065 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.356466055 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.356475115 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.361749887 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.361848116 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.361856937 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.367288113 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.367423058 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.367430925 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.372832060 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.372991085 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.372999907 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.378369093 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.378457069 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.378464937 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.383929014 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.384637117 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.384654045 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.389478922 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.389555931 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.389564037 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.394781113 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.394886017 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.394893885 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.399302006 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.399354935 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.399363995 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.403681993 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.403762102 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.403773069 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.407864094 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.407918930 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.407927990 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.411885023 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.411989927 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.411998987 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.415651083 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.415730000 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.415740013 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.419426918 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.419480085 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.419487953 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.425029039 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.425092936 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.425102949 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.428849936 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.428913116 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.428920984 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.432699919 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.432781935 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.432809114 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.432822943 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.432945967 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.440829992 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.442857981 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.442990065 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.442998886 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.443044901 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.443094015 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.444483995 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:02.444566965 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:02.445003986 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:02.445059061 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:02.445069075 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:02.445110083 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:02.448359966 CET	49798	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:02.448379993 CET	443	49798	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:02.518889904 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.518927097 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.518975973 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.518980026 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:02.519004107 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.519063950 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:02.519072056 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.519113064 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:02.519690037 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.519735098 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.519752979 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:02.519761086 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.519792080 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:02.519812107 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:02.616740942 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.616843939 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:02.616861105 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.616889000 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:02.616933107 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:02.800410032 CET	49790	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:02.800441027 CET	443	49790	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:03.737358093 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:03.737395048 CET	443	49797	23.1.237.91	192.168.2.5
Feb 20, 2024 16:13:03.737407923 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:03.737451077 CET	49797	443	192.168.2.5	23.1.237.91
Feb 20, 2024 16:13:06.145576954 CET	49801	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.145606995 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.145750999 CET	49801	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.159665108 CET	49801	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.159678936 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.465243101 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.469016075 CET	49801	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.469038963 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.469451904 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.473093033 CET	49801	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.473162889 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.473524094 CET	49801	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.473550081 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.473607063 CET	49801	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.473612070 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.674184084 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.674282074 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.674547911 CET	49801	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.700894117 CET	49801	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.700915098 CET	443	49801	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.726197958 CET	49802	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.726236105 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:06.726290941 CET	49802	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.727082968 CET	49802	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:06.727097034 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.037353039 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.046036959 CET	49802	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.046049118 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.046642065 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.048409939 CET	49802	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.048521042 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.049101114 CET	49802	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.093904972 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.109087944 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.109127998 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.109214067 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.109447956 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.109497070 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.109687090 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.111242056 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:07.111275911 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:07.111416101 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:07.112095118 CET	49806	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:07.112107992 CET	443	49806	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:07.112215042 CET	49806	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:07.114409924 CET	49807	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:07.114428997 CET	443	49807	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:07.114475012 CET	49807	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:07.118208885 CET	49807	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:07.118225098 CET	443	49807	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:07.118707895 CET	49806	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:07.118725061 CET	443	49806	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:07.118967056 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:07.118982077 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:07.119725943 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.119765997 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.120273113 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.120282888 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.153345108 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.153562069 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.153660059 CET	49802	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.158231974 CET	49802	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.158256054 CET	443	49802	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.324084044 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:07.325309992 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:07.325325966 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:07.325752020 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:07.326386929 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:07.326493025 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:07.353615046 CET	443	49806	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:07.354094028 CET	49806	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:07.354104042 CET	443	49806	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:07.355389118 CET	443	49806	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:07.356060982 CET	49806	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:07.356298923 CET	443	49806	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:07.357513905 CET	443	49807	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:07.357695103 CET	49807	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:07.357703924 CET	443	49807	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:07.358347893 CET	443	49807	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:07.359112024 CET	49807	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:07.359205008 CET	443	49807	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:07.397121906 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:07.457304955 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.457863092 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.457894087 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.458285093 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.458745956 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.458823919 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.459069967 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.469326973 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.469702005 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.469715118 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.470782042 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.471169949 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.471250057 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.494647026 CET	49806	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:07.494780064 CET	49807	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:07.501941919 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.681899071 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.681958914 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.808315992 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.808352947 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.808368921 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.808530092 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.808547974 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.808593988 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.808670998 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.808689117 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.808752060 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.808759928 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.808796883 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.891801119 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:07.906826973 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.906847954 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.906914949 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.906934977 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.906980038 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.907160044 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.907176971 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.907223940 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.907231092 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.907274008 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.937905073 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:07.963098049 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.963195086 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.963198900 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:07.963255882 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.985097885 CET	49804	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:07.985126972 CET	443	49804	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:08.014748096 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.014790058 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.014832020 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.014854908 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.014930010 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.014930010 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.014950991 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.020802975 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.020920038 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.020929098 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.026701927 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.026844025 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.026860952 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.032819033 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.033051014 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.033065081 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.038959980 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.044697046 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.044707060 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.045234919 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.045310020 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.045319080 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.102277040 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.102296114 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.102432966 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.103233099 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.103241920 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.105469942 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.105552912 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.105561018 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.111614943 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.111718893 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.111726999 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.117759943 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.117815018 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.117824078 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.123897076 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.123964071 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.123971939 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.130038023 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.130146980 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.130156994 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.136272907 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.136364937 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.136374950 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.142417908 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.142503977 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.142513990 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.148354053 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.148463011 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.148471117 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.153841972 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.154015064 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.154026985 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.159377098 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.160568953 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.160578012 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.164928913 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.168612003 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.168623924 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.170746088 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.170877934 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.170887947 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.176249027 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.176624060 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.176640034 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.181636095 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.184643030 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.184659004 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.187056065 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.187942982 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.187951088 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.192550898 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.194587946 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.194602966 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.196945906 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.197030067 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.197037935 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.201117992 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.202821970 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.202832937 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.205082893 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.205151081 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.205158949 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.208795071 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.210937977 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.210946083 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.212522030 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.212583065 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.212589979 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.216309071 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.218864918 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.218882084 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.220005989 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.220069885 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.220077991 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.225733042 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.225771904 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.225934982 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.225951910 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.226706028 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.229584932 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.233175993 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.233212948 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.233311892 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.233329058 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.235028982 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.236941099 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.240556002 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.240621090 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.240658998 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.240674973 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:08.240737915 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.249106884 CET	49805	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:08.249125957 CET	443	49805	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:10.720966101 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:10.720966101 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:10.721044064 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:10.921804905 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:10.921909094 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:10.922853947 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:10.922854900 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:10.926523924 CET	49812	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:10.926559925 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:10.926851988 CET	49812	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:10.926887035 CET	49812	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:10.926892996 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.155431986 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.155469894 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.155555964 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.155994892 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.156016111 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.156125069 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.156235933 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.156254053 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.156598091 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.156608105 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.230189085 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.230564117 CET	49812	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:11.230576992 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.230918884 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.231616020 CET	49812	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:11.231682062 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.231739998 CET	49812	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:11.277903080 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.280366898 CET	49812	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:11.296189070 CET	49803	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:11.296212912 CET	443	49803	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.333292961 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.333363056 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.333487988 CET	49812	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:11.334180117 CET	49812	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:11.334197044 CET	443	49812	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:11.472434998 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.473769903 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.486185074 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.486195087 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.486427069 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.486448050 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.487554073 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.487658978 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.487719059 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.487986088 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.490438938 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.490484953 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.490565062 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.490597010 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.490629911 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.533906937 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.536189079 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.536204100 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.536206007 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.536214113 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.582643986 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.582751989 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.590244055 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.590261936 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.590301037 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.590315104 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.590349913 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.590359926 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.590372086 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.590379000 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.590379953 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.590403080 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.590436935 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.590445042 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.590586901 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.616950035 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.618905067 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.618959904 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.619079113 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.619573116 CET	49817	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.619606972 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.619667053 CET	49817	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.620242119 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.620280981 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.620351076 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.620577097 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.620596886 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.621189117 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.621212959 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.621520996 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.621699095 CET	49817	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.621711016 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.621997118 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.622011900 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.622443914 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.622457981 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.661900043 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.686640978 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.686669111 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.686724901 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.686731100 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.686784029 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.687450886 CET	49815	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.687468052 CET	443	49815	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.687939882 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.687966108 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.688043118 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.688922882 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.688952923 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.715555906 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.715584040 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.715672970 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.715696096 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.715718985 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.715764999 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.719842911 CET	49814	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.719866037 CET	443	49814	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.722338915 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.722378969 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.722445011 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.723129988 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.723144054 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.824186087 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.824632883 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.824647903 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.824990034 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.825546980 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.825611115 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.825884104 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.839201927 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.841432095 CET	49817	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.841442108 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.841862917 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.842406988 CET	49817	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.842480898 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.842659950 CET	49817	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.845102072 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.845326900 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.845338106 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.847120047 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.847477913 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.847486973 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.847759008 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.847815037 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.848150015 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.848232031 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.848277092 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.848602057 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.848651886 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.849001884 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.849064112 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.849313021 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.849318981 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.873903990 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.886399984 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.886667967 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.886677027 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.887747049 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.887846947 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.888474941 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.888535976 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.888674021 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.889904022 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.893903971 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.901941061 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.901948929 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.902017117 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.921443939 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.921803951 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.921821117 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.923284054 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.923348904 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.923768997 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.923850060 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.923959970 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.923969030 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.933342934 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.933352947 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:11.948631048 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.964440107 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:11.978444099 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.019525051 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.019548893 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.019596100 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.019613981 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.019625902 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.019664049 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.019689083 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.019778013 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.021157026 CET	49816	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.021172047 CET	443	49816	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.033260107 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.033296108 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.033375978 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.033430099 CET	49817	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.033987999 CET	49817	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.034003973 CET	443	49817	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.039815903 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.039848089 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.039913893 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.039918900 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.039932966 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.039962053 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.039966106 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.039971113 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.039985895 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.040010929 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.040019035 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.040057898 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.040098906 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.041501045 CET	49818	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.041510105 CET	443	49818	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.041821003 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.042010069 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.042059898 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.043850899 CET	49819	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.043864012 CET	443	49819	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.065895081 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.065917015 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.065985918 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.066205978 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.066217899 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.067630053 CET	49823	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.067658901 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.067843914 CET	49823	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.068500996 CET	49823	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.068517923 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.069626093 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.069653034 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.069706917 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.070136070 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.070156097 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.078280926 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.078305960 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.078378916 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.079322100 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.079334021 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.080455065 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.080550909 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.080634117 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.087178946 CET	49820	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.087196112 CET	443	49820	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.098493099 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.098527908 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.098663092 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.099813938 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.099826097 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.115571022 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.115607023 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.115664959 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.115679026 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.115698099 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.115719080 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.115756989 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.115801096 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.115828991 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.115847111 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.159110069 CET	49821	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.159131050 CET	443	49821	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.170810938 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.170859098 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.170938015 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.171482086 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.171499014 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.264708042 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.266160011 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.267560959 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.275687933 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.288916111 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.288928986 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.290546894 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.290652037 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.294382095 CET	49823	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.294392109 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.294780970 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.296612024 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.304522991 CET	49823	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.304599047 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.305191040 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.316571951 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.316577911 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.316749096 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.316775084 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.317014933 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.317480087 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.317595005 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.318082094 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.318105936 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.318264008 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.318329096 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.318701029 CET	49823	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.318953991 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.318967104 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.319196939 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.319261074 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.319936037 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.320210934 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.322858095 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.322993994 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.323767900 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.323848009 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.324280024 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.324289083 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.324373007 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.324801922 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.324824095 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.365906000 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.369529009 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.369828939 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.369867086 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.369904995 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.371342897 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.371423006 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.371898890 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.371974945 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.372076988 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.376437902 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.376482010 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.376485109 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.413929939 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.414999962 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.415009975 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.428889990 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.428920031 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.429011106 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.429685116 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.429713011 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.429830074 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.431179047 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.431189060 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.431711912 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.431727886 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.459587097 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.459606886 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.459661961 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.459672928 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.459721088 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.459731102 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.459743977 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.459764004 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.461793900 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.461875916 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.462018967 CET	49823	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.462464094 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.462564945 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.462661028 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.469944954 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.470021963 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.470297098 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.491377115 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.491471052 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.491524935 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.563050032 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.563157082 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.563271046 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.593512058 CET	49823	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.593535900 CET	443	49823	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.594526052 CET	49830	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.594563961 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.594625950 CET	49830	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.597683907 CET	49830	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.597697020 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.618040085 CET	49824	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.618068933 CET	443	49824	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.618880987 CET	49831	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.618906975 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.619079113 CET	49831	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.622832060 CET	49831	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.622845888 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.629142046 CET	49825	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.629163980 CET	443	49825	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.629961967 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.629976988 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.630230904 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.632574081 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.632585049 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.633390903 CET	49826	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.633411884 CET	443	49826	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.634289026 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.634320974 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.634443045 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.635186911 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.637870073 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.639378071 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.639394999 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.639595032 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.639607906 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.640100956 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.640114069 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.641053915 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.641141891 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.641771078 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.641838074 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.642085075 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.642091990 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.642095089 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.642204046 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.643033028 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.643192053 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.643337965 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.643345118 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.644099951 CET	49822	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.644112110 CET	443	49822	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.654983997 CET	49827	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.654999018 CET	443	49827	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.675791025 CET	49834	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.675832987 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.675900936 CET	49834	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.677311897 CET	49835	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.677341938 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.677438021 CET	49835	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.678169966 CET	49835	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.678178072 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.678515911 CET	49834	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.678527117 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.690603971 CET	49836	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:12.690629005 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:12.690774918 CET	49836	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:12.692212105 CET	49836	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:12.692222118 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:12.696187019 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.696225882 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.698741913 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.698764086 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.698837042 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.700285912 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.700299025 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.701672077 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.701689959 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.701770067 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.702270985 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.702281952 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.795298100 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.796753883 CET	49830	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.796766996 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.797132015 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.797983885 CET	49830	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.798044920 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.798441887 CET	49830	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.819953918 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.820264101 CET	49831	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.820274115 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.820630074 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.821671009 CET	49831	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.821738005 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.821820021 CET	49831	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.829680920 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.829721928 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.829793930 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.829849005 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.830410957 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.830425024 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.831481934 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.831549883 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.831711054 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.831779003 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.831864119 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.831872940 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.831954956 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.831970930 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.832000017 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.832048893 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.832050085 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.832048893 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.832412004 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.833213091 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.833266973 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.834063053 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.834073067 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.834614038 CET	49829	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.834631920 CET	443	49829	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.835237980 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.835264921 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.835351944 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.836812019 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.837533951 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.837543011 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.838239908 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.838270903 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.839374065 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.839459896 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.845901966 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.861896992 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.872472048 CET	49831	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.886542082 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.889195919 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.889312983 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.890520096 CET	49828	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.890532970 CET	443	49828	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.890990019 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.891025066 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.891088009 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.891899109 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.891913891 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.892642021 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.892656088 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.916064978 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.916254044 CET	49834	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.916263103 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.916889906 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.918060064 CET	49834	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.918138027 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.918648005 CET	49834	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.927287102 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.927751064 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.927758932 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.929280043 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.929359913 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.930120945 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.930181980 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.930454969 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.930460930 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.934807062 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.935091972 CET	49835	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.935101986 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.935530901 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.935919046 CET	49835	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.935985088 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.936161995 CET	49835	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.936767101 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.936964035 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.936983109 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.938013077 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.938077927 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.938549995 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.938620090 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.938790083 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.938798904 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.946939945 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.965944052 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.977683067 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.981913090 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.990859032 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.991033077 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:12.991081953 CET	49830	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.992556095 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.992971897 CET	49830	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:12.992993116 CET	443	49830	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.014209986 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.014297962 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.014595032 CET	49831	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.015213966 CET	49831	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.015228987 CET	443	49831	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.024137020 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.024231911 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.024501085 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.027755022 CET	49832	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.027765036 CET	443	49832	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.030916929 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.031004906 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.031058073 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.034760952 CET	49833	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.034776926 CET	443	49833	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.042637110 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.042814016 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.044785023 CET	49836	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:13.044791937 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.045094967 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.045109987 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.045223951 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.046178102 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.046260118 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.047995090 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.048055887 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.048340082 CET	49836	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:13.048429012 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.048626900 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.048633099 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.049094915 CET	49836	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:13.049119949 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.049137115 CET	49836	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:13.049187899 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.050297976 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.050323009 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.050395012 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.051094055 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.051105976 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.087796926 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.087901115 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.088000059 CET	49834	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.089008093 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.090321064 CET	49834	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.090336084 CET	443	49834	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.091590881 CET	49842	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.091626883 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.091825008 CET	49842	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.093875885 CET	49842	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.093888044 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.096302032 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.096385002 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.096450090 CET	49835	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.096573114 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.096688032 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.096893072 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.099411964 CET	49835	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.099435091 CET	443	49835	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.099896908 CET	49843	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.099935055 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.099999905 CET	49843	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.100028038 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.100112915 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.100177050 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.102058887 CET	49843	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.102083921 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.102749109 CET	49838	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.102765083 CET	443	49838	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.103796959 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.103816986 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.103880882 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.105927944 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.105941057 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.108721972 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.108748913 CET	49837	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.108763933 CET	443	49837	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.109451056 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.109477997 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.109535933 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.111076117 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.111092091 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.111783028 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.111790895 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.113039017 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.113104105 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.113773108 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.113836050 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.114082098 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.114090919 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.170955896 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.229809999 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.229839087 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.229907036 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.229914904 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.229939938 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.229947090 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.229985952 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.231662989 CET	49839	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.231673002 CET	443	49839	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.248055935 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.248876095 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.248898029 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.249264002 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.250459909 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.250483990 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.250534058 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.250579119 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.250628948 CET	49836	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:13.251804113 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.251940966 CET	49836	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:13.251946926 CET	443	49836	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.292252064 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.297899961 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.299972057 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.300062895 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.300122976 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.302030087 CET	49842	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.302057028 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.302556038 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.303333998 CET	49842	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.303426981 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.303761005 CET	49842	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.306102037 CET	49840	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.306112051 CET	443	49840	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.309807062 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.310107946 CET	49843	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.310122967 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.310770035 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.311322927 CET	49843	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.311449051 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.311840057 CET	49843	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.317815065 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.318208933 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.318221092 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.319581032 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.319772005 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.319835901 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.320955038 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.320967913 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.322057009 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.322091103 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.322144032 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.322170019 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.322402954 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.322410107 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.323482037 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.323558092 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.324125051 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.324135065 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.345905066 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.357906103 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.367338896 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.367364883 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.444611073 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.444631100 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.444699049 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.444717884 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.486264944 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.486448050 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.486530066 CET	49842	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.487281084 CET	49842	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.487297058 CET	443	49842	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.492464066 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.500199080 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.500287056 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.500310898 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.500376940 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.500390053 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.500458956 CET	49843	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.502278090 CET	49844	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.502295971 CET	443	49844	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.502602100 CET	49843	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.502614975 CET	443	49843	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.504899025 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.504987001 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.505599022 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.505899906 CET	49845	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.505916119 CET	443	49845	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.541162968 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.541172981 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.541212082 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.541225910 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.541264057 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.541276932 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.541347980 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.541398048 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.541398048 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.541409016 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.541487932 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.541532040 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.541677952 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.638145924 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.638214111 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.638279915 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.638284922 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.638298035 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.638329983 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.638329983 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.638335943 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.638377905 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.638390064 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.638396025 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.638446093 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.638453007 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.638489008 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.638586044 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.638889074 CET	49841	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.638905048 CET	443	49841	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.783762932 CET	49846	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:13.783793926 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.783866882 CET	49846	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:13.784188986 CET	49846	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:13.784203053 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:13.960231066 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.960270882 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:13.960350037 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.960845947 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:13.960866928 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.090214014 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:14.147680998 CET	49846	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:14.158773899 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.213244915 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.417854071 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.417879105 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.418171883 CET	49846	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:14.418185949 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:14.418386936 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.418708086 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:14.420799017 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.420887947 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.421262980 CET	49846	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:14.421331882 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:14.421519995 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.421621084 CET	49846	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:14.461904049 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.465893984 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:14.523629904 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.523652077 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.523726940 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.523744106 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.524069071 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:14.524144888 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:14.524193048 CET	49846	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:14.573484898 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.620012045 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620019913 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620054007 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620063066 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620071888 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.620126009 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.620337963 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620347023 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620394945 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.620404005 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620462894 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620498896 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.620505095 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620667934 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620711088 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.620712996 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620724916 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.620760918 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.716897964 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.716950893 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717011929 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717012882 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.717031956 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717055082 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.717060089 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717097044 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717144966 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717150927 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.717158079 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717202902 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.717209101 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717255116 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:14.717261076 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717273951 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:14.717319965 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:15.160934925 CET	49846	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:15.160953999 CET	443	49846	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:15.163731098 CET	49847	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:15.163753986 CET	443	49847	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:16.124604940 CET	49850	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.124630928 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.124631882 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.124659061 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.124701977 CET	49850	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.124815941 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.125852108 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:16.125880003 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:16.126000881 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:16.126981020 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:16.126991987 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:16.129852057 CET	49850	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.129861116 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.130136967 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.130153894 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.315440893 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:16.316025972 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:16.316046000 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:16.316478968 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:16.316828966 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:16.316895962 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:16.367396116 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:16.440774918 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.441226959 CET	49850	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.441234112 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.441582918 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.442575932 CET	49850	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.442636013 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.442977905 CET	49850	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.444322109 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.444529057 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.444549084 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.445102930 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.446718931 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.446788073 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.489916086 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.492253065 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.547801018 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.547878027 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.548111916 CET	49850	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.548679113 CET	49850	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.548698902 CET	443	49850	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.552067041 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.597904921 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.870095015 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.870125055 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.870153904 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.870171070 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.870186090 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.870198965 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.870209932 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.870253086 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.870277882 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.872237921 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.872255087 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.872328043 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.872334003 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.872386932 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.951344967 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:16.969307899 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.969331980 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.969408035 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.969419956 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.969510078 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.971007109 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.971024036 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.971143007 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.971152067 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.971254110 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.971550941 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.971637011 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.971674919 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.971714973 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.981911898 CET	49849	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:16.981925964 CET	443	49849	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:16.993913889 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.071425915 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.071479082 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.071508884 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.071532965 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.071540117 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.071561098 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.071578979 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.077821016 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.077899933 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.077912092 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.087785006 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.087810993 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.087867975 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.087882996 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.087933064 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.094501019 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.100981951 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.101051092 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.101068020 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.107234001 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.107309103 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.107326984 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.107337952 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.107573986 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.159801006 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.162659883 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.162683964 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.162714005 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.162725925 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.162774086 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.168287992 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.174429893 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.174462080 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.174474955 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.174485922 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.174565077 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.180615902 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.187103033 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.187186003 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.187237978 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.187248945 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.187798023 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.193727970 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.200248003 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.200290918 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.200316906 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.200330019 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.200367928 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.206198931 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.211345911 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.211381912 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.211405039 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.211417913 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.211539030 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.216626883 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.221962929 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.222049952 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.222065926 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.224975109 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.225039005 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.225050926 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.230194092 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.230262995 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.230278969 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.236282110 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.236351013 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.236363888 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.241470098 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.241530895 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.241544962 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.248204947 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.248290062 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.248298883 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.250157118 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.250236988 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.250247002 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.253827095 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.253885031 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.253905058 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.257257938 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.257309914 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.257318974 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.261061907 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.261168003 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.261178970 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.265121937 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.265172958 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.265182018 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.268654108 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.268731117 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.268742085 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.272116899 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.272196054 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.272207975 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.278043985 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.278110027 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.278120041 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.278131962 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.278306007 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.281728029 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.285393953 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.285429955 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.285435915 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.285445929 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.285487890 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.288463116 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.291517973 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.291558981 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.291604996 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.291620970 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.291701078 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.291707993 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.291726112 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:17.291784048 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.308448076 CET	49851	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:17.308470964 CET	443	49851	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:18.792557955 CET	49853	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:18.792587996 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:18.792671919 CET	49853	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:18.793993950 CET	49853	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:18.794006109 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.098854065 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.099160910 CET	49853	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.099174023 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.099617958 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.100281954 CET	49853	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.100358009 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.100573063 CET	49853	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.100596905 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.100617886 CET	49853	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.100666046 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.300645113 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.300754070 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.300801992 CET	49853	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.317749023 CET	49853	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.317770004 CET	443	49853	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.382036924 CET	49854	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.382057905 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.382113934 CET	49854	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.382493019 CET	49854	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.382503033 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.688493967 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.688853025 CET	49854	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.688879013 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.689251900 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.689838886 CET	49854	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.689925909 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.690037012 CET	49854	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.733906031 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.792376995 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.792454958 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:19.792501926 CET	49854	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.793798923 CET	49854	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:19.793828011 CET	443	49854	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.203691006 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.203715086 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.204461098 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.204909086 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.204925060 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.512438059 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.512761116 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.512770891 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.513108015 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.513751030 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.513751030 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.513777971 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.513817072 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.513854980 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.556226969 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.717282057 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.717381001 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.717928886 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.719289064 CET	49855	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.719305992 CET	443	49855	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.725944042 CET	49856	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.725980043 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:20.726083994 CET	49856	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.726339102 CET	49856	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:20.726350069 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.034176111 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.034491062 CET	49856	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.034506083 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.034852028 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.041884899 CET	49856	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.041956902 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.042381048 CET	49856	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.085906982 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.092782021 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.092834949 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.092905998 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.093233109 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.093242884 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.093342066 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.093902111 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.093916893 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.093971014 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.096084118 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.096100092 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.096391916 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.096400976 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.096568108 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.096600056 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.144057989 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.144309998 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.144359112 CET	49856	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.145092964 CET	49856	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.145100117 CET	443	49856	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.310816050 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.311105013 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.311120987 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.311492920 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.311814070 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.311878920 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.354815006 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.430888891 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.441119909 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.447974920 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.448009014 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.448113918 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.448132038 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.448441982 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.448534012 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.449130058 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.449206114 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.449563026 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.449637890 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.450107098 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.497905016 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.503779888 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.770914078 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.770919085 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.770922899 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.771001101 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.771015882 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.771079063 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.771171093 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.771197081 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.771248102 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.771253109 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.771312952 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.807801962 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.853909016 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.869251966 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.869271040 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.869364023 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.869379997 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.869421005 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.869532108 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.869548082 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.869602919 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.869609118 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.869673014 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.869724035 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.869780064 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.869784117 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.869815111 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.869865894 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.872325897 CET	49857	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:21.872342110 CET	443	49857	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:21.926333904 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.926388025 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.926423073 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.926441908 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.926455975 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.926490068 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.926496983 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.932353973 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.932604074 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.932630062 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.938344002 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.938425064 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.938435078 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.944479942 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.944581985 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.944591045 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.950644970 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.950695038 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.950702906 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.956717014 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:21.956773043 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:21.956780910 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.011389971 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.011396885 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.013644934 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.013725042 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.013731956 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.016549110 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.016606092 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.016613007 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.022876024 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.022927999 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.022933960 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.028816938 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.028870106 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.028877974 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.035029888 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.035079956 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.035087109 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.041057110 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.041109085 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.041115999 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.047164917 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.047219038 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.047226906 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.053291082 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.053344011 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.053352118 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.059429884 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.059525967 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.059531927 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.065283060 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.065349102 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.065356970 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.070681095 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.070739985 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.070746899 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.076137066 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.076206923 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.076212883 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.081815958 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.081881046 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.081893921 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.086954117 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.087006092 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.087013006 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.092408895 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.092477083 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.092487097 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.097881079 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.097948074 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.097954035 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.103378057 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.103454113 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.103461027 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.107073069 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.107120037 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.107126951 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.110928059 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.111016035 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.111022949 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.114440918 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.114489079 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.114495993 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.117912054 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.117968082 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.117974997 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.121412039 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.121467113 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.121474028 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.124982119 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.125144958 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.125154018 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.128474951 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.128568888 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.128576994 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.133733034 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.133763075 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.133789062 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.133799076 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.134027958 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.137263060 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.140762091 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.140803099 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.140820026 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.140829086 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.140863895 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.144311905 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.147749901 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.147795916 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.147803068 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.147881031 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.147968054 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.148075104 CET	49859	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:22.148082972 CET	443	49859	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:22.339782953 CET	443	49807	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:22.339859009 CET	443	49807	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:22.340002060 CET	49807	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:22.341146946 CET	443	49806	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:22.341207027 CET	443	49806	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:22.341511011 CET	49806	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:22.575365067 CET	49806	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:22.575383902 CET	443	49806	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:22.575417042 CET	49807	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:22.575436115 CET	443	49807	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:24.025047064 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.025110960 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.025192022 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.025202990 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.224982977 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.225069046 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.225286961 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.225548983 CET	49858	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.225559950 CET	443	49858	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.629573107 CET	49864	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.629600048 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.629674911 CET	49864	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.630367994 CET	49864	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.630382061 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.935043097 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.935766935 CET	49864	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.935794115 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.936198950 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.936604023 CET	49864	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.936676025 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:24.936877012 CET	49864	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:24.981909037 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.038404942 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.038485050 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.038593054 CET	49864	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.077100039 CET	49865	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.077132940 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.077214956 CET	49865	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.078011990 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.078036070 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.078289986 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.079926968 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:25.079967022 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:25.080034971 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:25.081410885 CET	49868	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:25.081420898 CET	443	49868	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:25.081523895 CET	49868	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:25.084532976 CET	49869	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:25.084542990 CET	443	49869	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:25.084702015 CET	49869	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:25.085880995 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:25.085900068 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:25.086128950 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.086144924 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.086546898 CET	49865	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.086560011 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.087548971 CET	49869	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:25.087559938 CET	443	49869	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:25.088154078 CET	49868	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:25.088170052 CET	443	49868	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:25.170027971 CET	49864	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.170058012 CET	443	49864	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.309257984 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:25.309629917 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:25.309653044 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:25.310050011 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:25.310703039 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:25.310772896 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:25.319596052 CET	443	49868	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:25.319899082 CET	49868	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:25.319916010 CET	443	49868	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:25.320280075 CET	443	49868	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:25.321465969 CET	49868	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:25.321594954 CET	443	49868	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:25.322365999 CET	443	49869	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:25.324496984 CET	49869	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:25.324503899 CET	443	49869	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:25.324951887 CET	443	49869	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:25.325419903 CET	49869	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:25.325489044 CET	443	49869	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:25.352606058 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:25.373125076 CET	49868	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:25.373255968 CET	49869	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:25.442075014 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.442408085 CET	49865	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.442424059 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.442789078 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.444147110 CET	49865	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.444217920 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.444545984 CET	49865	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.445261002 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.450110912 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.450124025 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.450696945 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.451412916 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.451491117 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.485913038 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.497488976 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.550966024 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.551047087 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.551177025 CET	49865	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.552083969 CET	49865	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.552100897 CET	443	49865	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.555172920 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.555183887 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.571799994 CET	49870	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.571839094 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.571926117 CET	49870	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.574978113 CET	49870	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.574994087 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.821716070 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.821739912 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.821770906 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.821788073 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.821800947 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.821835995 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.821852922 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.821907997 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.821907997 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.821970940 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.821994066 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.822046041 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.822046041 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.822052956 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.822103977 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.878804922 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.884074926 CET	49870	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.884084940 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.884543896 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.887132883 CET	49870	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.887216091 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.887322903 CET	49870	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.887340069 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.887411118 CET	49870	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.887428045 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.889717102 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:25.920193911 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.920217991 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.920376062 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.920391083 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.920464993 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.920523882 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.920603037 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:25.920622110 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.921401978 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.921401978 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:25.933902979 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.012316942 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.012386084 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.012418985 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.012448072 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.012458086 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.012485027 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.012504101 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.018203020 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.018254995 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.018264055 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.024288893 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.024359941 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.024369955 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.030411959 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.030461073 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.030469894 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.036535025 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.036597967 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.036607027 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.042685986 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.042792082 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.042800903 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.085330963 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.085346937 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.089164019 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:26.089258909 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:26.089340925 CET	49870	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:26.089946985 CET	49870	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:26.089961052 CET	443	49870	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:26.101078033 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.101156950 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.101167917 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.102803946 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.103008986 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.103015900 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.108923912 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.108975887 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.108983994 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.114932060 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.115006924 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.115015030 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.121079922 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.121143103 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.121151924 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.127253056 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.127343893 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.127356052 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.133251905 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.133304119 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.133317947 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.139403105 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.139483929 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.139492035 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.145490885 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.145550966 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.145559072 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.151006937 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.151060104 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.151067019 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.156542063 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.157665968 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.157677889 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.162185907 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.162231922 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.162240028 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.167910099 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.167962074 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.167969942 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.173113108 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.173342943 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.173352957 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.178612947 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.178682089 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.178689957 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.184185028 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.184237003 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.184246063 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.189809084 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.189857960 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.189866066 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.193864107 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.193931103 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.193938017 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.197685003 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.197742939 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.197751045 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.201369047 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.201445103 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.201452017 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.205054998 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.205162048 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.205168009 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.208362103 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.208456039 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.208462000 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.211894035 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.211962938 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.211970091 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.215480089 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.215662956 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.215671062 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.221018076 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.221050024 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.221097946 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.221107006 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.221225977 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.224960089 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.228391886 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.228415966 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.228470087 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.228478909 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.228610039 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.231118917 CET	49866	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:26.231137991 CET	443	49866	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:26.231699944 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.234983921 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.235040903 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.235054970 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.235126019 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.235198975 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.235198975 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:26.235209942 CET	443	49867	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:26.235260010 CET	49867	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:27.396996021 CET	49874	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:27.397038937 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:27.397102118 CET	49874	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:27.398020983 CET	49874	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:27.398039103 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:27.702333927 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:27.702631950 CET	49874	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:27.702650070 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:27.703012943 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:27.703499079 CET	49874	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:27.703567982 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:27.704001904 CET	49874	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:27.745913029 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:27.805738926 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:27.805996895 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:27.806058884 CET	49874	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:27.889029980 CET	49874	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:27.889061928 CET	443	49874	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:28.573911905 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:28.573940039 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:28.574011087 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:28.575220108 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:28.575246096 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:28.881269932 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:28.929346085 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:28.984919071 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:28.984930038 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:28.985410929 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:28.986694098 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:28.986758947 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:28.987653971 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:28.987679958 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:28.987875938 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:28.987904072 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.033409119 CET	49877	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.033442020 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.033504963 CET	49877	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.033848047 CET	49877	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.033864021 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.189707994 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.189793110 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.189851046 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.226078987 CET	49876	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.226109982 CET	443	49876	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.318636894 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.318674088 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.318757057 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.320276022 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.320312977 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.320456982 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.322586060 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.322598934 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.322881937 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.322896004 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.332504034 CET	49881	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.332535982 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.332607031 CET	49881	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.333070993 CET	49881	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.333084106 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.341536045 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.342936993 CET	49877	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.342952967 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.343338013 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.343750000 CET	49877	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.343818903 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.343970060 CET	49877	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.344000101 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.344089031 CET	49877	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.344095945 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.546319962 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.546423912 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.546498060 CET	49877	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.575896025 CET	49877	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.575923920 CET	443	49877	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.583287954 CET	49882	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.583313942 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.583415985 CET	49882	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.584129095 CET	49882	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.584141016 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.637837887 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.639000893 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.639842033 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.639849901 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.640058994 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.640069008 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.641422987 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.641593933 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.641661882 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.641680956 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.641906023 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.643120050 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.643183947 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.643548965 CET	49881	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.643568993 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.643901110 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.643906116 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.644016981 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.644361973 CET	49881	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.644419909 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.644561052 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.644567013 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.644758940 CET	49881	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.689907074 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.696827888 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.696837902 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.696903944 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.742969036 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.747051001 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.747066021 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.747076035 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.747153044 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.747160912 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.747287989 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.747514963 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.747523069 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.747555971 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.747591019 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.747591972 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.747605085 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.747611046 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.747657061 CET	49881	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.747672081 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.747672081 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.748369932 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.748435974 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.779968023 CET	49881	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.779999018 CET	443	49881	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.814826965 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.814867973 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.815146923 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.815396070 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.815439939 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.815498114 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.816196918 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.816227913 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.816303015 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.816945076 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.816976070 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.817179918 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.828561068 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.829262018 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.829277039 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.829617023 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.829627037 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.830295086 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.830311060 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.830445051 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.830461025 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.846406937 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.846544981 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.847361088 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.847441912 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.847529888 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.847584963 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.847752094 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.847803116 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.847899914 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.847945929 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.848066092 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848097086 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848154068 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.848154068 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.848164082 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848426104 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848465919 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848484039 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.848490000 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848556995 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848611116 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848617077 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.848622084 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848673105 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.848673105 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.848679066 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848695993 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.848756075 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.859352112 CET	49879	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.859366894 CET	443	49879	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.860094070 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.860124111 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.860193968 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.873447895 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.873462915 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.873897076 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.905327082 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.929475069 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.929503918 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.929511070 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.929573059 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.929579973 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.929608107 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.929613113 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.929636002 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.929688931 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.929688931 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.929701090 CET	443	49880	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.929878950 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.939201117 CET	49882	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.939215899 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.940268040 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.941009045 CET	49882	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.941159964 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.941179991 CET	49882	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:29.945254087 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.945254087 CET	49880	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.946481943 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.946507931 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.946604967 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.947227955 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:29.947238922 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:29.969031096 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:29.969042063 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:29.969115019 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:29.969784021 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:29.969794035 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:29.985908985 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:29.992688894 CET	49882	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:30.042579889 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:30.042654991 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:30.042728901 CET	49882	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:30.044688940 CET	49882	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:30.044698954 CET	443	49882	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:30.046469927 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.047348976 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.047357082 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.048247099 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.048326969 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.048841000 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.048893929 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.049021006 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.069431067 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.069689989 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.069699049 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.070782900 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.070836067 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.076489925 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.076601982 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.076699018 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.089236021 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.089323997 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.089325905 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.090177059 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.090187073 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.090245008 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.090267897 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.090351105 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.090365887 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.090622902 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.090993881 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.091053009 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.091202974 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.091223001 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.091279030 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.091418982 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.091470957 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.091754913 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.091814041 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.091973066 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.091986895 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.092322111 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.092384100 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.092464924 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.092472076 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.093902111 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.102962017 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.102977037 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.117687941 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.117700100 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.134413958 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.135731936 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.137913942 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.151742935 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.152381897 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.162837982 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.167820930 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.197587967 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.214268923 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.241264105 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.241344929 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.241411924 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.258338928 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.258358002 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.258414984 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.258424997 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.258676052 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.258733988 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.258740902 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.258835077 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.258929014 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.258981943 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.259119987 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259161949 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.259169102 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259210110 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.259213924 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259227037 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259272099 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.259305000 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259342909 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.259416103 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259437084 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259478092 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.259490013 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259555101 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259596109 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.259601116 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259619951 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.259635925 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.259665966 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.265892029 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.265911102 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.265944958 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.266002893 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.266002893 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.266026974 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.266036987 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.266068935 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.266185999 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.266272068 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.362397909 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.362466097 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.362487078 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.362499952 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.362543106 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.362543106 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.362716913 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.362782955 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.362838984 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.362910986 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.363039970 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.363096952 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.363461971 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.363523006 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.407238007 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.407330990 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.459312916 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.459403992 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.459409952 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.459450960 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.514333010 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.514345884 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.514481068 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.514492989 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.515547037 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.515564919 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.515609980 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.515671968 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.515718937 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.516535997 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.516608000 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.517187119 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.517261028 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.519452095 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.519460917 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.520078897 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.520085096 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.566926956 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.566930056 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.617063999 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617113113 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617161036 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.617167950 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617206097 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617391109 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617438078 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.617444038 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617481947 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.617487907 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617583990 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617717981 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617762089 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.617769957 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617813110 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.617867947 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617958069 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.617988110 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.618025064 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.618025064 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.618036985 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.618065119 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.618102074 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.618130922 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.618140936 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.618148088 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.618304968 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.618310928 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.618961096 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.618988991 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.619033098 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.619040012 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.619075060 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.619080067 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.619133949 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.619868040 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.619896889 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.619909048 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.619915962 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.619940042 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.619971037 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.620007038 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.620012045 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.620021105 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.620064020 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.620106936 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.620112896 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.620157957 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.620361090 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.620395899 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.620407104 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.620438099 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.620446920 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.620466948 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.620568037 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.620577097 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.620599985 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.620615959 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.620625973 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.620678902 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.620842934 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.620970011 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.621009111 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.621047020 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.621051073 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.621057987 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.621089935 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.621716022 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.621759892 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.621762991 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.621769905 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.621807098 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.621813059 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.621891022 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.621933937 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.621941090 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.661932945 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.704838991 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.704925060 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.705334902 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.705380917 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.705440044 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.705497980 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.705506086 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.705550909 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.706058025 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.706103086 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.706263065 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.706311941 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.707146883 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.707192898 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.707201958 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.707209110 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.707237959 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.707263947 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.707863092 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.707916021 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.708533049 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.708589077 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.708609104 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.708648920 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.709362030 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.709418058 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.709444046 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.709491968 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.710354090 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.710388899 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.710424900 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.710432053 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.710443974 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.710550070 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.710602045 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.710612059 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.710654020 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.716779947 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.716794968 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.716844082 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.716847897 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.716866016 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.716872931 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.716912031 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.716912985 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.716924906 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.716970921 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.717009068 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.717044115 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.717065096 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.717073917 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.717153072 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.717194080 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.717199087 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.717204094 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.717240095 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.717329979 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.717392921 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.792644024 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.792723894 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.793056011 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.793111086 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.793117046 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.793131113 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.793160915 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.793581009 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.793638945 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.793647051 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.793663979 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.793688059 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.793693066 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.793720007 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.794440031 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.794493914 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.794501066 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.794538975 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.794544935 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.794557095 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.794585943 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.795346022 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.795401096 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.795408964 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.795449972 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.795855045 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.795919895 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.795926094 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.795998096 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.796005011 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.796011925 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.796041012 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.796865940 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.796924114 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.796931028 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.796964884 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.796971083 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.796976089 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.797015905 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.797760963 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.797826052 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.797833920 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.797847986 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.797868967 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.797874928 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.797908068 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.798680067 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.798744917 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.798751116 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.798793077 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.799448013 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.799504042 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.799510956 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.799520016 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.799549103 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.799561024 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.799566031 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.799582005 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.799614906 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.800173044 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.800225019 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.800230026 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.800299883 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.800349951 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.800355911 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.801132917 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.801187038 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.801198959 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.801201105 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.801240921 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.802691936 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.802721024 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.802758932 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.802768946 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.802793026 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.804615974 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.804646969 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.804676056 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.804682970 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.804712057 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.806545973 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.806576014 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.806610107 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.806619883 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.806651115 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.808147907 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.808173895 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.809432983 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.809571981 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:30.813036919 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.813110113 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:30.813574076 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.813653946 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.813663960 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.813719034 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.814148903 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.814213991 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.814662933 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.814726114 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.814732075 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.814948082 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.814975023 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.815031052 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.815335989 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.815387011 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.815737963 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.815798998 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.815964937 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.816023111 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.910104990 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.910176039 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.910204887 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.910214901 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.910248041 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.910275936 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.910334110 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.910341024 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.910387039 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.910429955 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.910434961 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.910446882 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.910476923 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.910481930 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.911427975 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.911462069 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.911528111 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.911705017 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.911761045 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.911827087 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.911874056 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:30.911878109 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.911911011 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:30.912144899 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.203119993 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.203198910 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:31.724602938 CET	49883	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.724630117 CET	443	49883	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.725492001 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.725523949 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.725579023 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.731745958 CET	49885	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.731765985 CET	443	49885	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.732371092 CET	49895	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.732398987 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.732474089 CET	49895	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.735881090 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.735903025 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.737493038 CET	49895	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.737504959 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.796808004 CET	49884	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.796821117 CET	443	49884	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.797822952 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.797843933 CET	443	49896	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.797907114 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.798214912 CET	49886	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.798233986 CET	443	49886	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.799166918 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.799184084 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.799314976 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.815248966 CET	49887	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.815258980 CET	443	49887	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.816061020 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.816076994 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.816133976 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.818861961 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:31.818872929 CET	443	49896	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.932972908 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.934037924 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:31.981911898 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.013655901 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.013674974 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.016242027 CET	443	49896	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.020555019 CET	49895	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.028707981 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.028724909 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.030998945 CET	49895	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.031007051 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.031171083 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.031184912 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.031538963 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.031616926 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.064621925 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.080574989 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.210684061 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.216249943 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.216262102 CET	443	49896	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.217236996 CET	49892	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.217245102 CET	443	49892	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.217694998 CET	443	49896	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.217757940 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.217782974 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.217808008 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.217868090 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.220562935 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.220673084 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.221200943 CET	49895	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.221375942 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.221951008 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.221962929 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.223117113 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.223268986 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.224280119 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.224350929 CET	443	49896	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.225083113 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.225100994 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.229731083 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.229774952 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.229854107 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.231044054 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.231250048 CET	49895	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.231714964 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.231738091 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.232773066 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.232839108 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.233670950 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.233676910 CET	443	49896	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.234312057 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.234376907 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.234683037 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.234692097 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.244996071 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.245007992 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.273906946 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.273926020 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.329644918 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.329737902 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.329781055 CET	49895	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.331016064 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.331088066 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.331137896 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.331156015 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.331191063 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.331213951 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.331216097 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.331237078 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.331248999 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.331293106 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.331299067 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.331348896 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.331384897 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.332058907 CET	443	49896	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.332210064 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.336992979 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.400859118 CET	49893	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:32.400877953 CET	443	49893	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:32.405913115 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.405993938 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.405994892 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.406054974 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.422003031 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.422023058 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.422080040 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.422091961 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.422103882 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.422123909 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.422161102 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.422204018 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.424736977 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.425175905 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.425189972 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.425523043 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.426659107 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.426724911 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.426810980 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.441945076 CET	49895	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.441965103 CET	443	49895	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.442486048 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.442506075 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.442562103 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.444139004 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.444154024 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.467372894 CET	49896	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.467387915 CET	443	49896	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.468147039 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.468169928 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.468225956 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.469480038 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.469491005 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.473906994 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.491328001 CET	49894	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.491345882 CET	443	49894	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.491827965 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.491852999 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.491909981 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.493130922 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.493144989 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.494492054 CET	49897	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.494513988 CET	443	49897	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.494916916 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.494941950 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.495242119 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.495874882 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.495886087 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.499347925 CET	49898	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.499366999 CET	443	49898	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.499686003 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.499708891 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.499754906 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.500550032 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.500562906 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.551377058 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:32.551403999 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:32.551457882 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:32.552081108 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:32.552093029 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:32.553612947 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.553633928 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.553685904 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.554543972 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.554558039 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.619826078 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.619846106 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.619893074 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.619904995 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.619924068 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.619949102 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.619987965 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.622442961 CET	49899	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.622457027 CET	443	49899	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.623068094 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.623092890 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.623142004 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.626189947 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.626204967 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.642043114 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.642460108 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.642478943 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.642867088 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.643351078 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.643421888 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.643629074 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.666357994 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.674912930 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.674928904 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.675441980 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.675968885 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.676043034 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.676321983 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.685911894 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.689398050 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.689754963 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.689768076 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.690838099 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.690891981 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.691507101 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.691570044 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.691865921 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.691874027 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.694880962 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.696362019 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.696371078 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.697458029 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.697598934 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.698384047 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.698384047 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.698395014 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.698442936 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.708297968 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.717916965 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.733268976 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.733288050 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.734451056 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.734508991 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.735125065 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.735193014 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.735543013 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.735551119 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.750690937 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.750977993 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.750988007 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.751971006 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.752032995 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.753972054 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.754034996 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.754481077 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.754487991 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.816698074 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:32.817059994 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:32.817074060 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:32.817440987 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:32.817491055 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:32.818129063 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:32.818208933 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:32.820233107 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:32.820303917 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:32.820517063 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:32.820525885 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:32.820563078 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.820578098 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.820581913 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.822323084 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.828690052 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.828700066 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.829709053 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.829765081 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.830607891 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.830668926 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.831036091 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.831043959 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.835829020 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.835839987 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.838124990 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.838149071 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.838192940 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.838210106 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.838279009 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.838346958 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.838354111 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.838396072 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.862082005 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.862108946 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.862155914 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.862166882 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.862212896 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.862782001 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.862788916 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.862819910 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.862840891 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.862848997 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.862895966 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.863162994 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.863221884 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.883332968 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.883436918 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.883482933 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.887010098 CET	49904	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.887025118 CET	443	49904	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.887870073 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.887902021 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.887962103 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.890232086 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890289068 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.890296936 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890371084 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.890387058 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890407085 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890420914 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890446901 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890455961 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890471935 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.890476942 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890491962 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.890541077 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.890614986 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890621901 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890645981 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.890655041 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.890688896 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.903713942 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.903743982 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.903752089 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.903795004 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.903810978 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.903822899 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.903829098 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.903842926 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.903850079 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.903851032 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.903879881 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.903882027 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.903909922 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.904009104 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.904016018 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.904058933 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.904068947 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.934545994 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.934559107 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.934591055 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.934607029 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.934645891 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.934657097 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.934664011 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.934695005 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.934796095 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.934842110 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.934849977 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.934890032 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.934902906 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.934953928 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.935076952 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.935126066 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.944233894 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.944300890 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.944346905 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.944837093 CET	49908	443	192.168.2.5	142.251.16.156
Feb 20, 2024 16:13:32.944848061 CET	443	49908	142.251.16.156	192.168.2.5
Feb 20, 2024 16:13:32.958642960 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.958704948 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.958714008 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.958758116 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.958765984 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.958771944 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.958810091 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.958816051 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.958872080 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.958910942 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.959575891 CET	49903	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.959589005 CET	443	49903	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.960417986 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.960448980 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.960504055 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.965277910 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.965291023 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.986728907 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.986742973 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.986772060 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.986784935 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.986857891 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.986898899 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.986906052 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.986948013 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.987003088 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.987005949 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.987108946 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.987166882 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.987171888 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.987206936 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.987277985 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.987339973 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.987343073 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.987361908 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.987375021 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.987395048 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.988346100 CET	49905	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.988358021 CET	443	49905	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.989164114 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.989196062 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:32.989281893 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.990439892 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:32.990452051 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000303030 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000341892 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000375032 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.000386953 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000432968 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.000509024 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000516891 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000540018 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000561953 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.000569105 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000582933 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.000685930 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000693083 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000746965 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000762939 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.000770092 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000807047 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.000809908 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.000902891 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.000910044 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.001014948 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.001068115 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.001074076 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.001239061 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.001271963 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.001319885 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.001319885 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.001328945 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018105030 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018162012 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018203974 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.018213987 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018234015 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.018320084 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018331051 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018385887 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.018393040 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018428087 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.018510103 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018518925 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018542051 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.018565893 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.029901981 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:33.030174017 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:33.030997992 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.031069040 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.031207085 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.031260014 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.031264067 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.031280041 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.031317949 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.031531096 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.031589985 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.031791925 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.031850100 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.031867981 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.031955957 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.031997919 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.058207035 CET	49902	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.058214903 CET	443	49902	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.063601971 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.063612938 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.063688040 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.064754963 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.064769030 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.086987019 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.088375092 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:33.088449001 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:33.088848114 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:33.091475964 CET	49907	443	192.168.2.5	142.251.40.142
Feb 20, 2024 16:13:33.091492891 CET	443	49907	142.251.40.142	192.168.2.5
Feb 20, 2024 16:13:33.092263937 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.092274904 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.092706919 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.094614983 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.094614983 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.094631910 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.094692945 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.097351074 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.097512007 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.097522020 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.098160028 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.098167896 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.098195076 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.098278046 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.098287106 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.098345041 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.098490000 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.098498106 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.098627090 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.098664999 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.098673105 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.098699093 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.099752903 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.099760056 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.099880934 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.099889040 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.100048065 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.100671053 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.100677967 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.100881100 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.100948095 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.100955009 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.100994110 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.101104021 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.101368904 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.101375103 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.101417065 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.101701021 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.101723909 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.101730108 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.101775885 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.101775885 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.101783991 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.101840973 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.102957964 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.102966070 CET	443	49906	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.102983952 CET	49906	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.108323097 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.108355045 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.110539913 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.114425898 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114439964 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114468098 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.114480972 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114500999 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.114511967 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114559889 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.114559889 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.114595890 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114605904 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114629984 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114660025 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.114734888 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114743948 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114864111 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.114871025 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114947081 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.114957094 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.115034103 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.115041018 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.115145922 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.115174055 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.115185022 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.115209103 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.115255117 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.115262032 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.115436077 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.118408918 CET	49910	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.118418932 CET	443	49910	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.146904945 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.146939039 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.147242069 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.147742987 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.147756100 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.162087917 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.162436962 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.162445068 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.162883997 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.163311005 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.163371086 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.163541079 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.187084913 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.187342882 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.187352896 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.188384056 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.188496113 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.188812017 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.188870907 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.188935041 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.188940048 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.209906101 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.215115070 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.226952076 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.262005091 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.265403032 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.265425920 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.266577959 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.266932011 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.267065048 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.267137051 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.267298937 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.267311096 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.282207966 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.282409906 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.282418966 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.282448053 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.282478094 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.282484055 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.282538891 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.282538891 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.282601118 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.282614946 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.282692909 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.282718897 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.282764912 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.284029961 CET	49912	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.284049034 CET	443	49912	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.286513090 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.286551952 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.286684990 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.286829948 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.286848068 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.311937094 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.312267065 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.312278032 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.312606096 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.314599991 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.314662933 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.314817905 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.326199055 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.339723110 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.344593048 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.344898939 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.344913006 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.345927000 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.346049070 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.346385002 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.346447945 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.346509933 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.346518040 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357053995 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357095957 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357242107 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357249975 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357270956 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357317924 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.357330084 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357348919 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.357466936 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357500076 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.357511997 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357533932 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.357666969 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357755899 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.357945919 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.361896992 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.361929893 CET	49913	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.361943960 CET	443	49913	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.369363070 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.369389057 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.372279882 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.372621059 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.372628927 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.382895947 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.382917881 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.382949114 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.382973909 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.382982969 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383011103 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.383013964 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383033037 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383047104 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.383238077 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.383285999 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383320093 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383358002 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.383364916 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383522034 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383616924 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.383622885 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383713961 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383737087 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.383742094 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383856058 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.383857965 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.384016991 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.384022951 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.384141922 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.384243965 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.384249926 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.384581089 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.459569931 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.459635973 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.459662914 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.459681988 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.459729910 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.459739923 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.459758043 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.459770918 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.459826946 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.459847927 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.460191965 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.468208075 CET	49915	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.468219995 CET	443	49915	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.471748114 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.471771002 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.471870899 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.472774982 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.472791910 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.483238935 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.483324051 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.483431101 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.483447075 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.483458996 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.483491898 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.483491898 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.483500004 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.483643055 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.483766079 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.483887911 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.484535933 CET	49914	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.484546900 CET	443	49914	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.484940052 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.506563902 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.506814003 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.506825924 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.506973982 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.506982088 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.507105112 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.507112980 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.507124901 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.507177114 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.507183075 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.507241964 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.507277966 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.507339954 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.515001059 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.515017986 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.515471935 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.538161039 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.538161039 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.538181067 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.538278103 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.539638042 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.541184902 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.541204929 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.541237116 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.541263103 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.541273117 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.541341066 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.541356087 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.541376114 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.544425011 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.552674055 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.552700996 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.552831888 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.553735971 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.553750038 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.566184044 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.566217899 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.566332102 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.567250013 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.567269087 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.569885015 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.575001955 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.575011015 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.575357914 CET	49916	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.575372934 CET	443	49916	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.575424910 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.577375889 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.577438116 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.577475071 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.578365088 CET	49917	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.578385115 CET	443	49917	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.617907047 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.635549068 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.635576010 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.636147976 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.636790991 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.636804104 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.669471025 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.669956923 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.669969082 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.670356989 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.670926094 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.670985937 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.674948931 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.679999113 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680161953 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.680175066 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680188894 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680196047 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680218935 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680242062 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.680253983 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680274963 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.680367947 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680375099 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680429935 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.680437088 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680555105 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680562973 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680612087 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.680612087 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.680619955 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680675030 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680681944 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680725098 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680747986 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.680756092 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680813074 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.680835009 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.680999994 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.710855007 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.716037035 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.716064930 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.716161966 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.718425989 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.718460083 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.720690012 CET	49919	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.720701933 CET	443	49919	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.721204996 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.721239090 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.721342087 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.721847057 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.721862078 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.721894979 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.763772011 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.763935089 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.763942957 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.763964891 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.764060020 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.764060020 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.764071941 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.764131069 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.764137983 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.764204979 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.764209986 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.764386892 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.764393091 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.764470100 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.764506102 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.764511108 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.764560938 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.764565945 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.765963078 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.788063049 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.788455963 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.789999008 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.790009022 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.791066885 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.791204929 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.791208982 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.791220903 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.791728973 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.791960001 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.792021990 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.792191982 CET	49920	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.792207003 CET	443	49920	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.792829037 CET	49930	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.792855978 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.792946100 CET	49930	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.793798923 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.793867111 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.794878960 CET	49930	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.794883013 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.794888973 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.794894934 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.795362949 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.836435080 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.837440014 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.837450981 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.838666916 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.839123011 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.839282990 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.839673996 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.841907978 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.866950035 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.866982937 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.867120028 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.867151022 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.867983103 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.867994070 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.868022919 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.868036032 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.868065119 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.868088007 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.868191004 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.868372917 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.868479013 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.868797064 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.868900061 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.869196892 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.869287968 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.869307041 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.869314909 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.869434118 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.869529963 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.869625092 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.885906935 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.944694042 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.944720030 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.944766998 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.944825888 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.944839001 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.944860935 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.944941998 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.945046902 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.945054054 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.945152044 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.945244074 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.945275068 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.945282936 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.945321083 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.945430040 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.945512056 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.945519924 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.945600033 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.959573030 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.959584951 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.959757090 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.959768057 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.959777117 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.959834099 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.959834099 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.961491108 CET	49923	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.961503029 CET	443	49923	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.963814974 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.963965893 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.964581013 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.964677095 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.964699984 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.964706898 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.964731932 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.964783907 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.964865923 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.965394974 CET	49921	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.965405941 CET	443	49921	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.968673944 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.969527006 CET	49933	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.969536066 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.969621897 CET	49933	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.969789028 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.969798088 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.970145941 CET	49933	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.970155954 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.971215963 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.971703053 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.971781969 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.971900940 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.972784996 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.973058939 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.973067045 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.973978043 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.974098921 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.974792004 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.974844933 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.975095034 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.991795063 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.992021084 CET	49930	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.992038965 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.992408991 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.993222952 CET	49930	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:33.993289948 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:33.993597031 CET	49930	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.017896891 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.017909050 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.024020910 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.024046898 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.029079914 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.029145002 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.029272079 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.029285908 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.029366970 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.029520035 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.029680967 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.029871941 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.030093908 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.030219078 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.030278921 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.030841112 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.030972958 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.031932116 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.032087088 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.037894964 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.039604902 CET	49930	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.041268110 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.041351080 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.042161942 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.042227983 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.042758942 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.042819023 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.042893887 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.042943001 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.043361902 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.043425083 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.043657064 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.043711901 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.043780088 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.043827057 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.043834925 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.043879032 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.045519114 CET	49922	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.045533895 CET	443	49922	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.064755917 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.125348091 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.125439882 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.125860929 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.125935078 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.126241922 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.126297951 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.126360893 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.126399994 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.126409054 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.126421928 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.126455069 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.126559019 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.126611948 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.126619101 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.126631021 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.126648903 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.126718044 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.126758099 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.155136108 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.155150890 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.155685902 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.155956984 CET	49924	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.155980110 CET	443	49924	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.157001972 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.157073975 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.157867908 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.164621115 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.164644957 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.164720058 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.164730072 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.164995909 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.165045977 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.165051937 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.165103912 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.165103912 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.165118933 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.165158033 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.165199995 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.165256023 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.165261030 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.165278912 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.165306091 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.165328026 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.167107105 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.167165041 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.167545080 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.171169043 CET	49933	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.171186924 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.171577930 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.173324108 CET	49933	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.173393011 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.173495054 CET	49933	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.175142050 CET	49925	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.175148964 CET	443	49925	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.179049969 CET	49929	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.179065943 CET	443	49929	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.185184956 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.185267925 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.185312986 CET	49930	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.189260960 CET	49930	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.189275026 CET	443	49930	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.201904058 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.217905045 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258693933 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258729935 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258737087 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258763075 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258775949 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258785009 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258797884 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.258822918 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258846998 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258860111 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.258877039 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.258882046 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258923054 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.258960962 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.258960962 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.282792091 CET	49931	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.282819986 CET	443	49931	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.361073971 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.361155987 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.361205101 CET	49933	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.363357067 CET	49933	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:34.363375902 CET	443	49933	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:34.492708921 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:34.492741108 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:34.492796898 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:34.494224072 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.494235039 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.494286060 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.494661093 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:34.494677067 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:34.494889975 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.494900942 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.702263117 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.753344059 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.753359079 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.753977060 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.754040956 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.754851103 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.754897118 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.772241116 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.772355080 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.775463104 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.775469065 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.911766052 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.913417101 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.913467884 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.913510084 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.913527012 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.913536072 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.913566113 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.913570881 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.916946888 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:34.917154074 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:34.917171001 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:34.918210030 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:34.918268919 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:34.919400930 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:34.919410944 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.919469118 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:34.919475079 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.919478893 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.919868946 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:34.919878006 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:34.925569057 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.925611019 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.925616980 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.931777000 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.931824923 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.931829929 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.937905073 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.937963963 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.937968016 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.944052935 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.944287062 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:34.944293976 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:34.968347073 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.001192093 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.001235008 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.001262903 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.001288891 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.001331091 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.004204988 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.010426998 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.010504961 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.010510921 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.016741991 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.016788960 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.016794920 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.022778034 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.022818089 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.022839069 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.022845984 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.022883892 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.028841972 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.035023928 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.035069942 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.035073996 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.041158915 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.041220903 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.041224957 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.047178984 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.047219992 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.047229052 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.047234058 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.047389030 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.052675962 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.058346987 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.058382034 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.058680058 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.058686018 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.058834076 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.063796997 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.069279909 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.069318056 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.069319963 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.069333076 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.069458008 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.074825048 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.080359936 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.080394983 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.080406904 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.080411911 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.080457926 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.085901022 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.091439962 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.091496944 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.091501951 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.095897913 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.095943928 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.095948935 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.099733114 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.099822998 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.099833965 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.099838972 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.099987030 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.103674889 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.107361078 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.107403040 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.107407093 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.107412100 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.107451916 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.111155987 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.114831924 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.114883900 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.114905119 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.114909887 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.114948034 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.118688107 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.122345924 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.122431993 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.122438908 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.124238968 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.124470949 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.124476910 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.128026962 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.128084898 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.128091097 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.131706953 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.131757021 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.131766081 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.135548115 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.135698080 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.135705948 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.139282942 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.139353037 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.152137995 CET	49936	443	192.168.2.5	172.217.165.142
Feb 20, 2024 16:13:35.152151108 CET	443	49936	172.217.165.142	192.168.2.5
Feb 20, 2024 16:13:35.312144995 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.312169075 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.312175989 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.312189102 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.312215090 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.312218904 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.312230110 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.312297106 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.312503099 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.312527895 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.312558889 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.312566042 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.312593937 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.312608957 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.443576097 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.443608999 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.443692923 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.443692923 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.443705082 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.443748951 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.444838047 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.444854021 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.444916964 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.444925070 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.445065975 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.476660013 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.476706982 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.476811886 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.476821899 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.476876020 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.572781086 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.572799921 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.572876930 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.572889090 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.572945118 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.573857069 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.573873043 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.573935986 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.573945045 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.574153900 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.574868917 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.574883938 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.574943066 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.574951887 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.575093031 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.575213909 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.575229883 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.575283051 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.575289965 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.575359106 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.594213009 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.594228029 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.594285965 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.594297886 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.594341993 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.606790066 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.606806993 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.606865883 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.606878042 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.606920958 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.702908993 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.702927113 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.702989101 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.703000069 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.703035116 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.703247070 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.703262091 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.703315020 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.703321934 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.703528881 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.703891993 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.703907013 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.703955889 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.703963995 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.704030037 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.704338074 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.704354048 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.704416037 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.704422951 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.704464912 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.705120087 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.705135107 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.705197096 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.705204964 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.705357075 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.705631971 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.705646992 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.705702066 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.705710888 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.705737114 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.705749989 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.705951929 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.705965996 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.705996990 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.706003904 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.706041098 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.706311941 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.706326962 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.706362009 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.706368923 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.706398010 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.706408978 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.713229895 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.713246107 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.713299036 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.713309050 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.713371038 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.724780083 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.724796057 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.724853992 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.724863052 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.724917889 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.736742973 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.736785889 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.736850977 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.736850977 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.736862898 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.736902952 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.737703085 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.737716913 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.737782001 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.737790108 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.737831116 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.738652945 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.738667965 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.738718987 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.738725901 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.738764048 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.832946062 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.832964897 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.833029985 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.833038092 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.833087921 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.833321095 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.833336115 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.833384037 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.833398104 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.833436012 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.833441973 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.833465099 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.833519936 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.833771944 CET	49935	443	192.168.2.5	169.46.32.99
Feb 20, 2024 16:13:35.833786011 CET	443	49935	169.46.32.99	192.168.2.5
Feb 20, 2024 16:13:35.945568085 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:35.945594072 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:35.945666075 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:35.947216988 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:35.947233915 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.218888998 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.219371080 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.219383001 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.220424891 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.220827103 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.221677065 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.221743107 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.221872091 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.221879959 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.322496891 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.458760023 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.458775043 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.458827972 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.459139109 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.459148884 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.561486959 CET	49947	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:36.561511040 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:36.561630011 CET	49947	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:36.561996937 CET	49947	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:36.562011957 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:36.655792952 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.656048059 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.656058073 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.656378984 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.656771898 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.656831980 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.656893015 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.697040081 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.697048903 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.853609085 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.853631020 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.853687048 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.853701115 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.854037046 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.854111910 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.854116917 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.854152918 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.854473114 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.854511023 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.854536057 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.854562998 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.854825974 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.854878902 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.871112108 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:36.871366978 CET	49947	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:36.871380091 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:36.871731043 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:36.872035027 CET	49947	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:36.872101068 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:36.872198105 CET	49947	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:36.872227907 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:36.872276068 CET	49947	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:36.872311115 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:36.910530090 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.910629988 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.910669088 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.910696030 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.910700083 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.910717010 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.910919905 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.913296938 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.913400888 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.913410902 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.916261911 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.916685104 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.916692972 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.919131041 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.919892073 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.919899940 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.922143936 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.922211885 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.922233105 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.924990892 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.925029993 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.925102949 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.925144911 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.925144911 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.925484896 CET	49940	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.925502062 CET	443	49940	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.930049896 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.930104971 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.930172920 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.931472063 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:36.931488037 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:36.950006962 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.950082064 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.950280905 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.950328112 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.950417995 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.950467110 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.950519085 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.950558901 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.950627089 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.950668097 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.950716972 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.950761080 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.950773001 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.950845957 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.950881958 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.951155901 CET	49946	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.951169014 CET	443	49946	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.954711914 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.954740047 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:36.955028057 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.955028057 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:36.955049992 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.028564930 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.028595924 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.028669119 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.029649019 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.029663086 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.071844101 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.071924925 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.071978092 CET	49947	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.072890997 CET	49947	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.072906017 CET	443	49947	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.078176975 CET	49951	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.078207016 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.078283072 CET	49951	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.078556061 CET	49951	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.078569889 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.152654886 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.153038979 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.153052092 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.153390884 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.153862953 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.153930902 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.154109955 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.197906971 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.202950954 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.203218937 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.203237057 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.204153061 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.204233885 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.204739094 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.204798937 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.204947948 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.204955101 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.244921923 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.294272900 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.298614025 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.298917055 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.298927069 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.299925089 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.299981117 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.300362110 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.300422907 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.300498962 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.306174994 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.306185007 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.306204081 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.306242943 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.306256056 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.306272030 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.306303024 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.323780060 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.323801041 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.323846102 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.323853016 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.323884964 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.341902971 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.349608898 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.349638939 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.349788904 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.349798918 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.350116014 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.350167990 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.350179911 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.350187063 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.350230932 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.350594044 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.350676060 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.350681067 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.350960970 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.351022005 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.351026058 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.351366043 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.351505995 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.351510048 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.367270947 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.385579109 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.391081095 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.391112089 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.391144037 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.391180992 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.391283035 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.396307945 CET	49951	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.396317959 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.396712065 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.398418903 CET	49951	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.398490906 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.398716927 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.400527000 CET	49951	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.405471087 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.405489922 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.405545950 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.405554056 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.405596972 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.416773081 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.416789055 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.416835070 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.416841984 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.416877985 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.422954082 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.422996998 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.423026085 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.423032045 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.423043013 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.423069954 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.423100948 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.427723885 CET	49948	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.427733898 CET	443	49948	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.445902109 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.446196079 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.446283102 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.446293116 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.446367979 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.446418047 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.446423054 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.446487904 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.446641922 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.446681976 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.446754932 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.446820021 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.454720974 CET	49949	443	192.168.2.5	167.102.245.60
Feb 20, 2024 16:13:37.454730988 CET	443	49949	167.102.245.60	192.168.2.5
Feb 20, 2024 16:13:37.503362894 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.503441095 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.503515959 CET	49951	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.504055023 CET	49951	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:37.504064083 CET	443	49951	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:37.552265882 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:37.552300930 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:37.552371025 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:37.552824974 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:37.552835941 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:37.665098906 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.665178061 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.665211916 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.665239096 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.665246010 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.665256023 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.665298939 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.667906046 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.667957067 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.667968988 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.670887947 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.670934916 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.670948029 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.673752069 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.673825026 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.673837900 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.676908016 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.676959038 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.676973104 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.679572105 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.679609060 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.679653883 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.679667950 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.679682016 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.679714918 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.679820061 CET	49950	443	192.168.2.5	151.101.0.143
Feb 20, 2024 16:13:37.679833889 CET	443	49950	151.101.0.143	192.168.2.5
Feb 20, 2024 16:13:37.956671953 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:37.957274914 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:37.957283974 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:37.958611965 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:37.958710909 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:37.960886002 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:37.960959911 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:37.961303949 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:37.961309910 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.011672020 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.218255043 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.218547106 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.218607903 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.220352888 CET	49952	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.220371008 CET	443	49952	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.401627064 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.401654005 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.401767015 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.402167082 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.402182102 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.804168940 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.804482937 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.804492950 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.805567980 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.805675030 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.808002949 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.808084011 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.808121920 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.849906921 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.851154089 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:38.851161957 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:38.895720959 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:39.068044901 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:39.068135023 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:39.068188906 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:39.077585936 CET	49953	443	192.168.2.5	169.48.138.204
Feb 20, 2024 16:13:39.077593088 CET	443	49953	169.48.138.204	192.168.2.5
Feb 20, 2024 16:13:39.702022076 CET	49954	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:39.702060938 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:39.702138901 CET	49954	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:39.702908039 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:39.702956915 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:39.703018904 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:39.704447985 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:39.704456091 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:39.704507113 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:39.706803083 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:39.706819057 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:39.707535028 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:39.707544088 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:39.708491087 CET	49954	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:39.708515882 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:39.896667957 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:39.940699100 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:39.949134111 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:39.949141979 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:39.949531078 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:39.951277971 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:39.951347113 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:40.005939007 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:40.034774065 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.035444021 CET	49954	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:40.035451889 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.035772085 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.036561966 CET	49954	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:40.036614895 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.037081957 CET	49954	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:40.045465946 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.046315908 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:40.046335936 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.046655893 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.047324896 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:40.047390938 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.077919960 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.088363886 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:40.141849995 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.141954899 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.142016888 CET	49954	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:40.142338037 CET	49954	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:40.142355919 CET	443	49954	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.145016909 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:40.185910940 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:40.316195011 CET	443	49868	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:40.316324949 CET	443	49868	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:40.316374063 CET	49868	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:40.317562103 CET	443	49869	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:40.317627907 CET	443	49869	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:40.317687988 CET	49869	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:41.029912949 CET	49868	443	192.168.2.5	104.17.25.14
Feb 20, 2024 16:13:41.029934883 CET	443	49868	104.17.25.14	192.168.2.5
Feb 20, 2024 16:13:41.030173063 CET	49869	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:41.030194044 CET	443	49869	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:41.735805988 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.735829115 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.735857010 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.735869884 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.735886097 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.735899925 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.735907078 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.735928059 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.735951900 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.736196995 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.736215115 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.736253977 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.736269951 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.736279964 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.736306906 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.834369898 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.834399939 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.834455967 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.834474087 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.834501982 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.834525108 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.834696054 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.834714890 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.834745884 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.834752083 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.834778070 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.834800959 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.834805012 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.834841013 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.834959984 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.835258961 CET	49955	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:41.835272074 CET	443	49955	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:41.863065004 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:41.905904055 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:41.984905005 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:41.984961033 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:41.984996080 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:41.985037088 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:41.985052109 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:41.985071898 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:41.985085011 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:41.990855932 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:41.990910053 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:41.990921021 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:41.996973038 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:41.997034073 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:41.997045994 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.003274918 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.006918907 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.006931067 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.009234905 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.009320021 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.009327888 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.015376091 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.015466928 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.015475035 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.031841993 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.031878948 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.031955004 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.033531904 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.033548117 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.057137012 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.057148933 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.073139906 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.073189974 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.073198080 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.075728893 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.075887918 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.075896978 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.081552982 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.081629992 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.081638098 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.087572098 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.087718010 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.087726116 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.093728065 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.093784094 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.093791962 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.100049019 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.100097895 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.100106001 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.106030941 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.106105089 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.106112957 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.112427950 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.112495899 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.112503052 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.118444920 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.118510962 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.118519068 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.123661995 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.123709917 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.123718023 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.129113913 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.129168987 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.129177094 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.134692907 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.134756088 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.134763956 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.140131950 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.140208006 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.140216112 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.145864010 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.145941019 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.145948887 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.151318073 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.151385069 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.151391983 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.156783104 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.156836033 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.156851053 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.162374020 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.162420034 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.162427902 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.166816950 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.166894913 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.166903973 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.171036959 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.171097040 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.171123981 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.174999952 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.175081968 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.175091028 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.178980112 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.179064035 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.179071903 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.183000088 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.183047056 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.183057070 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.186494112 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.186657906 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.186665058 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.190264940 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.190315962 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.190323114 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.195839882 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.195875883 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.195888996 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.195897102 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.195938110 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.199650049 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.203447104 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.203481913 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.203522921 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.203531981 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.203696012 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.207308054 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.210997105 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.211091042 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.211097956 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.211191893 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.211632967 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.212974072 CET	49956	443	192.168.2.5	142.250.72.110
Feb 20, 2024 16:13:42.212986946 CET	443	49956	142.250.72.110	192.168.2.5
Feb 20, 2024 16:13:42.340173960 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.340604067 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.340611935 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.340980053 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.341404915 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.341473103 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.341574907 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.381920099 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.423664093 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:42.423688889 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:42.423825026 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:42.424974918 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:42.424987078 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:42.461182117 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.461208105 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.461230040 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.461272955 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.461287022 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.461301088 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.461314917 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.461350918 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.689449072 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:42.690762997 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:42.690788031 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:42.691874027 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:42.691931009 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:42.692586899 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:42.692651987 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:42.693030119 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:42.693041086 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:42.717686892 CET	49959	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:42.717704058 CET	443	49959	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:42.737155914 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:42.970000029 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:42.970165014 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:42.971096039 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:43.178333044 CET	49960	443	192.168.2.5	142.251.40.100
Feb 20, 2024 16:13:43.178349018 CET	443	49960	142.251.40.100	192.168.2.5
Feb 20, 2024 16:13:44.263647079 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.263679981 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.263751030 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.264230013 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.264242887 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.452488899 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.452994108 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.453018904 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.454018116 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.454097033 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.454540968 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.454606056 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.454967976 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.454977036 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.499174118 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.670166016 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.670224905 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.670262098 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.670293093 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.670315027 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.670353889 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.670367956 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.670377016 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.672071934 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.676095009 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.682208061 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.682240009 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.682287931 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.682296991 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.682339907 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.686824083 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.693186998 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.695276976 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.695285082 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.739514112 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.758744955 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.761790037 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.761831999 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.761878967 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.761893034 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.761936903 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.767976046 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.774179935 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.774315119 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.774329901 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.780354023 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.780381918 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.780405998 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.780428886 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.780469894 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.786595106 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.792732000 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.792763948 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.792814016 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.792823076 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.792865992 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.798827887 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.804394007 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.804428101 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.804450035 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.804457903 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.804526091 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.809981108 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.815546036 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.815581083 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.815599918 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.815624952 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.815748930 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.821024895 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.821291924 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.821341991 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.821350098 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.829375982 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.829417944 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.829428911 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.829438925 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.829560995 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.829566956 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.829579115 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:44.829623938 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.830055952 CET	49965	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:44.830070972 CET	443	49965	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.018275976 CET	49971	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.018311977 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.018377066 CET	49971	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.018888950 CET	49971	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.018906116 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.021054029 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.021079063 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.021140099 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.021881104 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.021900892 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.214432001 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.225382090 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.230673075 CET	49971	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.230693102 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.230866909 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.230884075 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.231046915 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.231278896 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.232034922 CET	49971	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.232103109 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.232763052 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.232832909 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.232949972 CET	49971	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.233292103 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.273910046 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.277906895 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.408817053 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.408934116 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.409018040 CET	49971	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.409430027 CET	49971	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.409447908 CET	443	49971	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.416363955 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.416482925 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.416532040 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.416541100 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.416637897 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.416691065 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.416703939 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.416778088 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.416835070 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.416842937 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.425123930 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.425194979 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.425199032 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.425225973 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.425332069 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.431293011 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.438828945 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.438883066 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.438890934 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.509136915 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.509227037 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.509238005 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.509530067 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.509599924 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.518151999 CET	49972	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.518167019 CET	443	49972	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.713830948 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.713880062 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.713947058 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.714164972 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.714184046 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.907320023 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.907566071 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.907591105 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.907944918 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.908293009 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.908360958 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:46.908428907 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:46.949911118 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:47.117779970 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:47.117827892 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:47.117866039 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:47.117892027 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:47.117919922 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:47.117959976 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:47.117960930 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:47.117971897 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:47.118031979 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:47.118041039 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:47.126025915 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:47.126162052 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:47.126636028 CET	49975	443	192.168.2.5	142.251.35.164
Feb 20, 2024 16:13:47.126656055 CET	443	49975	142.251.35.164	192.168.2.5
Feb 20, 2024 16:13:48.641102076 CET	49977	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:48.641135931 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:48.641199112 CET	49977	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:48.645612001 CET	49977	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:48.645629883 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:48.957648993 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:48.958966017 CET	49977	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:48.958985090 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:48.959541082 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:48.962636948 CET	49977	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:48.962745905 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:48.963279963 CET	49977	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:48.963305950 CET	49977	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:48.963316917 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:49.170809984 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:49.170933008 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:49.170988083 CET	49977	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:49.217442036 CET	49977	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:49.217458963 CET	443	49977	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:49.672439098 CET	49978	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:13:49.672471046 CET	443	49978	142.251.40.164	192.168.2.5
Feb 20, 2024 16:13:49.672522068 CET	49978	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:13:49.674202919 CET	49978	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:13:49.674215078 CET	443	49978	142.251.40.164	192.168.2.5
Feb 20, 2024 16:13:49.733294010 CET	49979	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:49.733351946 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:49.733412981 CET	49979	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:49.734036922 CET	49979	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:49.734055042 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:49.941281080 CET	443	49978	142.251.40.164	192.168.2.5
Feb 20, 2024 16:13:49.941917896 CET	49978	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:13:49.941934109 CET	443	49978	142.251.40.164	192.168.2.5
Feb 20, 2024 16:13:49.942275047 CET	443	49978	142.251.40.164	192.168.2.5
Feb 20, 2024 16:13:49.943067074 CET	49978	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:13:49.943129063 CET	443	49978	142.251.40.164	192.168.2.5
Feb 20, 2024 16:13:49.993587017 CET	49978	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:13:50.041009903 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.042006016 CET	49979	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.042028904 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.042390108 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.043142080 CET	49979	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.043200970 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.043504953 CET	49979	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.089909077 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.145814896 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.145906925 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.145956039 CET	49979	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.147255898 CET	49979	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.147275925 CET	443	49979	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.412234068 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.412242889 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.412298918 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.412750006 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.412786007 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.412843943 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.415369987 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.415384054 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.415730000 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.415746927 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.563674927 CET	49983	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:50.563711882 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:50.563889027 CET	49983	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:50.565922976 CET	49985	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:50.565962076 CET	443	49985	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:50.566041946 CET	49985	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:50.566262960 CET	49983	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:50.566287994 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:50.567998886 CET	49985	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:50.568030119 CET	443	49985	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:50.751100063 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.751386881 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.751414061 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.751750946 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.752095938 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.752157927 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.752248049 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.753933907 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.754149914 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.754158020 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.754647017 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.754945993 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.755017996 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.782879114 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:50.783170938 CET	49983	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:50.783181906 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:50.784121037 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:50.784462929 CET	49983	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:50.784689903 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:50.785002947 CET	443	49985	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:50.785185099 CET	49985	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:50.785197973 CET	443	49985	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:50.785499096 CET	443	49985	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:50.785768986 CET	49985	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:50.785820961 CET	443	49985	104.18.10.207	192.168.2.5
Feb 20, 2024 16:13:50.797909021 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.840954065 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.840956926 CET	49985	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:13:50.857492924 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.857861042 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.857923985 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.861951113 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.861968040 CET	443	49982	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.861978054 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.862019062 CET	49982	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.865847111 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:50.905908108 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:50.989902973 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:13:50.990088940 CET	49983	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:13:51.327300072 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327352047 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327359915 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327373028 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327380896 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327404976 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.327410936 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327433109 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327444077 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.327465057 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.327485085 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.327564001 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327584028 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327624083 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.327631950 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.327650070 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.327666044 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.424894094 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.424921036 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.424993038 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.425018072 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.425062895 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.425282001 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.425297976 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.425327063 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.425350904 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.425358057 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.425381899 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.425412893 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:51.425448895 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.425741911 CET	49981	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:51.425755024 CET	443	49981	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.593514919 CET	49988	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.593574047 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.593746901 CET	49988	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.619684935 CET	49988	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.619710922 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.822184086 CET	49989	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.822210073 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.822335958 CET	49989	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.822884083 CET	49989	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.822897911 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.926302910 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.926561117 CET	49988	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.926573992 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.926944017 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.927685022 CET	49988	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.927750111 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.927860975 CET	49988	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.927887917 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:53.927922010 CET	49988	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:53.927952051 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.130518913 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.130637884 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.130683899 CET	49988	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.131222010 CET	49988	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.131241083 CET	443	49988	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.133995056 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.134284973 CET	49989	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.134303093 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.134644032 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.135000944 CET	49989	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.135056973 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.135176897 CET	49989	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.135205030 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.135247946 CET	49989	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.135257006 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.136639118 CET	49990	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.136674881 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.136874914 CET	49990	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.137109995 CET	49990	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.137120962 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.355711937 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.355973959 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.356219053 CET	49989	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.356622934 CET	49989	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.356631041 CET	443	49989	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.360271931 CET	49991	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.360306025 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.360385895 CET	49991	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.360611916 CET	49991	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.360625982 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.444236040 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.444561005 CET	49990	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.444578886 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.444941998 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.445280075 CET	49990	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.445355892 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.445417881 CET	49990	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.485908985 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.493911028 CET	49990	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.548425913 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.548731089 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.548835039 CET	49990	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.549621105 CET	49990	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.549640894 CET	443	49990	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.673099041 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.673393011 CET	49991	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.673408031 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.673765898 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.674143076 CET	49991	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.674212933 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.674417973 CET	49991	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.717912912 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.775186062 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.775420904 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:54.775537014 CET	49991	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.777534008 CET	49991	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:54.777554035 CET	443	49991	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.065717936 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.065757990 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.065813065 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.066334009 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.066374063 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.066447020 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.066991091 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.067007065 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.067493916 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.067507029 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.397758961 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.397984028 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.397995949 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.398443937 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.398921013 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.399014950 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.399492025 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.411122084 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.411353111 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.411365032 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.411735058 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.412041903 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.412107944 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.441903114 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.461828947 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.504410982 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.504503965 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.504587889 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.504838943 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.504858017 CET	443	49992	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.504868984 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.505069017 CET	49992	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.506865025 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.506887913 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.741595030 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.741624117 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.741688013 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.741689920 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.741703033 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.741719007 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.741729021 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.741760969 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.741787910 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.742063046 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.742079973 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.742120981 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.742130041 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:55.742157936 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:55.742166042 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046278954 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046314001 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046380043 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046410084 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046565056 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046633959 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046658993 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046689987 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046694994 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046705961 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046722889 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046741009 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046746969 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046794891 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046803951 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046816111 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046823025 CET	443	49993	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:56.046833038 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046849966 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:56.046871901 CET	49993	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.263766050 CET	49999	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.263799906 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.263870001 CET	49999	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.264245987 CET	49999	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.264256954 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.568856001 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.569159985 CET	49999	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.569168091 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.569551945 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.569895029 CET	49999	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.569971085 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.570050001 CET	49999	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.570067883 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.570113897 CET	49999	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.570120096 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.769639969 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.769742012 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.769871950 CET	49999	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.770421982 CET	49999	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.770440102 CET	443	49999	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.775930882 CET	50000	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.775979996 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:58.776045084 CET	50000	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.776410103 CET	50000	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:58.776424885 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:59.084340096 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:59.099555969 CET	50000	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:59.099586010 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:59.100162983 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:59.100852966 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.100894928 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.100975037 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.101948023 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.102005959 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.102215052 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.102407932 CET	50000	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:59.102480888 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:59.102576971 CET	50000	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:59.103373051 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.103388071 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.103672981 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.103684902 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.149904013 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:59.204602003 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:59.204844952 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:59.205034018 CET	50000	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:59.205761909 CET	50000	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:13:59.205780983 CET	443	50000	20.141.131.150	192.168.2.5
Feb 20, 2024 16:13:59.305488110 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.305756092 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.305772066 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.306128979 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.308326006 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.308449030 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.308721066 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.310753107 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.311145067 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.311156988 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.312352896 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.312728882 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.313071966 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.353914022 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.354051113 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.501065969 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.501086950 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.501163960 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.501164913 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.501174927 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.501225948 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.501452923 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.501517057 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.519952059 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.520757914 CET	50004	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.520783901 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.520848036 CET	50004	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.521450996 CET	50004	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.521466017 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.521939039 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.521966934 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.522037029 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.524116993 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.524130106 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.524801970 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.524837971 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.524907112 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.525444984 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.525481939 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.525626898 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.525839090 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.525852919 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.526283979 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.526299000 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.565901041 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.597704887 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.597774029 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.597781897 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.597800016 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.597851038 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.598159075 CET	50002	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.598171949 CET	443	50002	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.598656893 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.598700047 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.598819971 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.599570036 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.599586010 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.619343042 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.619398117 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.619467020 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.619482994 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.619602919 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.619666100 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.621310949 CET	50001	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.621321917 CET	443	50001	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.725382090 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.725905895 CET	50004	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.725920916 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.726278067 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.726608992 CET	50004	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.726676941 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.727179050 CET	50004	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.747833014 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.748066902 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.748076916 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.749409914 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.749475956 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.749828100 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.749938011 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.750046015 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.754966974 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.755208969 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.755251884 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.755264997 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.755378962 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.755394936 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.755624056 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.755983114 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.756052017 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.756119967 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.756493092 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.756556034 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.756895065 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.756959915 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.757021904 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.773907900 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.792670012 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.792682886 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.796689034 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.796931982 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.796948910 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.797907114 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.797910929 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.798027039 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.798093081 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.798387051 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.798453093 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.798544884 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.806150913 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.806163073 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.806178093 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.837251902 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.841908932 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.852447033 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.852453947 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.852469921 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.899688005 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.921247005 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.921272993 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.921360970 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.921403885 CET	50004	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.921554089 CET	50004	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.922774076 CET	50004	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.922801018 CET	443	50004	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.924638987 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.924655914 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.924707890 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.924726009 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.924736023 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.924812078 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.925611973 CET	50005	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.925623894 CET	443	50005	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.926317930 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.926342010 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.926393032 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.926403999 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.926482916 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.926528931 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.928307056 CET	50006	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.928322077 CET	443	50006	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.929318905 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.929342031 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.929352045 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.929404974 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.929423094 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.929444075 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.929472923 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.929486036 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.929533005 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.929595947 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.929928064 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.937879086 CET	50007	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.937897921 CET	443	50007	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.938842058 CET	50009	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.938857079 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.938968897 CET	50009	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.945349932 CET	50009	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.945363998 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.946229935 CET	50010	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.946240902 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.946296930 CET	50010	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.947371006 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.947396040 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.947462082 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.948024988 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.948060989 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.948127985 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.948772907 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.948782921 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.948987007 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.949242115 CET	50010	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.949253082 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.949852943 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.949867010 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.950448990 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.950463057 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.950650930 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.950660944 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.957972050 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.957984924 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.958034992 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.958235025 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.958244085 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.966101885 CET	443	49978	142.251.40.164	192.168.2.5
Feb 20, 2024 16:13:59.966191053 CET	443	49978	142.251.40.164	192.168.2.5
Feb 20, 2024 16:13:59.966253996 CET	49978	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:13:59.990972042 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.990987062 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.991048098 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.991058111 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.991067886 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:13:59.991113901 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.995637894 CET	50008	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:13:59.995647907 CET	443	50008	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.001216888 CET	49978	443	192.168.2.5	142.251.40.164
Feb 20, 2024 16:14:00.001230001 CET	443	49978	142.251.40.164	192.168.2.5
Feb 20, 2024 16:14:00.001472950 CET	50015	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.001496077 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.001560926 CET	50015	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.001940966 CET	50015	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.001955032 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.142344952 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.145515919 CET	50009	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.145531893 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.145826101 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.146400928 CET	50009	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.146464109 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.146744013 CET	50009	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.183770895 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.184031010 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.184051991 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.185024023 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.185173988 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.185442924 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.185498953 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.185726881 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.185734034 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.187279940 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.187484980 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.187499046 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.188890934 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.188957930 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.189259052 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.189414024 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.189419031 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.189501047 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.189943075 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.215799093 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.216074944 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.216084003 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.216633081 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.217010975 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.217128038 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.217278004 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.218801975 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.218983889 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.219010115 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.220405102 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.220472097 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.221956015 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.222060919 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.222065926 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.227374077 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.227472067 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.228125095 CET	50010	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.228132010 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.228388071 CET	50015	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.228400946 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.228600979 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.228872061 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.229013920 CET	50010	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.229090929 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.229361057 CET	50015	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.229441881 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.229506016 CET	50010	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.229552984 CET	50015	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.236223936 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.236231089 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.236239910 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.257929087 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.269905090 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.269918919 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.269922972 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.271287918 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.271296024 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.289935112 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.320348024 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.336400986 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.336492062 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.336716890 CET	50009	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.337555885 CET	50009	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.337564945 CET	443	50009	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.343483925 CET	50016	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.343504906 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.343574047 CET	50016	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.343918085 CET	50016	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.343930960 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.377933979 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.378026009 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.378159046 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.378664970 CET	50012	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.378674030 CET	443	50012	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.381489992 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.381508112 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.381582975 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.381587982 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.381627083 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.381970882 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.381993055 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.382040977 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.382054090 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.382081985 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.382102966 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.382107973 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.382136106 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.382158995 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.382162094 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.382170916 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.382229090 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.383128881 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.383224010 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.383455038 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.384170055 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.384284019 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.384326935 CET	50010	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.389221907 CET	50011	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.389233112 CET	443	50011	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.397397995 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.397453070 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.397504091 CET	50015	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.397514105 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.397659063 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.397717953 CET	50015	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.398156881 CET	50014	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.398169041 CET	443	50014	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.398663044 CET	50013	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.398670912 CET	443	50013	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.400949001 CET	50010	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.400954008 CET	443	50010	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.405920029 CET	50015	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.405929089 CET	443	50015	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.407984018 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.408008099 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.408114910 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.408432007 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.408442020 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.412913084 CET	50018	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.412931919 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.412990093 CET	50018	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.413270950 CET	50018	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.413281918 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.415050983 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.415072918 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.415134907 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.415663958 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.415700912 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.415793896 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.415944099 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.415956974 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.416119099 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.416130066 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.470710039 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.470750093 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.470835924 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.471090078 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.471102953 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.540411949 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.540767908 CET	50016	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.540782928 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.541120052 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.541445971 CET	50016	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.541521072 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.541585922 CET	50016	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.583056927 CET	50022	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:00.583082914 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:00.583168030 CET	50022	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:00.583942890 CET	50022	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:00.583954096 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:00.585907936 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.612591028 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.613022089 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.613029957 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.614180088 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.615186930 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.615360022 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.615439892 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.638803005 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.638933897 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.639041901 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.639053106 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.639296055 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.639307976 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.640424013 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.640507936 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.640639067 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.640705109 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.641767979 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.641823053 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.642277956 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.642440081 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.642950058 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.642955065 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.643002033 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.643016100 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.657926083 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.666332006 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.667761087 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.668143034 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.668152094 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.669120073 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.669186115 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.669773102 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.669832945 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.670680046 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.670692921 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.697495937 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.697565079 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.712610006 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.734968901 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.735074043 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.735239983 CET	50016	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.736599922 CET	50016	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.736617088 CET	443	50016	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.807061911 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.807125092 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.807147980 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.807226896 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.807226896 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.807238102 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.807305098 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.807369947 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.807374001 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.807380915 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.807521105 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.826314926 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.826397896 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.826668024 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.826685905 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.826692104 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.826735020 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.826750040 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.826786995 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.826957941 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.828682899 CET	50020	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.828701019 CET	443	50020	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.830099106 CET	50019	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.830111980 CET	443	50019	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.861582041 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.861665010 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.862056017 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.864084005 CET	50021	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.864090919 CET	443	50021	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.892231941 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:00.903877020 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.903917074 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.904002905 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.904158115 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.904290915 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.904295921 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.904319048 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.904337883 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.904341936 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.904397011 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.904397011 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.904675961 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.904753923 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.905056953 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.905172110 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.905384064 CET	50022	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:00.905390024 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:00.905786037 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:00.918639898 CET	50022	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:00.918808937 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:00.918843985 CET	50022	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:00.918876886 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:00.919121981 CET	50022	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:00.919151068 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:00.928354025 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.929033995 CET	50018	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.929052114 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.929469109 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.930313110 CET	50018	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.930398941 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:00.930536985 CET	50018	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:00.973916054 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.000360012 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.000480890 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.000478983 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.000509024 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.000565052 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.000657082 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.000730991 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.000749111 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.000924110 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.000997066 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.001765013 CET	50017	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.001780033 CET	443	50017	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.120774031 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.120867014 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.120910883 CET	50022	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.122436047 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.122519970 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.123569965 CET	50018	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.163850069 CET	50022	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.163880110 CET	443	50022	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.244384050 CET	50018	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.244405031 CET	443	50018	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.364471912 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.364506006 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.364615917 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.364928007 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.364943027 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.367559910 CET	50024	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.367605925 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.367701054 CET	50024	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.367997885 CET	50024	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.368011951 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.573745966 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.574197054 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.574209929 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.575387955 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.575788021 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.575963974 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.576116085 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.620079041 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.620095968 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.678181887 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.678582907 CET	50024	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.678591013 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.679306984 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.679734945 CET	50024	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.679801941 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.679924011 CET	50024	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.725899935 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.727793932 CET	50024	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.768860102 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.768882990 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.768908024 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.768935919 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.768944979 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.769006968 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.769006968 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.769016027 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.782624006 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.782700062 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.782927990 CET	50024	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.783305883 CET	50024	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:01.783317089 CET	443	50024	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:01.816709995 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.865719080 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.865762949 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.865976095 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.866153002 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.866184950 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.866215944 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.866283894 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.866682053 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.866818905 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.867150068 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.867233038 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.867305040 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.867378950 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.867485046 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.867638111 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.867645979 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.916414976 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.962100029 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.962179899 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:01.962193012 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.962268114 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.963821888 CET	50023	443	192.168.2.5	167.102.245.62
Feb 20, 2024 16:14:01.963833094 CET	443	50023	167.102.245.62	192.168.2.5
Feb 20, 2024 16:14:03.562486887 CET	50027	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:03.562541008 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:03.562629938 CET	50027	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:03.563195944 CET	50027	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:03.563214064 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:03.872060061 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:03.872359037 CET	50027	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:03.872389078 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:03.872776985 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:03.873127937 CET	50027	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:03.873203993 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:03.873270035 CET	50027	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:03.873303890 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:03.873364925 CET	50027	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:03.873404980 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.073026896 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.073117971 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.073239088 CET	50027	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.080586910 CET	50027	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.080602884 CET	443	50027	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.091476917 CET	50028	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.091523886 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.091605902 CET	50028	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.092519045 CET	50028	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.092535019 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.402268887 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.413775921 CET	50028	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.413808107 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.414280891 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.416070938 CET	50028	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.416146040 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.416234970 CET	50028	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.461894989 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.463206053 CET	50028	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.519196033 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.519280910 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:04.519352913 CET	50028	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.532309055 CET	50028	443	192.168.2.5	20.141.131.150
Feb 20, 2024 16:14:04.532335043 CET	443	50028	20.141.131.150	192.168.2.5
Feb 20, 2024 16:14:05.772897005 CET	443	49985	104.18.10.207	192.168.2.5
Feb 20, 2024 16:14:05.772963047 CET	443	49985	104.18.10.207	192.168.2.5
Feb 20, 2024 16:14:05.773044109 CET	49985	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:14:05.773920059 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:14:05.773979902 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:14:05.774025917 CET	49983	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:14:07.039638996 CET	49983	443	192.168.2.5	104.17.24.14
Feb 20, 2024 16:14:07.039643049 CET	49985	443	192.168.2.5	104.18.10.207
Feb 20, 2024 16:14:07.039660931 CET	443	49983	104.17.24.14	192.168.2.5
Feb 20, 2024 16:14:07.039664030 CET	443	49985	104.18.10.207	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 20, 2024 16:12:46.847462893 CET	54361	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:46.847867012 CET	54963	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:46.848658085 CET	59478	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:46.848932028 CET	62870	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:46.934607029 CET	53	61443	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:46.935460091 CET	53	54361	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:46.935791969 CET	53	54963	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:46.936762094 CET	53	62870	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:46.936801910 CET	53	59478	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:47.642875910 CET	53	65527	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:47.693249941 CET	57148	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:47.693645954 CET	59120	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:47.784768105 CET	53	59120	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:47.786494017 CET	53	57148	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:48.604137897 CET	57976	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:48.604402065 CET	52313	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:48.605175972 CET	54112	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:48.605403900 CET	62555	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:48.607678890 CET	56448	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:48.607975960 CET	64075	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:48.692240953 CET	53	52313	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:48.692265987 CET	53	57976	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:48.693840027 CET	53	54112	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:48.694571018 CET	53	62555	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:48.696027994 CET	53	56448	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:48.696715117 CET	53	64075	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:49.620587111 CET	58159	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:49.621014118 CET	50726	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:49.708343983 CET	53	58159	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:49.708728075 CET	53	50726	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:50.409878969 CET	53	55402	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:50.412441015 CET	53	51685	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:50.414091110 CET	53	50890	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:51.290883064 CET	53	62251	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:52.026380062 CET	60399	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:52.026576042 CET	63415	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:12:52.114969015 CET	53	60399	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:52.115772009 CET	53	63415	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:52.166750908 CET	53	51669	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:52.629245996 CET	53	59150	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:52.655970097 CET	53	56319	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:53.087915897 CET	53	58711	1.1.1.1	192.168.2.5
Feb 20, 2024 16:12:53.110645056 CET	53	54607	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:06.170928001 CET	53	55465	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:11.059643030 CET	51736	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:11.060177088 CET	64844	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:11.148567915 CET	53	64844	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:11.153238058 CET	53	51736	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:12.337296009 CET	61165	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:12.338352919 CET	56588	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:12.426338911 CET	53	61165	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:12.428009987 CET	53	56588	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:25.155935049 CET	53	49949	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:29.227570057 CET	62319	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:29.227864027 CET	62603	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:29.316453934 CET	53	62319	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:29.317617893 CET	53	62603	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:29.819389105 CET	51342	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:29.819808960 CET	58766	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:29.879914045 CET	64738	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:29.880476952 CET	65482	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:29.900732040 CET	53	56672	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:29.902359962 CET	53	62240	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:29.967776060 CET	53	64738	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:29.968311071 CET	53	65482	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:31.822282076 CET	53	50532	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:32.037194014 CET	53854	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:32.037903070 CET	54410	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:32.461165905 CET	60665	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:32.462348938 CET	64920	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:32.464149952 CET	58450	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:32.464694023 CET	62186	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:32.549137115 CET	53	60665	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:32.549905062 CET	53	64920	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:32.552217007 CET	53	58450	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:32.552674055 CET	53	62186	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:32.648183107 CET	53	61379	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:33.473814011 CET	64163	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:33.474158049 CET	49509	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:33.563081980 CET	53	64163	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:33.565556049 CET	53	49509	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:33.956907988 CET	53	61136	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:34.367079973 CET	50476	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:34.367502928 CET	61640	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:34.386863947 CET	63474	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:34.387099981 CET	59460	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:34.455518007 CET	53	50476	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:34.468605042 CET	53	54127	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:34.475265980 CET	53	63474	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:34.476361990 CET	53	59460	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:34.480649948 CET	53	61640	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:35.252027035 CET	53	52062	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:35.255762100 CET	53	63724	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:35.856492996 CET	62163	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:35.856492996 CET	64527	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:35.944262028 CET	53	64527	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:35.944809914 CET	53	62163	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:36.168942928 CET	53	55153	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:36.937583923 CET	61318	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:36.937583923 CET	65303	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:37.026487112 CET	53	65303	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:37.027728081 CET	53	61318	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:37.454092979 CET	63081	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:37.454341888 CET	55035	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:37.542779922 CET	53	63081	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:37.543127060 CET	53	55035	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:38.311476946 CET	49953	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:38.312401056 CET	53585	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:38.400579929 CET	53	49953	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:38.400891066 CET	53	53585	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:42.288594961 CET	57076	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:42.288866997 CET	50873	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:42.376359940 CET	53	57076	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:42.376830101 CET	53	50873	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:44.167552948 CET	58023	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:44.172797918 CET	64512	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:44.255909920 CET	53	58023	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:44.261269093 CET	53	64512	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:44.868132114 CET	53	63359	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:45.223819971 CET	53	55874	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:46.116998911 CET	53	61268	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:48.013998032 CET	53	50354	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:50.407996893 CET	49961	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:50.408530951 CET	58014	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:50.409137964 CET	59198	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:50.409492970 CET	50994	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:50.416707993 CET	60814	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:50.417139053 CET	53281	53	192.168.2.5	1.1.1.1
Feb 20, 2024 16:13:50.496763945 CET	53	59198	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:50.496786118 CET	53	58014	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:50.497247934 CET	53	50994	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:50.503523111 CET	53	49961	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:50.504803896 CET	53	53281	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:50.505589008 CET	53	60814	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:50.655716896 CET	53	49585	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:55.174357891 CET	53	58030	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:56.634665966 CET	53	53320	1.1.1.1	192.168.2.5
Feb 20, 2024 16:13:56.649852991 CET	53	63882	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 20, 2024 16:12:46.847462893 CET	192.168.2.5	1.1.1.1	0x609c	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:46.847867012 CET	192.168.2.5	1.1.1.1	0x51a5	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Feb 20, 2024 16:12:46.848658085 CET	192.168.2.5	1.1.1.1	0x2943	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:46.848932028 CET	192.168.2.5	1.1.1.1	0x4aa	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Feb 20, 2024 16:12:47.693249941 CET	192.168.2.5	1.1.1.1	0xf686	Standard query (0)	mdtaxconnect.gov	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:47.693645954 CET	192.168.2.5	1.1.1.1	0xd6c5	Standard query (0)	mdtaxconnect.gov	65	IN (0x0001)	false
Feb 20, 2024 16:12:48.604137897 CET	192.168.2.5	1.1.1.1	0x272f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:48.604402065 CET	192.168.2.5	1.1.1.1	0x999e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Feb 20, 2024 16:12:48.605175972 CET	192.168.2.5	1.1.1.1	0x1e74	Standard query (0)	netdna.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:48.605403900 CET	192.168.2.5	1.1.1.1	0x99c	Standard query (0)	netdna.bootstrapcdn.com	65	IN (0x0001)	false
Feb 20, 2024 16:12:48.607678890 CET	192.168.2.5	1.1.1.1	0x2cf3	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:48.607975960 CET	192.168.2.5	1.1.1.1	0x5ce4	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Feb 20, 2024 16:12:49.620587111 CET	192.168.2.5	1.1.1.1	0x445f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:49.621014118 CET	192.168.2.5	1.1.1.1	0x128a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 20, 2024 16:12:52.026380062 CET	192.168.2.5	1.1.1.1	0x5baf	Standard query (0)	mdtaxconnect.gov	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:52.026576042 CET	192.168.2.5	1.1.1.1	0x24c7	Standard query (0)	mdtaxconnect.gov	65	IN (0x0001)	false
Feb 20, 2024 16:13:11.059643030 CET	192.168.2.5	1.1.1.1	0xe4fe	Standard query (0)	interactive.marylandtaxes.gov	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:11.060177088 CET	192.168.2.5	1.1.1.1	0xafea	Standard query (0)	interactive.marylandtaxes.gov	65	IN (0x0001)	false
Feb 20, 2024 16:13:12.337296009 CET	192.168.2.5	1.1.1.1	0x487c	Standard query (0)	interactive.marylandtaxes.gov	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:12.338352919 CET	192.168.2.5	1.1.1.1	0x78a9	Standard query (0)	interactive.marylandtaxes.gov	65	IN (0x0001)	false
Feb 20, 2024 16:13:29.227570057 CET	192.168.2.5	1.1.1.1	0x9e1b	Standard query (0)	www.marylandtaxes.gov	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:29.227864027 CET	192.168.2.5	1.1.1.1	0xa14d	Standard query (0)	www.marylandtaxes.gov	65	IN (0x0001)	false
Feb 20, 2024 16:13:29.819389105 CET	192.168.2.5	1.1.1.1	0xdb18	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:29.819808960 CET	192.168.2.5	1.1.1.1	0x5bf9	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Feb 20, 2024 16:13:29.879914045 CET	192.168.2.5	1.1.1.1	0x6bfe	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:29.880476952 CET	192.168.2.5	1.1.1.1	0xe8	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:32.037194014 CET	192.168.2.5	1.1.1.1	0xbd9c	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:32.037903070 CET	192.168.2.5	1.1.1.1	0x673d	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Feb 20, 2024 16:13:32.461165905 CET	192.168.2.5	1.1.1.1	0x6abe	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:32.462348938 CET	192.168.2.5	1.1.1.1	0x886a	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:32.464149952 CET	192.168.2.5	1.1.1.1	0x59ce	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:32.464694023 CET	192.168.2.5	1.1.1.1	0xe650	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Feb 20, 2024 16:13:33.473814011 CET	192.168.2.5	1.1.1.1	0xbbaa	Standard query (0)	www.marylandtaxes.gov	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:33.474158049 CET	192.168.2.5	1.1.1.1	0x6668	Standard query (0)	www.marylandtaxes.gov	65	IN (0x0001)	false
Feb 20, 2024 16:13:34.367079973 CET	192.168.2.5	1.1.1.1	0xd237	Standard query (0)	app.swiftype.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:34.367502928 CET	192.168.2.5	1.1.1.1	0x4c3	Standard query (0)	app.swiftype.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:34.386863947 CET	192.168.2.5	1.1.1.1	0x3564	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:34.387099981 CET	192.168.2.5	1.1.1.1	0x7721	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:35.856492996 CET	192.168.2.5	1.1.1.1	0x21ae	Standard query (0)	s.swiftypecdn.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:35.856492996 CET	192.168.2.5	1.1.1.1	0x3f27	Standard query (0)	s.swiftypecdn.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:36.937583923 CET	192.168.2.5	1.1.1.1	0xacef	Standard query (0)	s.swiftypecdn.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:36.937583923 CET	192.168.2.5	1.1.1.1	0xf09a	Standard query (0)	s.swiftypecdn.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:37.454092979 CET	192.168.2.5	1.1.1.1	0xd238	Standard query (0)	cc.swiftype.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:37.454341888 CET	192.168.2.5	1.1.1.1	0x576a	Standard query (0)	cc.swiftype.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:38.311476946 CET	192.168.2.5	1.1.1.1	0x8bc1	Standard query (0)	cc.swiftype.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:38.312401056 CET	192.168.2.5	1.1.1.1	0x1d39	Standard query (0)	cc.swiftype.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:42.288594961 CET	192.168.2.5	1.1.1.1	0x5ab9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:42.288866997 CET	192.168.2.5	1.1.1.1	0x28ce	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:44.167552948 CET	192.168.2.5	1.1.1.1	0xc6c5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:44.172797918 CET	192.168.2.5	1.1.1.1	0xd580	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:50.407996893 CET	192.168.2.5	1.1.1.1	0x632e	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:50.408530951 CET	192.168.2.5	1.1.1.1	0x94e4	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:50.409137964 CET	192.168.2.5	1.1.1.1	0x4d39	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:50.409492970 CET	192.168.2.5	1.1.1.1	0x4150	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Feb 20, 2024 16:13:50.416707993 CET	192.168.2.5	1.1.1.1	0xf169	Standard query (0)	netdna.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:50.417139053 CET	192.168.2.5	1.1.1.1	0x457f	Standard query (0)	netdna.bootstrapcdn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 20, 2024 16:12:46.935460091 CET	1.1.1.1	192.168.2.5	0x609c	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:12:46.935460091 CET	1.1.1.1	192.168.2.5	0x609c	No error (0)	clients.l.google.com		142.251.40.238	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:46.935791969 CET	1.1.1.1	192.168.2.5	0x51a5	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:12:46.936801910 CET	1.1.1.1	192.168.2.5	0x2943	No error (0)	accounts.google.com		172.253.62.84	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:47.786494017 CET	1.1.1.1	192.168.2.5	0xf686	No error (0)	mdtaxconnect.gov		20.141.131.150	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:48.692240953 CET	1.1.1.1	192.168.2.5	0x999e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Feb 20, 2024 16:12:48.692265987 CET	1.1.1.1	192.168.2.5	0x272f	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:48.692265987 CET	1.1.1.1	192.168.2.5	0x272f	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:48.693840027 CET	1.1.1.1	192.168.2.5	0x1e74	No error (0)	netdna.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:48.693840027 CET	1.1.1.1	192.168.2.5	0x1e74	No error (0)	netdna.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:48.694571018 CET	1.1.1.1	192.168.2.5	0x99c	No error (0)	netdna.bootstrapcdn.com			65	IN (0x0001)	false
Feb 20, 2024 16:12:48.696027994 CET	1.1.1.1	192.168.2.5	0x2cf3	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:12:48.696027994 CET	1.1.1.1	192.168.2.5	0x2cf3	No error (0)	www3.l.google.com		142.250.72.110	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:48.696715117 CET	1.1.1.1	192.168.2.5	0x5ce4	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:12:49.708343983 CET	1.1.1.1	192.168.2.5	0x445f	No error (0)	www.google.com		142.251.40.164	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:12:49.708728075 CET	1.1.1.1	192.168.2.5	0x128a	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 20, 2024 16:12:52.114969015 CET	1.1.1.1	192.168.2.5	0x5baf	No error (0)	mdtaxconnect.gov		20.141.131.150	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:01.503851891 CET	1.1.1.1	192.168.2.5	0x19a4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:01.503851891 CET	1.1.1.1	192.168.2.5	0x19a4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:11.153238058 CET	1.1.1.1	192.168.2.5	0xe4fe	No error (0)	interactive.marylandtaxes.gov		167.102.245.62	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:12.426338911 CET	1.1.1.1	192.168.2.5	0x487c	No error (0)	interactive.marylandtaxes.gov		167.102.245.62	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:15.228470087 CET	1.1.1.1	192.168.2.5	0xfce9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:15.228470087 CET	1.1.1.1	192.168.2.5	0xfce9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:29.316453934 CET	1.1.1.1	192.168.2.5	0x9e1b	No error (0)	www.marylandtaxes.gov		167.102.245.60	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:29.908651114 CET	1.1.1.1	192.168.2.5	0xdb18	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:29.908798933 CET	1.1.1.1	192.168.2.5	0x5bf9	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:29.967776060 CET	1.1.1.1	192.168.2.5	0x6bfe	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:29.967776060 CET	1.1.1.1	192.168.2.5	0x6bfe	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:29.968311071 CET	1.1.1.1	192.168.2.5	0xe8	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Feb 20, 2024 16:13:32.125780106 CET	1.1.1.1	192.168.2.5	0xbd9c	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:32.125914097 CET	1.1.1.1	192.168.2.5	0x673d	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:32.549137115 CET	1.1.1.1	192.168.2.5	0x6abe	No error (0)	analytics.google.com		142.251.40.142	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:32.549905062 CET	1.1.1.1	192.168.2.5	0x886a	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:32.552217007 CET	1.1.1.1	192.168.2.5	0x59ce	No error (0)	stats.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:32.552217007 CET	1.1.1.1	192.168.2.5	0x59ce	No error (0)	stats.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:33.563081980 CET	1.1.1.1	192.168.2.5	0xbbaa	No error (0)	www.marylandtaxes.gov		167.102.245.60	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:34.455518007 CET	1.1.1.1	192.168.2.5	0xd237	No error (0)	app.swiftype.com	external-svc-dal.swiftype.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:34.455518007 CET	1.1.1.1	192.168.2.5	0xd237	No error (0)	external-svc-dal.swiftype.net		169.46.32.99	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:34.475265980 CET	1.1.1.1	192.168.2.5	0x3564	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:34.475265980 CET	1.1.1.1	192.168.2.5	0x3564	No error (0)	www3.l.google.com		172.217.165.142	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:34.476361990 CET	1.1.1.1	192.168.2.5	0x7721	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:34.480649948 CET	1.1.1.1	192.168.2.5	0x4c3	No error (0)	app.swiftype.com	external-svc-dal.swiftype.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:35.944262028 CET	1.1.1.1	192.168.2.5	0x3f27	No error (0)	s.swiftypecdn.com	b.global-ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:35.944809914 CET	1.1.1.1	192.168.2.5	0x21ae	No error (0)	s.swiftypecdn.com	b.global-ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:35.944809914 CET	1.1.1.1	192.168.2.5	0x21ae	No error (0)	b.global-ssl.fastly.net		151.101.0.143	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:35.944809914 CET	1.1.1.1	192.168.2.5	0x21ae	No error (0)	b.global-ssl.fastly.net		151.101.64.143	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:35.944809914 CET	1.1.1.1	192.168.2.5	0x21ae	No error (0)	b.global-ssl.fastly.net		151.101.192.143	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:35.944809914 CET	1.1.1.1	192.168.2.5	0x21ae	No error (0)	b.global-ssl.fastly.net		151.101.128.143	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:37.026487112 CET	1.1.1.1	192.168.2.5	0xf09a	No error (0)	s.swiftypecdn.com	b.global-ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:37.027728081 CET	1.1.1.1	192.168.2.5	0xacef	No error (0)	s.swiftypecdn.com	b.global-ssl.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:37.027728081 CET	1.1.1.1	192.168.2.5	0xacef	No error (0)	b.global-ssl.fastly.net		151.101.0.143	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:37.027728081 CET	1.1.1.1	192.168.2.5	0xacef	No error (0)	b.global-ssl.fastly.net		151.101.64.143	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:37.027728081 CET	1.1.1.1	192.168.2.5	0xacef	No error (0)	b.global-ssl.fastly.net		151.101.128.143	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:37.027728081 CET	1.1.1.1	192.168.2.5	0xacef	No error (0)	b.global-ssl.fastly.net		151.101.192.143	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:37.542779922 CET	1.1.1.1	192.168.2.5	0xd238	No error (0)	cc.swiftype.com	external-svc-dal.swiftype.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:37.542779922 CET	1.1.1.1	192.168.2.5	0xd238	No error (0)	external-svc-dal.swiftype.net		169.48.138.204	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:37.543127060 CET	1.1.1.1	192.168.2.5	0x576a	No error (0)	cc.swiftype.com	external-svc-dal.swiftype.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:38.400579929 CET	1.1.1.1	192.168.2.5	0x8bc1	No error (0)	cc.swiftype.com	external-svc-dal.swiftype.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:38.400579929 CET	1.1.1.1	192.168.2.5	0x8bc1	No error (0)	external-svc-dal.swiftype.net		169.48.138.204	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:38.400891066 CET	1.1.1.1	192.168.2.5	0x1d39	No error (0)	cc.swiftype.com	external-svc-dal.swiftype.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:40.650978088 CET	1.1.1.1	192.168.2.5	0x3cbb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:40.650978088 CET	1.1.1.1	192.168.2.5	0x3cbb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:42.376359940 CET	1.1.1.1	192.168.2.5	0x5ab9	No error (0)	www.google.com		142.251.40.100	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:42.376830101 CET	1.1.1.1	192.168.2.5	0x28ce	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 20, 2024 16:13:44.255909920 CET	1.1.1.1	192.168.2.5	0xc6c5	No error (0)	www.google.com		142.251.35.164	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:44.261269093 CET	1.1.1.1	192.168.2.5	0xd580	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 20, 2024 16:13:50.496763945 CET	1.1.1.1	192.168.2.5	0x4d39	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:50.496763945 CET	1.1.1.1	192.168.2.5	0x4d39	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:50.496786118 CET	1.1.1.1	192.168.2.5	0x94e4	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:50.497247934 CET	1.1.1.1	192.168.2.5	0x4150	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Feb 20, 2024 16:13:50.503523111 CET	1.1.1.1	192.168.2.5	0x632e	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:50.503523111 CET	1.1.1.1	192.168.2.5	0x632e	No error (0)	www3.l.google.com		142.251.40.174	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:50.504803896 CET	1.1.1.1	192.168.2.5	0x457f	No error (0)	netdna.bootstrapcdn.com			65	IN (0x0001)	false
Feb 20, 2024 16:13:50.505589008 CET	1.1.1.1	192.168.2.5	0xf169	No error (0)	netdna.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:50.505589008 CET	1.1.1.1	192.168.2.5	0xf169	No error (0)	netdna.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Feb 20, 2024 16:13:58.379889011 CET	1.1.1.1	192.168.2.5	0xb864	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 20, 2024 16:13:58.379889011 CET	1.1.1.1	192.168.2.5	0xb864	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

accounts.google.com

clients2.google.com

mdtaxconnect.gov

https:

translate.google.com

netdna.bootstrapcdn.com

cdnjs.cloudflare.com

www.bing.com

interactive.marylandtaxes.gov

www.marylandtaxes.gov

stats.g.doubleclick.net

analytics.google.com

app.swiftype.com

s.swiftypecdn.com

cc.swiftype.com

www.google.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49707	172.253.62.84	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:47 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:12:47 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-02-20 15:12:47 UTC	1799	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:12:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-JAUPSwnIgjcd5IrJCWoWdA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/IdentityListAccountsHttp/web-reports?context=eJzjMtDikmLw1JBiOHxtB5Meyy0mIyCe2_2UaSEQH4x7znQUiHf4eLA4pc9gDQBiIR6O902X17EJnFi7cAojALcEF4A" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:12:47 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-02-20 15:12:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	142.251.40.238	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:47 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:12:47 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-SVmLWU0gsFX3FQYZA_OcpA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:12:47 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6259 X-Daystart: 25967 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:12:47 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 35 39 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 35 39 36 37 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6259" elapsed_seconds="25967"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-02-20 15:12:47 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-02-20 15:12:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49711	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:48 UTC	676	OUT	GET //rptp/portal/home HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:12:48 UTC	945	IN	HTTP/1.1 302 Found Date: Tue, 20 Feb 2024 15:12:48 GMT Content-Length: 0 Connection: close Set-Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; Path=/; SameSite=None; Secure Set-Cookie: PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; Path=/ X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Location: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-244708502" Set-Cookie: dtCookie=v_4_srv_12_sn_3B453ADE61914299AD94883F8324CB47_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49710	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:48 UTC	923	OUT	GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401
2024-02-20 15:12:48 UTC	1377	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT X-TOKEN: 5D99C1EC36A7F67B7D16007D851B22C3467ACFC1309A5B177A2F4D7430310BF902B4671ACEC2EC7F68E1D59D8FCAB135C149 X-Frame-Options: SAMEORIGIN Content-Location: /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Pragma: no-cache Vary: Cookie,User-Agent Set-Cookie: X-TOKEN--rptp-portal-home=5D99C1EC36A7F67B7D16007D851B22C3467ACFC1309A5B177A2F4D7430310BF902B4671ACEC2EC7F68E1D59D8FCAB135C149; Path=/rptp/portal/home; Secure; HttpOnly; SameSite=Strict Set-Cookie: JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; Path=/; Secure; HttpOnly Server-Timing: dtSInfo;desc="0", dtRpid;desc="886775933" Set-Cookie: dtCookie=v_4_srv_17_sn_BE64C0F6726C34D895C2FD599CB6EF1F_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en
2024-02-20 15:12:48 UTC	15007	IN	Data Raw: 66 66 66 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 3c 21 2d 2d 20 72 65 6c 3d 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 20 69 6e 64 69 63 61 74 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 Data Ascii: fff8<!DOCTYPE html><html lang="en" ><head><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=Edge">... rel=dynamic-content indicates an element
2024-02-20 15:12:48 UTC	16384	IN	Data Raw: 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 09 20 20 20 20 7d 0d 0a 09 09 7d 3b 0d 0a 09 09 78 6d 6c 68 74 74 70 2e 6f 70 65 6e 28 22 47 45 54 22 2c 22 65 78 74 65 6e 64 53 65 73 73 69 6f 6e 2e 6a 73 70 22 2c 66 61 6c 73 65 29 3b 0d 0a 09 09 78 6d 6c 68 74 74 70 2e 73 65 6e 64 28 29 3b 0d 0a 09 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 73 69 74 65 57 69 64 65 48 65 6c 70 4c 69 6e 6b 22 20 74 69 74 6c 65 3d 22 47 6c 6f 62 61 6c 20 48 65 6c 70 22 3e 0d 0a 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 63 65 73 73 69 62 6c 65 54 65 78 74 22 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 3c 2f 73 70 61 6e 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 0d 0a 3c 2f 61 3e 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 20 54 68 Data Ascii: = "none"; }};xmlhttp.open("GET","extendSession.jsp",false);xmlhttp.send();}</script>...<a href="#void" id="siteWideHelpLink" title="Global Help"><span class="accessibleText">Global Help</span>Global Help</a>-->... Th
2024-02-20 15:12:48 UTC	16384	IN	Data Raw: 76 69 65 77 20 65 6e 64 73 20 66 72 6f 6d 20 68 65 72 65 20 2d 2d 3e 3c 21 2d 2d 20 73 74 61 72 74 20 66 6f 6f 74 65 72 20 2d 2d 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 52 53 49 2d 66 6f 6f 74 65 72 2d 43 68 61 74 22 20 72 6f 6c 65 3d 22 63 6f 6e 74 65 6e 74 69 6e 66 6f 22 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 6f 70 4d 61 72 67 69 6e 44 62 6c 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 22 3e 0d 0a 09 09 0d 0a 09 09 3c 2f 64 69 76 3e 20 20 20 20 0d 0a 09 3c 2f 64 69 76 3e 20 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 21 2d 2d 20 45 4e 44 20 66 6f 6f 74 65 72 20 2d 2d 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 43 68 61 Data Ascii: view ends from here -->... start footer --><div id="RSI-footer-Chat" role="contentinfo"><div class="row topMarginDbl"><div class="col-sm-12"></div> </div> </div>... END footer --></div></c:if></c:if>... Cha
2024-02-20 15:12:48 UTC	16384	IN	Data Raw: 3e 48 6f 6d 65 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 09 09 20 20 20 09 3c 2f 75 6c 3e 0d 0a 09 09 09 09 09 09 3c 21 2d 2d 3c 61 20 72 65 6c 3d 22 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 22 20 68 72 65 66 3d 22 6d 76 63 3a 73 6d 61 72 74 70 68 6f 6e 65 40 72 65 73 3a 2f 49 54 53 43 54 68 65 6d 65 44 79 6e 61 6d 69 63 2f 74 68 65 6d 65 73 2f 68 74 6d 6c 2f 64 79 6e 61 6d 69 63 53 70 6f 74 73 2f 73 65 61 72 63 68 5f 6d 6f 62 69 6c 65 2e 6a 73 70 22 3e 3c 2f 61 3e 2d 2d 3e 0d 0a 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 2d 2d 3e 0d 0a 09 09 09 09 20 20 3c 2f 6e 61 76 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 68 65 61 64 65 72 Data Ascii: >Home</a></li> </ul>...<a rel="dynamic-content" href="mvc:smartphone@res:/ITSCThemeDynamic/themes/html/dynamicSpots/search_mobile.jsp"></a>--></div>... /.navbar-collapse --> </nav></div></div></div></header
2024-02-20 15:12:49 UTC	8612	IN	Data Raw: 61 73 73 3d 22 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 20 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 22 3e 41 70 70 6c 79 20 66 6f 72 20 42 75 73 69 6e 65 73 73 20 45 6d 70 6c 6f 79 65 72 20 49 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 4e 75 6d 62 65 72 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 63 6f 6c 2d 6c 67 2d 34 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 20 70 61 6e 65 6c 2d 64 65 66 61 75 6c 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 22 3e 3c 69 6d 67 20 Data Ascii: ass="list-group-item list-group-item-action">Apply for Business Employer Identification Number</a></div></div></div></div></div></div><div class="row"><div class="col-12 col-lg-4"><div class="panel panel-default"><div class="panel-heading"><img

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49712	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	1063	OUT	GET /rptp/contenthandler/!ut/p/digest!GWWJERcu-9Ti3pOi7lLbAg/sp/mashup:ra:collection?soffset=0&eoffset=5&themeID=ZJ_MOCCHA82M0Q700AN8112B100G1&locale=en&mime-type=text%2Fcss&lm=1703152666000&entry=rsimobile__0.0%3Ahead_css HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:49 UTC	1180	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: nRyhKlyKoEt044miDtFRDw X-DataSource-Digest: GWWJERcu-9Ti3pOi7lLbAg Expires: Wed, 21 Feb 2024 15:12:49 GMT Cache-Control: public, max-age=86400 ETag: "1703152666:dtagent10283240117152214iA/J:dtagent10283240117152214iA/J" Last-Modified: Thu, 21 Dec 2023 09:57:44 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!GWWJERcu-9Ti3pOi7lLbAg/sp/mashup:ra:collection?soffset=0&eoffset=5&themeID=ZJ_MOCCHA82M0Q700AN8112B100G1&locale=en&mime-type=text/css&lm=1703152666000&entry=rsimobile__0.0%3ahead_css Server-Timing: dtSInfo;desc="0", dtRpid;desc="872578600" Set-Cookie: dtCookie=v_4_srv_17_sn_AE654B42C20808759BE0C3A741C2B0C0_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:49 UTC	15204	IN	Data Raw: 62 66 63 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 32 20 2d 20 32 30 31 34 2d 31 30 2d 31 36 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 62 6c 65 2e 63 73 73 2c 20 73 65 6c 65 63 74 6d 65 6e 75 2e 63 73 73 2c 20 73 6c 69 64 Data Ascii: bfc0/! jQuery UI - v1.11.2 - 2014-10-16 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, button.css, datepicker.css, dialog.css, draggable.css, menu.css, progressbar.css, resizable.css, selectable.css, selectmenu.css, slid
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 64 65 72 2d 74 6f 70 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 7d 2e 75 69 2d 73 70 69 6e 6e 65 72 20 2e 75 69 2d 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 38 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 30 7d 2e 75 69 2d 73 70 69 6e 6e 65 72 2d 75 70 7b 74 6f 70 3a 30 7d 2e 75 69 2d 73 70 69 6e 6e 65 72 2d 64 6f 77 6e 7b 62 6f 74 74 6f 6d 3a 30 7d 2e 75 69 2d 73 70 69 6e 6e 65 72 20 2e 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 31 2d 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 35 70 78 20 2d 31 36 70 78 7d 2e 75 69 2d 74 61 62 73 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 Data Ascii: der-top:0;border-bottom:0;border-right:0}.ui-spinner .ui-icon{position:absolute;margin-top:-8px;top:50%;left:0}.ui-spinner-up{top:0}.ui-spinner-down{bottom:0}.ui-spinner .ui-icon-triangle-1-s{background-position:-65px -16px}.ui-tabs{position:relative;padd
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 6c 6f 63 61 6c 65 3d 65 6e 26 6c 6f 63 61 6c 65 3d 65 6e 2d 55 53 26 6c 6f 63 61 6c 65 3d 6c 74 72 22 29 20 35 30 25 20 35 30 25 20 72 65 70 65 61 74 2d 78 3b 6f 70 61 63 69 74 79 3a 2e 33 3b 66 69 6c 74 65 72 3a 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 33 30 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 Data Ascii: locale=en&locale=en-US&locale=ltr") 50% 50% repeat-x;opacity:.3;filter:Alpha(Opacity=30);border-radius:8px}/! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/b
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 66 38 65 33 7d 61 2e 62 67 2d 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 65 63 62 35 7d 2e 62 67 2d 64 61 6e 67 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 64 65 64 65 7d 61 2e 62 67 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 34 62 39 62 39 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 6d 61 72 67 69 6e 3a 33 36 70 78 20 30 20 31 38 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 7d 75 6c 2c 6f 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 7d 75 6c 20 75 6c 2c 6f 6c 20 75 Data Ascii: f8e3}a.bg-warning:hover{background-color:#f7ecb5}.bg-danger{background-color:#f2dede}a.bg-danger:hover{background-color:#e4b9b9}.page-header{padding-bottom:8px;margin:36px 0 18px;border-bottom:1px solid #eee}ul,ol{margin-top:0;margin-bottom:9px}ul ul,ol u
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 3e 74 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 39 2e 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 Data Ascii: >td,.table-responsive>.table-bordered>tfoot>tr:last-child>td{border-bottom:0}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;margin-bottom:18px;font-size:19.5px;line-height:inherit;color:#333;border:0;border-bot
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 67 68 74 7b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 2e 64 69 76 69 64 65 72 7b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 38 70 78 20 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 35 65 35 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 3e 6c 69 3e 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 32 30 70 78 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 64 72 6f 70 64 6f 77 6e 2d Data Ascii: ght{right:0;left:auto}.dropdown-menu .divider{height:1px;margin:8px 0;overflow:hidden;background-color:#e5e5e5}.dropdown-menu>li>a{display:block;padding:3px 20px;clear:both;font-weight:normal;line-height:1.42857143;color:#333;white-space:nowrap}.dropdown-
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 2c 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 Data Ascii: -align:middle}.navbar-form .radio,.navbar-form .checkbox{display:inline-block;margin-top:0;margin-bottom:0;vertical-align:middle}.navbar-form .radio label,.navbar-form .checkbox label{padding-left:0}.navbar-form .radio input[type="radio"],.navbar-form .ch
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 2e 6d 65 64 69 61 2c 2e 6d 65 64 69 61 2d 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 6f 6f 6d 3a 31 7d 2e 6d 65 64 69 61 2c 2e 6d 65 64 69 61 20 2e 6d 65 64 69 61 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 7d 2e 6d 65 64 69 61 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 6d 65 64 69 61 2d 6f 62 6a 65 63 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 65 64 69 61 2d 68 65 61 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 35 70 78 7d 2e 6d 65 64 69 61 3e 2e 70 75 6c 6c 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 6d 65 64 69 61 3e 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 7d 2e 6d 65 64 69 61 2d 6c 69 73 74 7b 70 61 Data Ascii: .media,.media-body{overflow:hidden;zoom:1}.media,.media .media{margin-top:15px}.media:first-child{margin-top:0}.media-object{display:block}.media-heading{margin:0 0 5px}.media>.pull-left{margin-right:10px}.media>.pull-right{margin-left:10px}.media-list{pa
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 78 20 61 75 74 6f 7d 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 7d 2e 6d 6f 64 61 6c 2d 73 6d 7b 77 69 64 74 68 3a 33 30 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 6d 6f 64 61 6c 2d 6c 67 7b 77 69 64 74 68 3a 39 30 30 70 78 7d 7d 2e 74 6f 6f 6c 74 69 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 37 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 66 6f 6e 74 2d 73 Data Ascii: x auto}.modal-content{-webkit-box-shadow:0 5px 15px rgba(0,0,0,0.5);box-shadow:0 5px 15px rgba(0,0,0,0.5)}.modal-sm{width:300px}}@media(min-width:992px){.modal-lg{width:900px}}.tooltip{position:absolute;z-index:1070;display:block;visibility:visible;font-s
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 0a 2e 75 69 2d 68 65 6c 70 65 72 2d 63 6c 65 61 72 66 69 78 20 7b 0d 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 30 3b 20 2f 2a 20 73 75 70 70 6f 72 74 3a 20 49 45 37 20 2a 2f 0d 0a 7d 0d 0a 2e 75 69 2d 68 65 6c 70 65 72 2d 7a 66 69 78 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 66 69 6c 74 65 72 3a 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 30 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 75 69 2d 66 72 6f 6e 74 20 7b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2f 2a 20 49 6e 74 65 72 61 63 74 69 6f 6e 20 43 75 Data Ascii: .ui-helper-clearfix {min-height: 0; /* support: IE7 /}.ui-helper-zfix {width: 100%;height: 100%;top: 0;left: 0;position: absolute;opacity: 0;filter:Alpha(Opacity=0);}.ui-front {z-index: 100;}/ Interaction Cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49713	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	931	OUT	GET /ITSCThemeStatic/themes/Portal8.5/css/rsi/RSI_Custom.css?modifiedDate=2024-02-13T12:52 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:49 UTC	633	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: text/css Content-Length: 5116 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 21 Dec 2023 09:57:46 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_A1E18018C4B2EC96FEBCBD3C860F44CF_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:49 UTC	5116	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 2e 63 75 73 74 6f 6d 2d 73 74 79 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 32 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 32 25 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 75 73 74 6f 6d 2d 73 74 79 6c 65 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 32 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 32 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 75 73 74 6f 6d 2d 73 74 79 6c 65 32 7b Data Ascii: @charset "utf-8";.custom-style{font-size:10px !important;width:12% !important;min-width:12% !important;max-width:12% !important}.custom-style1{font-size:10px !important;width:20% !important;min-width:20% !important;max-width:20% !important}.custom-style2{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	142.250.72.110	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	858	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:12:49 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:12:49 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:12:49 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-02-20 15:12:49 UTC	1252	IN	Data Raw: 66 62 2c 67 62 2c 68 62 2c 69 62 2c 77 2c 6a 62 2c 6d 62 2c 6f 62 2c 73 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b Data Ascii: fb,gb,hb,ib,w,jb,mb,ob,sb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;
2024-02-20 15:12:49 UTC	1252	IN	Data Raw: 28 30 29 2b 66 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b Data Ascii: (0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};
2024-02-20 15:12:49 UTC	1252	IN	Data Raw: 53 63 72 69 70 74 28 61 29 3a 61 3b 62 3d 6e 65 77 20 53 61 3b 62 2e 6e 67 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 61 29 72 65 74 75 72 6e 20 61 2e 6e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 41 22 29 3b 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 57 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 59 61 2e 61 70 70 6c 79 28 31 2c Data Ascii: Script(a):a;b=new Sa;b.ng=a;return b};_.Ua=function(a){if(a instanceof Sa)return a.ng;throw Error("A");};Va=function(){};Xa=function(a){return new _.Wa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.$a=function(a){var b=_.Ya.apply(1,
2024-02-20 15:12:49 UTC	1252	IN	Data Raw: 28 22 61 22 29 3b 7d 3b 69 62 3d 68 62 28 74 68 69 73 29 3b 0a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 69 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 67 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ("a");};ib=hb(this);w=function(a,b){if(b)a:{var c=ib;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&gb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){
2024-02-20 15:12:49 UTC	1252	IN	Data Raw: 61 29 29 3b 7d 3b 5f 2e 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 78 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6d 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: a));};_.lb=function(a){if(!(a instanceof Array)){a=_.x(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};mb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.nb=function(){functi
2024-02-20 15:12:49 UTC	1252	IN	Data Raw: 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b 7d 7d 29 3b 77 28 22 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f Data Ascii: )b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{}});w("Reflect.construct",function(){return _.nb});w("Reflect.setPrototypeOf",function(a){return a?a:sb?function(b,c){try{return sb(b,c),!0}catch(d){return!1}}:null});w("Promise",functio
2024-02-20 15:12:49 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 62 61 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 Data Ascii: function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}"function"==typeof h?this.ba(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`
2024-02-20 15:12:49 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 28 71 2c 70 29 7b 6d 3d 71 3b 6e 3d 70 7d 29 3b 74 68 69 73 2e 4c 63 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d Data Ascii: nction(q,p){m=q;n=p});this.Lc(l(g,m),l(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Lc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null=
2024-02-20 15:12:49 UTC	1252	IN	Data Raw: 3d 3d 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 75 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 67 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b Data Ascii: ===m}function d(l){if(!ub(l,f)){var m=new b;gb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49714	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	933	OUT	GET /ITSCThemeStatic/themes/Portal8.5/css/rsi/md/MD_Custom.css?modifiedDate=2024-02-06T16:48 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:49 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: text/css Content-Length: 17441 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Tue, 06 Feb 2024 21:40:38 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_12_sn_9D08151599E460CF0A20D4F05F54C5FA_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:49 UTC	15750	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 68 65 61 64 65 72 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 20 31 30 30 25 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 73 74 69 63 6b 79 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 2d 31 35 30 70 78 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 32 30 3b 0d 0a 7d 0d 0a 68 74 6d 6c 2c 62 6f 64 79 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 22 53 65 67 6f 65 20 55 49 22 2c 52 6f 62 6f 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d Data Ascii: @charset "utf-8";header{ background-repeat: no-repeat; background-size: 100% 100%;position: sticky; top: -150px; z-index: 1020;}html,body {font-family: -apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto !important;
2024-02-20 15:12:49 UTC	1691	IN	Data Raw: 69 67 68 74 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 3e 6c 69 3e 61 3a 68 6f 76 65 72 2c 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 3e 6c 69 3e 61 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 35 66 35 66 35 0d 0a 7d 0d 0a 23 6e 61 76 62 61 72 53 75 70 70 6f 72 74 65 64 43 6f 6e 74 65 6e 74 20 75 6c 2e 6e 61 76 62 61 72 2d 6e 61 76 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 64 Data Ascii: ight: 0px;}.dropdown-menu>li>a:hover,.dropdown-menu>li>a:focus { text-decoration: none; color: #262626; background-color: #f5f5f5}#navbarSupportedContent ul.navbar-nav { display: inline-flex;}@media only screen and (min-d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49715	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	890	OUT	GET /rptp/mypoc/ruxitagentjs_ICA27NVfhjqru_10283240117152214.js HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:49 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 204687 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Expires: Wed, 19 Feb 2025 15:12:49 GMT Cache-Control: public, max-age=31536000, immutable Last-Modified: Wed, 03 Mar 2010 07:01:40 GMT
2024-02-20 15:12:49 UTC	15892	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 43 61 3d 2d 31 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ */(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ca=-1!==document.cookie.indexOf("__dTCookie");documen
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 4d 61 74 68 2e 66 6c 6f 6f 72 28 33 33 2a 67 65 28 29 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 67 65 28 29 2a 28 71 2d 67 2b 31 29 29 2b 67 7d 66 75 6e 63 74 69 6f 6e 20 57 64 28 67 29 7b 69 66 28 21 67 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 71 3d 4e 61 2e 63 72 79 70 74 6f 7c 7c 4e 61 2e 6d 73 43 72 79 70 74 6f 3b 69 66 28 71 26 26 2d 31 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 47 6f 6f 67 6c 65 62 6f 74 22 29 29 71 3d 71 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 67 29 29 3b 65 6c 73 65 7b 71 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 78 3d 30 3b 78 3c 67 3b 78 2b 2b 29 71 2e 70 75 73 68 28 44 63 28 30 2c 33 32 29 29 7d 67 3d 5b 5d 3b 66 6f 72 28 78 3d Data Ascii: Math.floor(33ge()):Math.floor(ge()(q-g+1))+g}function Wd(g){if(!g)return"";var q=Na.crypto\|\|Na.msCrypto;if(q&&-1===navigator.userAgent.indexOf("Googlebot"))q=q.getRandomValues(new Uint8Array(g));else{q=[];for(var x=0;x<g;x++)q.push(Dc(0,32))}g=[];for(x=
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 64 54 5f 3d 76 6f 69 64 20 30 3b 76 61 72 20 47 65 3d 21 31 3b 62 72 65 61 6b 20 61 7d 7d 63 61 74 63 68 28 74 68 29 7b 7d 69 66 28 76 28 29 29 7b 76 61 72 20 41 66 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 58 64 3d 41 66 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 52 75 78 69 74 53 79 6e 74 68 65 74 69 63 22 29 3b 69 66 28 2d 31 3d 3d 3d 58 64 29 76 61 72 20 4f 65 3d 7b 7d 3b 65 6c 73 65 7b 76 61 72 20 50 65 3d 41 66 2e 73 75 62 73 74 72 69 6e 67 28 58 64 2b 31 34 29 3b 69 66 28 2d 31 3d 3d 3d 50 65 2e 69 6e 64 65 78 4f 66 28 22 20 63 22 29 29 4f 65 3d 7b 7d 3b 65 6c 73 65 7b 4d 64 3d 7b 7d 3b 6b 65 3d 30 3b 66 6f 72 28 76 61 72 20 68 67 3d 50 65 2e 73 70 6c 69 74 28 22 20 22 29 3b 6b 65 3c 68 67 2e 6c 65 6e 67 74 68 3b 6b 65 2b 2b 29 Data Ascii: dT_=void 0;var Ge=!1;break a}}catch(th){}if(v()){var Af=navigator.userAgent,Xd=Af.lastIndexOf("RuxitSynthetic");if(-1===Xd)var Oe={};else{var Pe=Af.substring(Xd+14);if(-1===Pe.indexOf(" c"))Oe={};else{Md={};ke=0;for(var hg=Pe.split(" ");ke<hg.length;ke++)
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 64 61 74 61 3a 22 29 29 72 65 74 75 72 6e 22 22 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 66 28 30 3c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 61 5b 61 2e 6c 65 6e 67 74 68 2d 0a 31 5d 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 49 62 28 61 29 7b 69 66 28 61 26 26 61 2e 73 70 6c 69 74 29 7b 76 61 72 20 62 3d 61 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 66 28 30 3c 62 2e 6c 65 6e 67 74 68 26 26 28 62 3d 44 61 28 62 5b 62 2e 6c 65 6e 67 74 68 2d 31 5d 29 2c 6e 75 6c 6c 21 3d 3d 62 29 29 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 20 61 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4a 62 28 61 29 7b 72 65 74 75 72 6e 20 57 61 28 61 29 3f 61 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 61 2e 74 65 78 74 Data Ascii: data:"))return"";a=a.split("/");if(0<a.length)return a[a.length-1].split(".")[0]}return""}function Ib(a){if(a&&a.split){var b=a.split("/");if(0<b.length&&(b=Da(b[b.length-1]),null!==b))return b}return a\|\|""}function Jb(a){return Wa(a)?a.innerText\|\|a.text
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 28 28 61 3d 7b 7d 2c 61 2e 6b 69 6e 64 3d 22 56 49 53 49 42 49 4c 49 54 59 5f 43 48 41 4e 47 45 44 22 2c 61 2e 64 65 74 61 69 6c 3d 0a 54 69 2c 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 64 28 61 2c 62 2c 66 29 7b 69 66 28 58 63 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 66 29 3b 76 61 72 20 6b 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 66 3b 66 3d 6b 3f 66 3a 61 5b 30 5d 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 66 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 52 65 64 75 63 65 20 6f 66 20 65 6d 70 74 79 20 61 72 72 61 79 20 77 69 74 Data Ascii: ((a={},a.kind="VISIBILITY_CHANGED",a.detail=Ti,a))}function Nd(a,b,f){if(Xc(Array.prototype.reduce))return Array.prototype.reduce.call(a,b,f);var k="undefined"!==typeof f;f=k?f:a[0];if("undefined"===typeof f)throw new TypeError("Reduce of empty array wit
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 75 22 29 2c 4b 3d 4b 61 28 7b 7d 2c 61 29 3b 4b 2e 6e 61 6d 65 3d 73 62 28 61 2e 6e 61 6d 65 2c 0a 42 2c 21 30 29 3b 61 2e 67 72 6f 75 70 26 26 28 4b 2e 67 72 6f 75 70 3d 73 62 28 61 2e 67 72 6f 75 70 2c 42 2c 21 30 29 29 3b 66 64 3d 61 3d 6b 28 6e 28 7b 7d 2c 4b 29 2c 7b 74 69 6d 65 73 74 61 6d 70 3a 6b 63 28 29 2c 69 64 3a 2b 2b 48 66 2c 6b 69 6e 64 3a 31 2c 74 72 69 67 67 65 72 3a 55 64 2c 68 79 64 72 61 74 65 64 3a 21 31 7d 29 3b 30 3c 56 69 26 26 62 66 2e 70 75 73 68 28 61 29 3b 4f 28 28 62 3d 7b 7d 2c 62 2e 6b 69 6e 64 3d 22 56 49 45 57 5f 43 48 41 4e 47 45 22 2c 62 2e 64 65 74 61 69 6c 3d 52 66 28 66 2c 66 64 29 2c 62 29 29 3b 48 6a 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 61 29 7b 76 61 72 20 62 3d 48 69 73 74 6f 72 79 2e 70 72 6f 74 6f 74 79 Data Ascii: u"),K=Ka({},a);K.name=sb(a.name,B,!0);a.group&&(K.group=sb(a.group,B,!0));fd=a=k(n({},K),{timestamp:kc(),id:++Hf,kind:1,trigger:Ud,hydrated:!1});0<Vi&&bf.push(a);O((b={},b.kind="VIEW_CHANGE",b.detail=Rf(f,fd),b));Hj()}function Ze(a){var b=History.prototy
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 2b 6b 5b 31 5d 3a 6b 5b 31 5d 7d 29 29 3a 28 55 67 5b 62 5d 3d 5b 61 2e 74 2c 7b 7d 5d 2c 69 61 28 61 2e 64 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 55 67 5b 62 5d 5b 31 5d 5b 6b 5b 30 5d 5d 3d 6b 5b 31 5d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 69 28 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 61 26 26 28 61 3d 21 31 29 3b 69 61 28 58 28 55 67 29 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 61 6b 2e 70 75 73 68 28 6b 69 28 66 2c 55 67 5b 66 5d 29 29 7d 29 3b 76 61 72 20 62 3d 22 22 3b 69 61 28 61 6b 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 6b 2c 6e 29 7b 69 66 28 62 2e 6c 65 6e 67 74 68 2b 31 2b 66 2e 6c 65 6e 67 74 68 3e 3d 77 66 29 7b 6f 6a 28 62 2c 61 29 3b 62 3d 22 22 3b 69 66 28 6b 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 2d 31 29 7b 6f 6a 28 22 22 2e 63 6f 6e 63 61 74 28 45 Data Ascii: +k[1]:k[1]})):(Ug[b]=[a.t,{}],ia(a.d,function(k){Ug[b][1][k[0]]=k[1]}))}function li(a){void 0===a&&(a=!1);ia(X(Ug),function(f){ak.push(ki(f,Ug[f]))});var b="";ia(ak,function(f,k,n){if(b.length+1+f.length>=wf){oj(b,a);b="";if(k===n.length-1){oj("".concat(E
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 22 49 46 52 41 4d 45 22 3b 61 2e 49 4d 41 47 45 3d 22 49 4d 47 22 3b 61 2e 49 4e 50 55 54 3d 22 49 4e 50 55 54 22 3b 61 2e 4c 41 42 45 4c 3d 22 4c 41 42 45 4c 22 3b 61 2e 4c 49 4e 4b 3d 22 4c 49 4e 4b 22 3b 61 2e 4f 50 54 49 4f 4e 3d 22 4f 50 54 49 4f 4e 22 3b 61 2e 53 43 52 49 50 54 3d 22 53 43 52 49 50 54 22 3b 61 2e 53 45 4c 45 43 54 3d 22 53 45 4c 45 43 54 22 3b 61 2e 53 54 59 4c 45 3d 22 53 54 59 4c 45 22 3b 61 2e 54 45 58 54 5f 41 52 45 41 3d 22 54 45 58 54 41 52 45 41 22 7d 29 28 59 66 7c 7c 28 59 66 3d 7b 7d 29 29 3b 76 61 72 20 77 63 3d 21 31 2c 56 63 3d 30 2c 71 66 3d 5b 5d 2c 6f 65 3d 5b 5d 2c 48 64 2c 67 68 2c 43 64 2c 4c 67 3d 31 2c 6e 67 3d 30 2c 42 66 3d 5b 5d 2c 7a 6a 3d 5b 5d 2c 43 66 3d 21 31 2c 45 68 3d 5b 5d 2c 44 68 2c 41 6a 3d 5b 5d Data Ascii: "IFRAME";a.IMAGE="IMG";a.INPUT="INPUT";a.LABEL="LABEL";a.LINK="LINK";a.OPTION="OPTION";a.SCRIPT="SCRIPT";a.SELECT="SELECT";a.STYLE="STYLE";a.TEXT_AREA="TEXTAREA"})(Yf\|\|(Yf={}));var wc=!1,Vc=0,qf=[],oe=[],Hd,gh,Cd,Lg=1,ng=0,Bf=[],zj=[],Cf=!1,Eh=[],Dh,Aj=[]
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 61 72 20 66 3d 74 68 69 73 2e 70 61 72 65 6e 74 3b 66 3b 29 66 2e 44 61 28 4d 61 74 68 2e 6d 61 78 28 66 2e 73 74 6f 70 2c 74 68 69 73 2e 73 74 6f 70 29 29 2c 66 3d 66 2e 70 61 72 65 6e 74 3b 74 68 69 73 2e 4b 64 2e 70 75 73 68 28 62 29 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 56 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6b 29 7b 76 61 72 20 6e 3b 76 6f 69 64 20 30 3d 3d 3d 6b 26 26 28 6b 3d 2d 31 29 3b 5a 61 28 66 2e 6e 63 2c 66 2e 6e 63 2e 69 6e 64 65 78 4f 66 28 62 29 29 3b 66 2e 44 61 28 4d 61 74 68 2e 6d 61 78 28 6b 2c 66 2e 73 74 6f 70 29 29 3b 66 2e 51 63 28 29 7c 7c 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 66 2e 4e 66 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 66 67 28 29 29 7d 0a 76 61 72 20 66 3d Data Ascii: ar f=this.parent;f;)f.Da(Math.max(f.stop,this.stop)),f=f.parent;this.Kd.push(b)};a.prototype.Vf=function(){function b(k){var n;void 0===k&&(k=-1);Za(f.nc,f.nc.indexOf(b));f.Da(Math.max(k,f.stop));f.Qc()\|\|(null===(n=f.Nf)\|\|void 0===n?void 0:n.fg())}var f=
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 65 6c 66 2c 68 61 2c 53 3d 6e 65 77 20 4d 61 70 2c 6e 61 2c 48 61 2c 63 62 2c 44 61 3d 28 6e 61 3d 7b 7d 2c 6e 61 2e 66 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 61 61 2c 55 29 7b 72 65 74 75 72 6e 20 48 61 2e 61 57 46 28 5a 2c 61 61 2c 55 29 7d 2c 6e 61 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 61 61 2c 55 29 7b 72 65 74 75 72 6e 20 48 61 2e 61 57 46 28 5a 2c 61 61 2c 55 29 7d 2c 6e 61 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 61 61 2c 55 29 7b 72 65 74 75 72 6e 20 48 61 2e 61 57 46 28 5a 2c 61 61 2c 55 29 7d 2c 6e 61 2e 6f 6e 52 65 6a 65 63 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 61 61 2c 55 29 7b 72 65 74 75 72 6e 20 48 61 2e 61 57 46 28 5a 2c 61 61 2c 55 29 7d 2c 6e 61 29 3b 28 66 75 6e 63 74 69 6f 6e Data Ascii: elf,ha,S=new Map,na,Ha,cb,Da=(na={},na.fetch=function(Z,aa,U){return Ha.aWF(Z,aa,U)},na.then=function(Z,aa,U){return Ha.aWF(Z,aa,U)},na.onFulfilled=function(Z,aa,U){return Ha.aWF(Z,aa,U)},na.onRejected=function(Z,aa,U){return Ha.aWF(Z,aa,U)},na);(function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49716	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	1103	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/mashup/ra:collection?themeID=ZJ_MOCCHA82M0Q700AN8112B100G1&locale=en&mime-type=text%2Fjavascript&lm=1695019440000&entry=wp_client_main__0.0%3Ahead_js&entry=wp_client_ext__0.0%3Ahead_js&entry=rsimobile__0.0%3Ahead_js HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:49 UTC	1549	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: AoyHMWAxOLkttYS_vXyz4w X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 21 Feb 2024 15:12:49 GMT Cache-Control: public, max-age=86400 ETag: "1695019440:dtagent10283240117152214iA/J:dtagent10283240117152214iA/J" Last-Modified: Mon, 18 Sep 2023 06:43:58 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/mashup/mashup:cxml/tc5NSwQxDAbgX9PjdD4cZfEmelEQhNn7kKlxt0M7qWnKzkJ_vFtdD3oT9RRCeN88uD4M14cwGmdxkdGDXVTbN4xRtRc3NQcJtezR4yM9J4ex9udpJ2_q-bSfEqODI7KeY84pIqvO0CK4Sn4BF7HKBsweVRcNBcwhTc6aKntYVQc7zJurvmmqHJhmNPI9XOFX4enyM6AhxpL6fyRH62myDgvwAFyA99vhdlt4g4BY80GN9ROxgNvoyyKcXxPyUXWtbhvdaW-Xovxd50QkURjC39R9EpM9M3ttUhTydxYc7d4fvAH4EHtR?themeID=ZJ_MOCCHA82M0Q700AN8112B100G1&locale=en&mime-type=text/javascript&lm=1695019440000&entry=wp_client_main__0.0%3ahead_js&entry=wp_client_ext__0.0%3ahead_js&entry=rsimobile__0.0%3ahead_js Server-Timing: dtSInfo;desc="0", dtRpid;desc="2003269928" Set-Cookie: dtCookie=v_4_srv_12_sn_F00603CC013B4B56A74FD0AA5DFF1796_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:49 UTC	14835	IN	Data Raw: 31 61 63 33 0d 0a 0a 74 72 79 7b 2f 2a 2a 20 4c 69 63 65 6e 73 65 64 20 4d 61 74 65 72 69 61 6c 73 20 2d 20 50 72 6f 70 65 72 74 79 20 6f 66 20 49 42 4d 2c 20 35 37 32 34 2d 45 37 36 20 61 6e 64 20 35 37 32 34 2d 45 37 37 2c 20 28 43 29 20 43 6f 70 79 72 69 67 68 74 20 49 42 4d 20 43 6f 72 70 2e 20 32 30 31 31 2c 20 32 30 31 32 20 2d 20 41 6c 6c 20 52 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 20 2a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 69 24 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 69 66 28 69 24 2e 71 65 6c 29 7b 0a 72 65 74 75 72 6e 20 69 24 2e 71 65 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 0a 7d 0a 7d 3b 0a 77 2e 69 24 3d 69 24 3b 0a 69 24 2e 67 6c 6f 62 61 6c 3d 77 3b Data Ascii: 1ac3try{/ Licensed Materials - Property of IBM, 5724-E76 and 5724-E77, (C) Copyright IBM Corp. 2011, 2012 - All Rights reserved. /(function(){var w=window,i$=function(){if(i$.qel){return i$.qel.apply(this,arguments);}};w.i$=i$;i$.global=w;
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 65 72 3a 66 75 6e 63 74 69 6f 6e 28 5f 34 37 2c 66 6e 29 7b 0a 72 65 74 75 72 6e 20 61 64 64 28 74 68 69 73 2c 5f 34 37 2c 22 62 22 2c 66 6e 29 3b 0a 7d 2c 72 65 6d 6f 76 65 42 72 6f 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 5f 34 38 29 7b 0a 72 65 74 75 72 6e 20 5f 33 35 28 74 68 69 73 2c 5f 34 38 29 3b 0a 7d 2c 66 69 72 65 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 5f 34 39 2c 5f 34 61 29 7b 0a 72 65 74 75 72 6e 20 5f 34 30 28 74 68 69 73 2c 5f 34 39 2c 5f 34 61 29 3b 0a 7d 7d 29 3b 0a 76 61 72 20 5f 34 62 3d 6e 65 77 20 5f 32 65 28 29 3b 0a 69 24 2e 65 61 63 68 28 5b 22 61 64 64 4c 69 73 74 65 6e 65 72 22 2c 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 2c 22 61 64 64 42 72 6f 6b 65 72 22 2c 22 72 65 6d 6f 76 65 42 72 6f 6b 65 72 22 2c 22 66 69 72 65 Data Ascii: er:function(_47,fn){return add(this,_47,"b",fn);},removeBroker:function(_48){return _35(this,_48);},fireEvent:function(_49,_4a){return _40(this,_49,_4a);}});var _4b=new _2e();i$.each(["addListener","removeListener","addBroker","removeBroker","fire
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 7d 2c 6a 3d 74 79 70 65 6f 66 20 74 2c 44 3d 31 3c 3c 33 31 2c 4c 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 48 3d 5b 5d 2c 71 3d 48 2e 70 6f 70 2c 5f 3d 48 2e 70 75 73 68 2c 4d 3d 48 2e 70 75 73 68 2c 4f 3d 48 2e 73 6c 69 63 65 2c 46 3d 48 2e 69 6e 64 65 78 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 2c 6e 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 6e 3e 74 3b 74 2b 2b 29 69 66 28 74 68 69 73 5b 74 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 2d 31 7d 2c 42 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d Data Ascii: },j=typeof t,D=1<<31,L={}.hasOwnProperty,H=[],q=H.pop,_=H.push,M=H.push,O=H.slice,F=H.indexOf\|\|function(e){var t=0,n=this.length;for(;n>t;t++)if(this[t]===e)return t;return-1},B="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ism
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 6c 65 6e 67 74 68 29 7b 69 66 28 73 3d 66 5b 30 5d 3d 66 5b 30 5d 2e 73 6c 69 63 65 28 30 29 2c 73 2e 6c 65 6e 67 74 68 3e 32 26 26 22 49 44 22 3d 3d 3d 28 75 3d 73 5b 30 5d 29 2e 74 79 70 65 26 26 72 2e 67 65 74 42 79 49 64 26 26 39 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 68 26 26 6f 2e 72 65 6c 61 74 69 76 65 5b 73 5b 31 5d 2e 74 79 70 65 5d 29 7b 69 66 28 74 3d 28 6f 2e 66 69 6e 64 2e 49 44 28 75 2e 6d 61 74 63 68 65 73 5b 30 5d 2e 72 65 70 6c 61 63 65 28 72 74 2c 69 74 29 2c 74 29 7c 7c 5b 5d 29 5b 30 5d 2c 21 74 29 72 65 74 75 72 6e 20 6e 3b 65 3d 65 2e 73 6c 69 63 65 28 73 2e 73 68 69 66 74 28 29 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 29 7d 61 3d 51 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 2e 74 65 73 74 28 65 29 3f 30 3a 73 2e 6c 65 6e 67 74 68 Data Ascii: length){if(s=f[0]=f[0].slice(0),s.length>2&&"ID"===(u=s[0]).type&&r.getById&&9===t.nodeType&&h&&o.relative[s[1].type]){if(t=(o.find.ID(u.matches[0].replace(rt,it),t)\|\|[])[0],!t)return n;e=e.slice(s.shift().value.length)}a=Q.needsContext.test(e)?0:s.length
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 61 6c 75 65 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 78 2e 6e 6f 64 65 4e 61 6d 65 28 65 2c 22 69 6e 70 75 74 22 29 3f 28 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 6e 2c 74 29 3a 7a 26 26 7a 2e 73 65 74 28 65 2c 6e 2c 72 29 7d 7d 29 2c 51 7c 7c 28 7a 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 72 29 3b 72 65 74 75 72 6e 20 69 7c 7c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 28 72 29 29 2c 69 2e 76 61 6c 75 65 3d 6e 2b 3d 22 22 2c 22 76 61 6c 75 65 22 3d 3d 3d 72 7c 7c 6e 3d 3d 3d 65 2e 67 65 74 41 74 Data Ascii: alue={set:function(e,n,r){return x.nodeName(e,"input")?(e.defaultValue=n,t):z&&z.set(e,n,r)}}),Q\|\|(z={set:function(e,n,r){var i=e.getAttributeNode(r);return i\|\|e.setAttributeNode(i=e.ownerDocument.createAttribute(r)),i.value=n+="","value"===r\|\|n===e.getAt
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 70 3e 3c 2f 74 61 62 6c 65 3e 22 5d 2c 74 64 3a 5b 33 2c 22 3c 74 61 62 6c 65 3e 3c 74 62 6f 64 79 3e 3c 74 72 3e 22 2c 22 3c 2f 74 72 3e 3c 2f 74 62 6f 64 79 3e 3c 2f 74 61 62 6c 65 3e 22 5d 2c 5f 64 65 66 61 75 6c 74 3a 78 2e 73 75 70 70 6f 72 74 2e 68 74 6d 6c 53 65 72 69 61 6c 69 7a 65 3f 5b 30 2c 22 22 2c 22 22 5d 3a 5b 31 2c 22 58 3c 64 69 76 3e 22 2c 22 3c 2f 64 69 76 3e 22 5d 7d 2c 6a 74 3d 64 74 28 61 29 2c 44 74 3d 6a 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 3b 41 74 2e 6f 70 74 67 72 6f 75 70 3d 41 74 2e 6f 70 74 69 6f 6e 2c 41 74 2e 74 62 6f 64 79 3d 41 74 2e 74 66 6f 6f 74 3d 41 74 2e 63 6f 6c 67 72 6f 75 70 3d 41 74 2e 63 61 70 74 69 6f 6e 3d 41 74 2e 74 68 65 61 64 2c 41 Data Ascii: p></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:x.support.htmlSerialize?[0,"",""]:[1,"X<div>","</div>"]},jt=dt(a),Dt=jt.appendChild(a.createElement("div"));At.optgroup=At.option,At.tbody=At.tfoot=At.colgroup=At.caption=At.thead,A
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 79 6e 2e 68 72 65 66 3d 22 22 2c 79 6e 3d 79 6e 2e 68 72 65 66 7d 6d 6e 3d 45 6e 2e 65 78 65 63 28 79 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 48 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 2a 22 29 3b 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 54 29 7c 7c 5b 5d 3b 69 66 28 78 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6e 29 29 77 68 69 6c 65 28 72 3d 6f 5b 69 2b 2b 5d 29 22 2b 22 3d 3d 3d 72 5b 30 5d 3f 28 72 3d 72 2e 73 6c 69 63 65 28 31 29 7c 7c 22 2a 22 2c 28 65 5b 72 5d 3d 65 5b 72 5d 7c 7c Data Ascii: teElement("a"),yn.href="",yn=yn.href}mn=En.exec(yn.toLowerCase())\|\|[];function Hn(e){return function(t,n){"string"!=typeof t&&(n=t,t="");var r,i=0,o=t.toLowerCase().match(T)\|\|[];if(x.isFunction(n))while(r=o[i++])"+"===r[0]?(r=r.slice(1)\|\|"",(e[r]=e[r]\|\|
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 2e 74 69 6d 65 72 73 2c 72 3d 30 3b 66 6f 72 28 58 6e 3d 78 2e 6e 6f 77 28 29 3b 6e 2e 6c 65 6e 67 74 68 3e 72 3b 72 2b 2b 29 65 3d 6e 5b 72 5d 2c 65 28 29 7c 7c 6e 5b 72 5d 21 3d 3d 65 7c 7c 6e 2e 73 70 6c 69 63 65 28 72 2d 2d 2c 31 29 3b 6e 2e 6c 65 6e 67 74 68 7c 7c 78 2e 66 78 2e 73 74 6f 70 28 29 2c 58 6e 3d 74 7d 2c 78 2e 66 78 2e 74 69 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 26 26 78 2e 74 69 6d 65 72 73 2e 70 75 73 68 28 65 29 26 26 78 2e 66 78 2e 73 74 61 72 74 28 29 7d 2c 78 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 78 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 55 6e 7c 7c 28 55 6e 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 78 2e 66 78 2e 74 69 63 6b 2c 78 2e 66 78 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 78 Data Ascii: .timers,r=0;for(Xn=x.now();n.length>r;r++)e=n[r],e()\|\|n[r]!==e\|\|n.splice(r--,1);n.length\|\|x.fx.stop(),Xn=t},x.fx.timer=function(e){e()&&x.timers.push(e)&&x.fx.start()},x.fx.interval=13,x.fx.start=function(){Un\|\|(Un=setInterval(x.fx.tick,x.fx.interval))},x
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 6c 61 79 2e 73 68 6f 77 29 72 65 74 75 72 6e 20 63 2e 73 68 6f 77 28 29 3b 63 2e 74 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 68 6f 76 65 72 53 74 61 74 65 3d 3d 22 69 6e 22 26 26 63 2e 73 68 6f 77 28 29 7d 2c 63 2e 6f 70 74 69 6f 6e 73 2e 64 65 6c 61 79 2e 73 68 6f 77 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 65 61 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 62 3a 61 28 62 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 5b 74 68 69 73 2e 74 79 70 65 5d 28 74 68 69 73 2e 67 65 74 44 65 6c 65 67 61 74 65 4f 70 74 69 6f 6e 73 28 29 29 2e 64 61 74 61 28 22 62 73 2e 22 2b 74 68 69 73 2e 74 79 70 65 Data Ascii: lay.show)return c.show();c.timeout=setTimeout(function(){c.hoverState=="in"&&c.show()},c.options.delay.show)},b.prototype.leave=function(b){var c=b instanceof this.constructor?b:a(b.currentTarget)[this.type](this.getDelegateOptions()).data("bs."+this.type
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 6e 20 28 2f 28 61 75 74 6f 7c 73 63 72 6f 6c 6c 29 2f 29 2e 74 65 73 74 28 24 2e 63 73 73 28 74 68 69 73 2c 22 6f 76 65 72 66 6c 6f 77 22 29 2b 24 2e 63 73 73 28 74 68 69 73 2c 22 6f 76 65 72 66 6c 6f 77 2d 79 22 29 2b 24 2e 63 73 73 28 74 68 69 73 2c 22 6f 76 65 72 66 6c 6f 77 2d 78 22 29 29 3b 0d 0a 09 09 09 7d 29 2e 65 71 28 30 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 28 2f 66 69 78 65 64 2f 29 2e 74 65 73 74 28 74 68 69 73 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 29 20 7c 7c 20 21 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 6c 65 6e 67 74 68 20 3f 20 24 28 64 6f 63 75 6d 65 6e 74 29 20 3a 20 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 7a 49 6e 64 65 78 3a 20 66 75 6e 63 74 69 6f 6e 28 20 7a 49 6e 64 65 78 Data Ascii: n (/(auto\|scroll)/).test($.css(this,"overflow")+$.css(this,"overflow-y")+$.css(this,"overflow-x"));}).eq(0);}return (/fixed/).test(this.css("position")) \|\| !scrollParent.length ? $(document) : scrollParent;},zIndex: function( zIndex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49717	104.18.10.207	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	574	OUT	GET /bootstrap/3.0.0/css/bootstrap.min.css HTTP/1.1 Host: netdna.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:12:49 UTC	933	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: FR Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"4eadbf7d1721bb2729e398595bc7f0bc" Last-Modified: Mon, 25 Jan 2021 22:03:55 GMT CDN-CachedAt: 12/25/2022 15:24:55 CDN-ProxyVer: 1.03 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1073 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 0fcc4201dc1c768e1ada491433a36d91 CDN-Cache: HIT CF-Cache-Status: HIT Age: 7022180 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8587b0a2dc1a4240-EWR alt-svc: h3=":443"; ma=86400
2024-02-20 15:12:49 UTC	436	IN	Data Raw: 37 63 30 65 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 32 2e 31 2e 30 20 7c Data Ascii: 7c0e/! Bootstrap v3.0.0 * * Copyright 2013 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world by @mdo and @fat. //! normalize.css v2.1.0 \|
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 68 31 7b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 61 62 62 72 5b 74 69 74 6c 65 5d Data Ascii: ot([controls]){display:none;height:0}[hidden]{display:none}html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{margin:.67em 0;font-size:2em}abbr[title]
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 65 61 72 63 68 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 Data Ascii: earch"]::-webkit-search-cancel-button,input[type="search"]::-webkit-search-decoration{-webkit-appearance:none}button::-moz-focus-inner,input::-moz-focus-inner{padding:0;border:0}textarea{overflow:auto;vertical-align:top}table{border-collapse:collapse;bord
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 33 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 73 65 6c 65 63 74 5b 6d 75 6c 74 69 70 6c 65 5d 2c 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 61 7b 63 6f 6c 6f 72 3a 23 34 32 38 62 63 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 3a 68 6f 76 65 72 2c 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 32 61 36 34 39 36 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a Data Ascii: 3;background-color:#fff}input,button,select,textarea{font-family:inherit;font-size:inherit;line-height:inherit}button,input,select[multiple],textarea{background-image:none}a{color:#428bca;text-decoration:none}a:hover,a:focus{color:#2a6496;text-decoration:
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 68 33 2c 68 34 2c 68 35 2c 68 36 2c 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 7d 68 31 20 73 6d 61 6c 6c 2c 68 32 20 73 6d 61 6c 6c 2c 68 33 20 73 6d 61 6c 6c 2c 68 34 20 73 6d 61 6c 6c 2c 68 35 20 73 6d 61 6c 6c 2c 68 36 20 73 6d 61 6c 6c 2c 2e 68 31 20 73 6d 61 6c 6c 2c 2e 68 32 20 73 6d 61 6c 6c 2c 2e 68 33 20 73 6d 61 6c 6c 2c 2e 68 34 20 73 6d 61 6c 6c 2c 2e 68 35 20 73 6d 61 6c 6c 2c 2e 68 36 20 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 Data Ascii: h3,h4,h5,h6,.h1,.h2,.h3,.h4,.h5,.h6{font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:500;line-height:1.1}h1 small,h2 small,h3 small,h4 small,h5 small,h6 small,.h1 small,.h2 small,.h3 small,.h4 small,.h5 small,.h6 small{font-weight:norma
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 64 64 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 20 22 7d 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 7d 61 62 62 72 5b 74 69 74 6c 65 5d 2c 61 62 62 72 5b 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 2d 74 69 74 6c 65 5d 7b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 20 23 39 39 39 7d 61 62 62 72 2e 69 6e 69 74 69 61 6c 69 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 32 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 32 30 70 78 3b 62 6f 72 64 Data Ascii: dd:after{display:table;content:" "}.dl-horizontal dd:after{clear:both}}abbr[title],abbr[data-original-title]{cursor:help;border-bottom:1px dotted #999}abbr.initialism{font-size:90%;text-transform:uppercase}blockquote{padding:10px 20px;margin:0 0 20px;bord
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 69 6e 68 65 72 69 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 70 72 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 34 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 Data Ascii: inherit;white-space:pre-wrap;background-color:transparent;border:0}.pre-scrollable{max-height:340px;overflow-y:scroll}.container{padding-right:15px;padding-left:15px;margin-right:auto;margin-left:auto}.container:before,.container:after{display:table;conte
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 33 33 33 25 7d 2e 63 6f 6c 2d 78 73 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 73 2d 36 7b 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 78 73 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 36 25 7d 2e 63 6f 6c 2d 78 73 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 78 73 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 78 73 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 34 25 7d 2e 63 6f 6c 2d 78 73 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 78 73 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 28 6d 69 6e Data Ascii: 333%}.col-xs-5{width:41.66666666666667%}.col-xs-6{width:50%}.col-xs-7{width:58.333333333333336%}.col-xs-8{width:66.66666666666666%}.col-xs-9{width:75%}.col-xs-10{width:83.33333333333334%}.col-xs-11{width:91.66666666666666%}.col-xs-12{width:100%}@media(min
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 6c 6c 2d 36 7b 72 69 67 68 74 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 37 7b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 36 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 34 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 32 25 7d 2e 63 6f 6c Data Ascii: ll-6{right:50%}.col-sm-pull-7{right:58.333333333333336%}.col-sm-pull-8{right:66.66666666666666%}.col-sm-pull-9{right:75%}.col-sm-pull-10{right:83.33333333333334%}.col-sm-pull-11{right:91.66666666666666%}.col-sm-offset-1{margin-left:8.333333333333332%}.col
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 73 68 2d 34 7b 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 35 7b 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 36 7b 6c 65 66 74 3a 35 30 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 36 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 30 7b 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 34 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 31 7b 6c 65 66 74 Data Ascii: sh-4{left:33.33333333333333%}.col-md-push-5{left:41.66666666666667%}.col-md-push-6{left:50%}.col-md-push-7{left:58.333333333333336%}.col-md-push-8{left:66.66666666666666%}.col-md-push-9{left:75%}.col-md-push-10{left:83.33333333333334%}.col-md-push-11{left

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49718	104.17.25.14	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	587	OUT	GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:12:49 UTC	947	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e5f-7918" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2315093 Expires: Sun, 09 Feb 2025 15:12:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HRHyBJ4d7NMUV5EP9GLZI8sbr461DEJrLHvG0GK5TOEqA9OP5clE6t84Bg78Fsp42haB%2B%2F6WDGD7TfUQ84S1JmbXnWRjnu%2Fim5QkCQXUaZpMg5oe5CbUoUxYvkXnJUZdsFkHX%2Bzz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8587b0a298f64390-EWR alt-svc: h3=":443"; ma=86400
2024-02-20 15:12:49 UTC	422	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c Data Ascii: onts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inl
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d Data Ascii: bkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 31 78 2c 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 Data Ascii: 1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.f
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: ontent:"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{con
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: content:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{conten
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 65 79 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 Data Ascii: eye-slash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: e:before{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{conte
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 63 36 22 7d 2e 66 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b Data Ascii: c6"}.fa-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{
2024-02-20 15:12:49 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: re{content:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{conten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49721	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	938	OUT	GET /ITSCThemeStatic/themes/Portal8.5/js/jquery-ui-1.10.3.customDatePicker.min.js?modifiedDate=2023-12-21T12:52 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:49 UTC	648	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: application/javascript Content-Length: 55287 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_1E3D41AF3C476DB695DF4F5F0C796A75_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:49 UTC	15736	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 30 2e 33 20 2d 20 32 30 31 33 2d 31 32 2d 30 36 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 6a 71 75 65 72 79 2e 75 69 2e 63 6f 72 65 2e 6a 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 77 69 64 67 65 74 2e 6a 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 6d 6f 75 73 65 2e 6a 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f Data Ascii: /! jQuery UI - v1.10.3 - 2013-12-06 http://jqueryui.com* Includes: jquery.ui.core.js, jquery.ui.widget.js, jquery.ui.mouse.js, jquery.ui.position.js, jquery.ui.datepicker.js* Copyright 2013 jQuery Foundation and other contributors; Licensed MIT */
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 74 2e 61 74 5b 30 5d 3f 76 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 74 2e 61 74 5b 30 5d 26 26 28 76 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 74 2e 61 74 5b 31 5d 3f 76 2e 74 6f 70 2b 3d 6d 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 74 2e 61 74 5b 31 5d 26 26 28 76 2e 74 6f 70 2b 3d 6d 2f 32 29 2c 6e 3d 69 28 77 2e 61 74 2c 70 2c 6d 29 2c 76 2e 6c 65 66 74 2b 3d 6e 5b 30 5d 2c 76 2e 74 6f 70 2b 3d 6e 5b 31 5d 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 6c 2c 75 3d 65 28 74 68 69 73 29 2c 63 3d 75 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 64 3d 75 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 66 3d 73 28 74 68 69 73 2c 22 6d 61 72 67 69 6e Data Ascii: ]),"right"===t.at[0]?v.left+=p:"center"===t.at[0]&&(v.left+=p/2),"bottom"===t.at[1]?v.top+=m:"center"===t.at[1]&&(v.top+=m/2),n=i(w.at,p,m),v.left+=n[0],v.top+=n[1],this.each(function(){var a,l,u=e(this),c=u.outerWidth(),d=u.outerHeight(),f=s(this,"margin
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 74 29 26 26 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 6c 61 73 74 49 6e 70 75 74 21 3d 3d 74 29 7b 76 61 72 20 69 2c 61 2c 6e 2c 72 2c 6f 2c 68 2c 6c 3b 69 3d 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 49 6e 73 74 28 74 29 2c 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 63 75 72 49 6e 73 74 26 26 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 63 75 72 49 6e 73 74 21 3d 3d 69 26 26 28 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 63 75 72 49 6e 73 74 2e 64 70 44 69 76 2e 73 74 6f 70 28 21 30 2c 21 30 29 2c 69 26 26 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 64 61 74 65 70 69 63 6b 65 72 53 68 6f 77 69 6e 67 26 26 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 68 69 64 65 44 61 74 65 70 69 63 6b 65 72 28 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 63 75 72 49 6e 73 74 Data Ascii: t)&&e.datepicker._lastInput!==t){var i,a,n,r,o,h,l;i=e.datepicker._getInst(t),e.datepicker._curInst&&e.datepicker._curInst!==i&&(e.datepicker._curInst.dpDiv.stop(!0,!0),i&&e.datepicker._datepickerShowing&&e.datepicker._hideDatepicker(e.datepicker._curInst
2024-02-20 15:12:49 UTC	6783	IN	Data Raw: 6f 75 70 2d 6c 61 73 74 22 2c 4d 3d 22 20 75 69 2d 63 6f 72 6e 65 72 2d 22 2b 28 59 3f 22 6c 65 66 74 22 3a 22 72 69 67 68 74 22 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 53 2b 3d 22 20 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 2d 6d 69 64 64 6c 65 22 2c 4d 3d 22 22 7d 53 2b 3d 22 27 3e 22 7d 66 6f 72 28 53 2b 3d 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 20 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 75 69 2d 68 65 6c 70 65 72 2d 63 6c 65 61 72 66 69 78 22 2b 4d 2b 22 27 3e 22 2b 28 2f 61 6c 6c 7c 6c 65 66 74 2f 2e 74 65 73 74 28 4d 29 26 26 30 3d 3d 3d 78 3f 59 3f 6e 3a 61 3a 22 22 29 2b 28 2f 61 6c 6c 7c 72 69 67 68 74 2f 2e 74 65 73 74 28 4d 29 26 26 30 3d 3d 3d 78 3f Data Ascii: oup-last",M=" ui-corner-"+(Y?"left":"right");break;default:S+=" ui-datepicker-group-middle",M=""}S+="'>"}for(S+="<div class='ui-datepicker-header ui-widget-header ui-helper-clearfix"+M+"'>"+(/all\|left/.test(M)&&0===x?Y?n:a:"")+(/all\|right/.test(M)&&0===x?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49723	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	924	OUT	GET /ITSCThemeStatic/themes/Portal8.5/js/moment-with-locales.min.js?modifiedDate=2023-12-21T12:52 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:49 UTC	649	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: application/javascript Content-Length: 308076 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_12_sn_21A7DFF2594DF8E4589AC1D6D7001BBA_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:49 UTC	15735	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 61 29 3a 65 2e 6d 6f 6d 65 6e 74 3d 61 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 63 74 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f Data Ascii: !function(e,a){"object"==typeof exports&&"undefined"!=typeof module?module.exports=a():"function"==typeof define&&define.amd?define(a):e.moment=a()}(this,function(){"use strict";function e(){return ct.apply(null,arguments)}function a(e){return e instanceo
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 2c 61 2e 5f 61 5b 65 6e 5d 2c 61 2e 5f 6d 65 72 69 64 69 65 6d 29 2c 67 65 28 61 29 2c 6b 65 28 61 29 7d 65 6c 73 65 20 50 65 28 61 29 3b 65 6c 73 65 20 76 65 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 45 65 28 65 2c 61 2c 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 61 3a 6e 75 6c 6c 21 3d 65 2e 6d 65 72 69 64 69 65 6d 48 6f 75 72 3f 65 2e 6d 65 72 69 64 69 65 6d 48 6f 75 72 28 61 2c 74 29 3a 6e 75 6c 6c 21 3d 65 2e 69 73 50 4d 3f 28 28 6e 3d 65 2e 69 73 50 4d 28 74 29 29 26 26 61 3c 31 32 26 26 28 61 2b 3d 31 32 29 2c 6e 7c 7c 31 32 21 3d 3d 61 7c 7c 28 61 3d 30 29 2c 61 29 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 29 7b 76 61 72 20 61 2c 74 2c 6e 2c 73 2c 72 3b 69 66 28 30 3d 3d 3d 65 2e 5f 66 2e 6c 65 6e 67 74 68 29 72 65 Data Ascii: ,a._a[en],a._meridiem),ge(a),ke(a)}else Pe(a);else ve(a)}function Ee(e,a,t){var n;return null==t?a:null!=e.meridiemHour?e.meridiemHour(a,t):null!=e.isPM?((n=e.isPM(t))&&a<12&&(a+=12),n\|\|12!==a\|\|(a=0),a):a}function Ae(e){var a,t,n,s,r;if(0===e._f.length)re
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 68 3a 22 6f 72 65 22 2c 64 64 3a 22 7a 69 6c 65 22 2c 4d 4d 3a 22 6c 75 6e 69 22 2c 79 79 3a 22 61 6e 69 22 7d 2c 73 3d 22 20 22 3b 72 65 74 75 72 6e 28 65 25 31 30 30 3e 3d 32 30 7c 7c 65 3e 3d 31 30 30 26 26 65 25 31 30 30 3d 3d 30 29 26 26 28 73 3d 22 20 64 65 20 22 29 2c 65 2b 73 2b 6e 5b 74 5d 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 2c 61 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 5f 22 29 3b 72 65 74 75 72 6e 20 61 25 31 30 3d 3d 31 26 26 61 25 31 30 30 21 3d 31 31 3f 74 5b 30 5d 3a 61 25 31 30 3e 3d 32 26 26 61 25 31 30 3c 3d 34 26 26 28 61 25 31 30 30 3c 31 30 7c 7c 61 25 31 30 30 3e 3d 32 30 29 3f 74 5b 31 5d 3a 74 5b 32 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 2c 61 2c 74 29 7b 76 61 72 20 6e 3d 7b 6d 6d 3a 61 3f 22 5c 75 30 34 33 Data Ascii: h:"ore",dd:"zile",MM:"luni",yy:"ani"},s=" ";return(e%100>=20\|\|e>=100&&e%100==0)&&(s=" de "),e+s+n[t]}function rt(e,a){var t=e.split("_");return a%10==1&&a%100!=11?t[0]:a%10>=2&&a%10<=4&&(a%100<10\|\|a%100>=20)?t[1]:t[2]}function dt(e,a,t){var n={mm:a?"\u043
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 61 6c 69 64 44 61 74 65 28 29 7d 2c 5a 6e 2e 66 72 6f 6d 4e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 72 6f 6d 28 43 65 28 29 2c 65 29 7d 2c 5a 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 59 28 65 29 26 26 65 2e 69 73 56 61 6c 69 64 28 29 7c 7c 43 65 28 65 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 58 65 28 7b 66 72 6f 6d 3a 74 68 69 73 2c 74 6f 3a 65 7d 29 2e 6c 6f 63 61 6c 65 28 74 68 69 73 2e 6c 6f 63 61 6c 65 28 29 29 2e 68 75 6d 61 6e 69 7a 65 28 21 61 29 3a 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 69 6e 76 61 6c 69 64 44 61 74 65 28 29 7d 2c 5a 6e 2e 74 6f 4e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: alidDate()},Zn.fromNow=function(e){return this.from(Ce(),e)},Zn.to=function(e,a){return this.isValid()&&(Y(e)&&e.isValid()\|\|Ce(e).isValid())?Xe({from:this,to:e}).locale(this.locale()).humanize(!a):this.localeData().invalidDate()},Zn.toNow=function(e){retu
2024-02-20 15:12:49 UTC	16384	IN	Data Raw: 65 54 69 6d 65 54 68 72 65 73 68 6f 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 68 73 5b 65 5d 26 26 28 76 6f 69 64 20 30 3d 3d 3d 61 3f 68 73 5b 65 5d 3a 28 68 73 5b 65 5d 3d 61 2c 22 73 22 3d 3d 3d 65 26 26 28 68 73 2e 73 73 3d 61 2d 31 29 2c 21 30 29 29 7d 2c 65 2e 63 61 6c 65 6e 64 61 72 46 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 74 3d 65 2e 64 69 66 66 28 61 2c 22 64 61 79 73 22 2c 21 30 29 3b 72 65 74 75 72 6e 20 74 3c 2d 36 3f 22 73 61 6d 65 45 6c 73 65 22 3a 74 3c 2d 31 3f 22 6c 61 73 74 57 65 65 6b 22 3a 74 3c 30 3f 22 6c 61 73 74 44 61 79 22 3a 74 3c 31 3f 22 73 61 6d 65 44 61 79 22 3a 74 3c 32 3f 22 6e 65 78 74 44 61 79 22 3a 74 3c 37 3f 22 6e 65 78 74 57 65 Data Ascii: eTimeThreshold=function(e,a){return void 0!==hs[e]&&(void 0===a?hs[e]:(hs[e]=a,"s"===e&&(hs.ss=a-1),!0))},e.calendarFormat=function(e,a){var t=e.diff(a,"days",!0);return t<-6?"sameElse":t<-1?"lastWeek":t<0?"lastDay":t<1?"sameDay":t<2?"nextDay":t<7?"nextWe
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 5c 75 30 36 34 38 5c 75 30 36 34 31 5c 75 30 36 34 35 5c 75 30 36 32 38 5c 75 30 36 33 31 5f 5c 75 30 36 32 66 5c 75 30 36 34 61 5c 75 30 36 33 33 5c 75 30 36 34 35 5c 75 30 36 32 38 5c 75 30 36 33 31 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 36 32 63 5c 75 30 36 32 37 5c 75 30 36 34 36 5c 75 30 36 34 31 5c 75 30 36 34 61 5f 5c 75 30 36 34 31 5c 75 30 36 34 61 5c 75 30 36 34 31 5c 75 30 36 33 31 5c 75 30 36 34 61 5f 5c 75 30 36 34 35 5c 75 30 36 32 37 5c 75 30 36 33 31 5c 75 30 36 33 33 5f 5c 75 30 36 32 33 5c 75 30 36 34 31 5c 75 30 36 33 31 5c 75 30 36 34 61 5c 75 30 36 34 34 5f 5c 75 30 36 34 35 5c 75 30 36 32 37 5c 75 30 36 34 61 5f 5c 75 30 36 32 63 5c 75 30 36 34 38 5c 75 30 36 32 37 5c 75 30 36 34 36 5f Data Ascii: \u0648\u0641\u0645\u0628\u0631_\u062f\u064a\u0633\u0645\u0628\u0631".split("_"),monthsShort:"\u062c\u0627\u0646\u0641\u064a_\u0641\u064a\u0641\u0631\u064a_\u0645\u0627\u0631\u0633_\u0623\u0641\u0631\u064a\u0644_\u0645\u0627\u064a_\u062c\u0648\u0627\u0646_
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 44 20 5b 73 61 6e 5d 20 59 59 59 59 22 2c 4c 4c 4c 3a 22 4d 4d 4d 4d 20 5b 74 69 6c 65 5d 20 44 20 5b 73 61 6e 5d 20 59 59 59 59 20 5b 6c 5c 75 30 32 35 62 72 5c 75 30 32 35 62 5d 20 48 48 3a 6d 6d 22 2c 4c 4c 4c 4c 3a 22 64 64 64 64 20 4d 4d 4d 4d 20 5b 74 69 6c 65 5d 20 44 20 5b 73 61 6e 5d 20 59 59 59 59 20 5b 6c 5c 75 30 32 35 62 72 5c 75 30 32 35 62 5d 20 48 48 3a 6d 6d 22 7d 2c 63 61 6c 65 6e 64 61 72 3a 7b 73 61 6d 65 44 61 79 3a 22 5b 42 69 20 6c 5c 75 30 32 35 62 72 5c 75 30 32 35 62 5d 20 4c 54 22 2c 6e 65 78 74 44 61 79 3a 22 5b 53 69 6e 69 20 6c 5c 75 30 32 35 62 72 5c 75 30 32 35 62 5d 20 4c 54 22 2c 6e 65 78 74 57 65 65 6b 3a 22 64 64 64 64 20 5b 64 6f 6e 20 6c 5c 75 30 32 35 62 72 5c 75 30 32 35 62 5d 20 4c 54 22 2c 6c 61 73 74 44 61 79 3a Data Ascii: D [san] YYYY",LLL:"MMMM [tile] D [san] YYYY [l\u025br\u025b] HH:mm",LLLL:"dddd MMMM [tile] D [san] YYYY [l\u025br\u025b] HH:mm"},calendar:{sameDay:"[Bi l\u025br\u025b] LT",nextDay:"[Sini l\u025br\u025b] LT",nextWeek:"dddd [don l\u025br\u025b] LT",lastDay:
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 30 34 33 64 5d 20 44 5b 2d 5c 75 30 34 33 63 5c 75 30 34 64 37 5c 75 30 34 34 38 5c 75 30 34 64 37 5d 2c 20 48 48 3a 6d 6d 22 2c 4c 4c 4c 4c 3a 22 64 64 64 64 2c 20 59 59 59 59 20 5b 5c 75 30 34 61 62 5c 75 30 34 34 33 5c 75 30 34 33 62 5c 75 30 34 34 35 5c 75 30 34 33 38 5d 20 4d 4d 4d 4d 20 5b 5c 75 30 34 34 33 5c 75 30 34 33 39 5c 75 30 34 64 31 5c 75 30 34 34 35 5c 75 30 34 64 37 5c 75 30 34 33 64 5d 20 44 5b 2d 5c 75 30 34 33 63 5c 75 30 34 64 37 5c 75 30 34 34 38 5c 75 30 34 64 37 5d 2c 20 48 48 3a 6d 6d 22 7d 2c 63 61 6c 65 6e 64 61 72 3a 7b 73 61 6d 65 44 61 79 3a 22 5b 5c 75 30 34 31 66 5c 75 30 34 33 30 5c 75 30 34 34 66 5c 75 30 34 33 64 5d 20 4c 54 20 5b 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 34 35 5c 75 30 34 33 35 5c 75 30 34 34 32 Data Ascii: 043d] D[-\u043c\u04d7\u0448\u04d7], HH:mm",LLLL:"dddd, YYYY [\u04ab\u0443\u043b\u0445\u0438] MMMM [\u0443\u0439\u04d1\u0445\u04d7\u043d] D[-\u043c\u04d7\u0448\u04d7], HH:mm"},calendar:{sameDay:"[\u041f\u0430\u044f\u043d] LT [\u0441\u0435\u0445\u0435\u0442
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 5f 4d 61 79 5f 4a 75 6e 65 5f 4a 75 6c 79 5f 41 75 67 75 73 74 5f 53 65 70 74 65 6d 62 65 72 5f 4f 63 74 6f 62 65 72 5f 4e 6f 76 65 6d 62 65 72 5f 44 65 63 65 6d 62 65 72 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 4a 61 6e 5f 46 65 62 5f 4d 61 72 5f 41 70 72 5f 4d 61 79 5f 4a 75 6e 5f 4a 75 6c 5f 41 75 67 5f 53 65 70 5f 4f 63 74 5f 4e 6f 76 5f 44 65 63 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 53 75 6e 64 61 79 5f 4d 6f 6e 64 61 79 5f 54 75 65 73 64 61 79 5f 57 65 64 6e 65 73 64 61 79 5f 54 68 75 72 73 64 61 79 5f 46 72 69 64 61 79 5f 53 61 74 75 72 64 61 79 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 53 68 6f 72 74 3a 22 53 75 6e 5f 4d 6f 6e 5f 54 75 65 5f 57 65 64 5f 54 68 Data Ascii: _May_June_July_August_September_October_November_December".split("_"),monthsShort:"Jan_Feb_Mar_Apr_May_Jun_Jul_Aug_Sep_Oct_Nov_Dec".split("_"),weekdays:"Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),weekdaysShort:"Sun_Mon_Tue_Wed_Th
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 78 66 62 74 5f 73 65 70 74 65 6d 62 72 65 5f 6f 63 74 6f 62 72 65 5f 6e 6f 76 65 6d 62 72 65 5f 64 5c 78 65 39 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 6a 61 6e 76 2e 5f 66 5c 78 65 39 76 72 2e 5f 6d 61 72 73 5f 61 76 72 2e 5f 6d 61 69 5f 6a 75 69 6e 5f 6a 75 69 6c 2e 5f 61 6f 5c 78 66 62 74 5f 73 65 70 74 2e 5f 6f 63 74 2e 5f 6e 6f 76 2e 5f 64 5c 78 65 39 63 2e 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 50 61 72 73 65 45 78 61 63 74 3a 21 30 2c 77 65 65 6b 64 61 79 73 3a 22 64 69 6d 61 6e 63 68 65 5f 6c 75 6e 64 69 5f 6d 61 72 64 69 5f 6d 65 72 63 72 65 64 69 5f 6a 65 75 64 69 5f 76 65 6e 64 72 65 64 69 5f 73 61 6d 65 64 69 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 Data Ascii: xfbt_septembre_octobre_novembre_d\xe9cembre".split("_"),monthsShort:"janv._f\xe9vr._mars_avr._mai_juin_juil._ao\xfbt_sept._oct._nov._d\xe9c.".split("_"),monthsParseExact:!0,weekdays:"dimanche_lundi_mardi_mercredi_jeudi_vendredi_samedi".split("_"),weekdays

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49724	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	923	OUT	GET /ITSCThemeStatic/themes/Portal8.5/js/rsiPortalDateHandlerJS.js?modifiedDate=2023-12-21T12:52 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:50 UTC	648	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: application/javascript Content-Length: 15721 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_6AF7269F90180B801AE79F6FE25C4BBC_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:50 UTC	15721	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 54 68 69 73 20 4a 53 20 66 69 6c 65 20 63 6f 6e 74 61 69 6e 73 20 66 75 6e 63 74 69 6f 6e 73 20 72 65 6c 61 74 65 64 20 74 6f 20 64 61 74 65 20 66 72 61 6d 65 77 6f 72 6b 20 75 73 65 64 20 62 79 20 50 6f 72 74 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 0d 0a 20 2a 2f 0d 0a 76 61 72 20 53 4c 41 53 48 5f 4b 45 59 53 5f 41 52 52 20 3d 20 5b 31 39 31 2c 20 31 31 31 5d 3b 0d 0a 76 61 72 20 44 41 53 48 5f 4b 45 59 53 5f 41 52 52 20 3d 20 5b 31 38 39 2c 20 31 30 39 5d 3b 0d 0a 76 61 72 20 50 45 52 49 4f 44 5f 4b 45 59 53 5f 41 52 52 20 3d 20 5b 31 39 30 2c 20 31 31 30 5d 3b 0d 0a 76 61 72 20 53 50 41 43 45 5f 4b 45 59 53 5f 41 52 52 20 3d 20 5b 33 32 5d 3b 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 2a 20 54 68 69 73 20 6d 65 74 68 6f 64 20 69 73 Data Ascii: /** * This JS file contains functions related to date framework used by Portal applications. /var SLASH_KEYS_ARR = [191, 111];var DASH_KEYS_ARR = [189, 109];var PERIOD_KEYS_ARR = [190, 110];var SPACE_KEYS_ARR = [32];/* * This method is

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49725	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	916	OUT	GET /ITSCThemeStatic/themes/Portal8.5/js/itscValidations.js?modifiedDate=2023-12-21T12:52 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:50 UTC	648	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: application/javascript Content-Length: 45254 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Mon, 04 Dec 2023 02:57:08 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_CEB42920182B82E30D6014FC27E29758_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:50 UTC	15736	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 54 68 69 73 20 4a 53 20 63 6f 6e 74 61 69 6e 73 20 43 6f 6d 6d 6f 6e 20 76 61 6c 69 64 61 74 69 6f 6e 20 46 75 6e 63 74 69 6f 6e 73 20 75 73 65 64 20 62 79 20 52 50 54 50 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 0d 0a 20 2a 2f 0d 0a 76 61 72 20 69 73 44 69 72 74 79 44 61 74 61 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 44 49 52 54 59 5f 46 4c 41 47 5f 56 41 4c 49 44 41 54 49 4f 4e 20 3d 20 22 57 61 72 6e 69 6e 67 3a 20 41 6e 79 20 75 6e 73 61 76 65 64 20 63 68 61 6e 67 65 73 20 77 69 6c 6c 20 62 65 20 6c 6f 73 74 2e 22 3b 0d 0a 76 61 72 20 65 6e 61 62 6c 65 4f 6e 63 68 61 6e 67 65 54 72 61 63 6b 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 70 72 65 76 65 6e 74 43 6c 69 63 6b 3d 20 66 61 6c 73 65 3b 0d 0a 24 28 64 6f 63 75 Data Ascii: /** * This JS contains Common validation Functions used by RPTP applications */var isDirtyData = false;var DIRTY_FLAG_VALIDATION = "Warning: Any unsaved changes will be lost.";var enableOnchangeTracking = false;var preventClick= false;$(docu
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 78 78 78 78 78 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 30 2c 20 32 29 20 2b 20 22 20 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 32 2c 20 33 29 20 2b 20 22 20 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 35 2c 20 38 29 3b 0d 0a 09 09 62 72 65 61 6b 3b 0d 0a 09 09 2f 2f 42 72 61 7a 69 6c 0d 0a 09 63 61 73 65 20 22 62 72 22 3a 0d 0a 09 09 61 20 3d 20 22 78 78 78 78 78 78 78 78 78 78 78 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 30 2c 20 32 29 20 2b 20 22 20 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 32 2c 20 35 29 20 2b 20 22 20 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 35 2c 20 31 31 29 3b 0d 0a 09 09 62 72 65 61 6b 3b 0d 0a 09 09 2f 2f 42 72 69 74 69 73 Data Ascii: xxxxx";b += a.substr(0, 2) + " ";b += a.substr(2, 3) + " ";b += a.substr(5, 8);break;//Brazilcase "br":a = "xxxxxxxxxxx";b += a.substr(0, 2) + " ";b += a.substr(2, 5) + " ";b += a.substr(5, 11);break;//Britis
2024-02-20 15:12:50 UTC	13134	IN	Data Raw: 29 3b 0d 0a 09 09 62 72 65 61 6b 3b 0d 0a 09 09 2f 2f 4e 65 77 20 43 61 6c 65 64 6f 6e 69 61 0d 0a 09 63 61 73 65 20 22 6e 63 22 3a 0d 0a 09 09 61 20 3d 20 22 78 78 78 78 78 78 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 30 2c 20 32 29 20 2b 20 22 2e 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 32 2c 20 32 29 20 2b 20 22 2e 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 34 2c 20 32 29 3b 0d 0a 09 09 62 72 65 61 6b 3b 0d 0a 09 09 2f 2f 4e 65 77 20 5a 65 61 6c 61 6e 64 20 09 0d 0a 09 63 61 73 65 20 22 6e 7a 22 3a 0d 0a 09 63 61 73 65 20 22 70 6e 22 3a 0d 0a 09 09 61 20 3d 20 22 78 78 78 78 78 78 78 78 78 78 22 3b 0d 0a 09 09 62 20 2b 3d 20 61 2e 73 75 62 73 74 72 28 30 2c 20 33 29 20 2b 20 22 20 22 3b 0d 0a 09 09 Data Ascii: );break;//New Caledoniacase "nc":a = "xxxxxx";b += a.substr(0, 2) + ".";b += a.substr(2, 2) + ".";b += a.substr(4, 2);break;//New Zealand case "nz":case "pn":a = "xxxxxxxxxx";b += a.substr(0, 3) + " ";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49726	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:49 UTC	913	OUT	GET /ITSCThemeStatic/themes/Portal8.5/js/itscCommonJS.js?modifiedDate=2023-12-21T12:52 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:50 UTC	674	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:49 GMT Content-Type: application/javascript Content-Length: 13176 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Mon, 04 Dec 2023 02:57:08 GMT Server-Timing: dtSInfo;desc="0", dtRpid;desc="-635267056" Set-Cookie: dtCookie=v_4_srv_12_sn_F9306E517DA191362E0CC95CF8B85B67_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:50 UTC	13176	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 54 68 69 73 20 4a 53 20 63 6f 6e 74 61 69 6e 73 20 43 6f 6d 6d 6f 6e 20 46 75 6e 63 74 69 6f 6e 73 20 75 73 65 64 20 62 79 20 52 50 54 50 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 0d 0a 20 2a 2f 0d 0a 76 61 72 20 63 68 61 74 52 65 71 44 69 76 49 6e 69 74 69 61 6c 69 7a 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 61 70 70 48 65 6c 70 44 69 76 49 6e 69 74 69 61 6c 69 7a 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 2f 2f 20 53 65 74 74 69 6e 67 20 66 6f 63 75 73 20 20 74 6f 20 53 65 61 72 63 68 20 42 6f 78 20 69 66 20 63 75 72 72 65 6e 74 20 70 61 67 65 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 6e 79 20 49 4e 50 55 54 20 63 6f 6e Data Ascii: /** * This JS contains Common Functions used by RPTP applications. */var chatReqDivInitialized = false;var appHelpDivInitialized = false;$(document).ready(function() {// Setting focus to Search Box if current page does not have any INPUT con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49728	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:50 UTC	919	OUT	GET /ITSCThemeStatic/themes/Portal8.5/js/internationalPhone.js?modifiedDate=2023-12-21T12:52 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:50 UTC	649	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:50 GMT Content-Type: application/javascript Content-Length: 303702 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_12_sn_8410C299A288528E3AE2E150971178DB_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:50 UTC	15735	IN	Data Raw: 76 61 72 20 68 2c 20 61 2c 20 62 2c 20 65 6c 65 6d 65 6e 74 49 64 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 70 68 6f 6e 65 4e 75 6d 62 65 72 44 65 74 61 69 6c 28 70 68 6f 6e 65 2c 20 63 6f 75 6e 74 72 79 50 68 6f 6e 65 43 6f 64 65 2c 20 66 69 65 6c 64 49 64 29 20 7b 0d 0a 09 61 20 3d 20 70 68 6f 6e 65 3b 0d 0a 09 62 20 3d 20 63 6f 75 6e 74 72 79 50 68 6f 6e 65 43 6f 64 65 3b 0d 0a 09 65 6c 65 6d 65 6e 74 49 64 20 3d 20 66 69 65 6c 64 49 64 3b 0d 0a 7d 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 76 61 72 20 61 61 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 20 3f 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 20 3a 20 66 75 6e 63 74 Data Ascii: var h, a, b, elementId;function phoneNumberDetail(phone, countryPhoneCode, fieldId) {a = phone;b = countryPhoneCode;elementId = fieldId;}(function() {var aa = "function" == typeof Object.defineProperties ? Object.defineProperty : funct
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 6c 74 56 61 6c 75 65 3a 20 21 31 2c 0d 0a 09 09 09 09 74 79 70 65 3a 20 42 6f 6f 6c 65 61 6e 0d 0a 09 09 09 7d 0d 0a 09 09 7d 29 29 3b 0d 0a 09 09 72 65 74 75 72 6e 20 61 0d 0a 09 7d 3b 0d 0a 09 47 2e 68 20 3d 20 47 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3b 0d 0a 0d 0a 09 66 75 6e 63 74 69 6f 6e 20 4d 61 28 29 20 7b 7d 0d 0a 09 6c 28 4d 61 2c 20 7a 29 3b 0d 0a 09 4d 61 2e 70 72 6f 74 6f 74 79 70 65 2e 66 20 3d 20 66 75 6e 63 74 69 6f 6e 28 61 2c 20 62 29 20 7b 0d 0a 09 09 76 61 72 20 63 20 3d 20 6e 65 77 20 61 2e 62 3b 0d 0a 09 09 63 2e 67 20 3d 20 74 68 69 73 3b 0d 0a 09 09 63 2e 62 20 3d 20 62 3b 0d 0a 09 09 63 2e 61 20 3d 20 7b 7d 3b 0d 0a 09 09 72 65 74 75 72 6e 20 63 0d 0a 09 7d 3b 0d 0a 09 4d 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 20 3d 20 66 75 6e 63 Data Ascii: ltValue: !1,type: Boolean}}));return a};G.h = G.prototype.h;function Ma() {}l(Ma, z);Ma.prototype.f = function(a, b) {var c = new a.b;c.g = this;c.b = b;c.a = {};return c};Ma.prototype.i = func
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 3f 3a 32 28 3f 3a 30 5b 30 31 33 2d 39 5d 7c 5b 31 33 5d 29 7c 33 28 3f 3a 30 5b 30 31 33 2d 39 5d 7c 5b 36 37 5d 29 7c 34 39 7c 36 28 3f 3a 5b 30 31 33 36 5d 7c 34 5b 30 2d 35 39 5d 29 7c 38 7c 39 28 3f 3a 5b 31 39 5d 7c 34 34 7c 37 5b 30 31 33 2d 39 5d 7c 38 5b 31 34 5d 29 29 7c 33 28 3f 3a 33 36 7c 34 28 3f 3a 5b 31 32 5d 7c 33 28 3f 3a 34 7c 35 5b 30 31 34 5d 7c 36 5b 31 32 33 39 5d 29 7c 5b 35 38 5d 34 29 7c 35 28 3f 3a 31 7c 33 5b 30 2d 32 34 2d 36 38 39 5d 7c 38 5b 34 36 5d 29 7c 36 7c 37 5b 30 36 39 5d 7c 38 28 3f 3a 5b 30 31 5d 7c 33 34 7c 5b 35 37 38 5d 5b 34 35 5d 29 29 22 0d 0a 09 09 09 09 09 5d 2c 20 22 30 24 31 22 2c 20 2c 20 31 5d 2c 0d 0a 09 09 09 09 09 5b 2c 20 22 28 5c 5c 64 7b 34 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 34 7d 29 22 Data Ascii: ?:2(?:0[013-9]\|[13])\|3(?:0[013-9]\|[67])\|49\|6(?:[0136]\|4[0-59])\|8\|9(?:[19]\|44\|7[013-9]\|8[14]))\|3(?:36\|4(?:[12]\|3(?:4\|5[014]\|6[1239])\|[58]4)\|5(?:1\|3[0-24-689]\|8[46])\|6\|7[069]\|8(?:[01]\|34\|[578][45]))"], "0$1", , 1],[, "(\\d{4})(\\d{2})(\\d{4})"
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 64 7b 32 7d 29 29 5c 5c 64 7b 34 7d 22 2c 20 2c 20 2c 20 2c 20 22 31 37 30 30 31 32 33 34 22 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 28 3f 3a 33 28 3f 3a 5b 31 2d 34 36 37 39 5d 5c 5c 64 7c 35 5b 30 31 33 2d 36 39 5d 7c 38 5b 30 2d 34 37 2d 39 5d 29 5c 5c 64 7c 36 28 3f 3a 33 28 3f 3a 30 30 7c 33 33 7c 36 5b 31 36 5d 29 7c 36 28 3f 3a 5b 36 39 5d 5c 5c 64 7c 33 5b 30 33 2d 39 5d 7c 37 5b 30 2d 36 5d 29 29 29 5c 5c 64 7b 34 7d 22 2c 20 2c 20 2c 20 2c 20 22 33 36 30 30 31 32 33 34 22 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 38 30 5c 5c 64 7b 36 7d 22 2c 20 2c 20 2c 20 2c 20 22 38 30 31 32 33 34 35 36 22 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 28 3f 3a 38 37 7c 39 5b 30 31 34 35 37 38 5d 29 5c 5c 64 7b 36 7d 22 2c 20 2c 20 2c 20 2c 20 22 39 30 31 32 33 Data Ascii: d{2}))\\d{4}", , , , "17001234"],[, , "(?:3(?:[1-4679]\\d\|5[013-69]\|8[0-47-9])\\d\|6(?:3(?:00\|33\|6[16])\|6(?:[69]\\d\|3[03-9]\|7[0-6])))\\d{4}", , , , "36001234"],[, , "80\\d{6}", , , , "80123456"],[, , "(?:87\|9[014578])\\d{6}", , , , "90123
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 09 09 09 09 5b 2c 20 22 28 5b 32 2d 39 5d 5c 5c 64 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 22 2c 20 22 24 31 20 24 32 20 24 33 20 24 34 22 2c 20 5b 22 5b 32 2d 37 5d 7c 5b 38 39 5d 31 22 5d 2c 20 22 30 24 31 22 5d 2c 0d 0a 09 09 09 09 09 5b 2c 20 22 28 5b 38 39 5d 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 22 2c 20 22 24 31 20 24 32 20 24 33 22 2c 20 5b 22 38 5b 30 34 37 5d 7c 39 30 22 5d 2c 20 22 30 24 31 22 5d 2c 0d 0a 09 09 09 09 09 5b 2c 20 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 22 2c 20 22 24 31 20 24 32 20 24 33 20 24 34 20 24 35 22 2c 20 5b 22 38 36 30 22 5d 2c 20 22 30 24 31 22 5d 0d 0a 09 09 09 09 5d 2c Data Ascii: [, "([2-9]\\d)(\\d{3})(\\d{2})(\\d{2})", "$1 $2 $3 $4", ["[2-7]\|[89]1"], "0$1"],[, "([89]\\d{2})(\\d{3})(\\d{3})", "$1 $2 $3", ["8[047]\|90"], "0$1"],[, "(\\d{3})(\\d{2})(\\d{3})(\\d{2})(\\d{2})", "$1 $2 $3 $4 $5", ["860"], "0$1"]],
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 5d 5c 5c 64 7b 35 2c 31 33 7d 7c 33 28 3f 3a 30 5c 5c 64 7b 33 2c 31 33 7d 7c 32 5c 5c 64 7b 39 7d 7c 5b 33 2d 39 5d 5c 5c 64 7b 34 2c 31 33 7d 29 7c 35 28 3f 3a 30 5b 32 2d 38 5d 7c 5b 31 32 35 36 5d 5c 5c 64 7c 5b 33 38 5d 5b 30 2d 38 5d 7c 34 5c 5c 64 7b 30 2c 32 7d 7c 5b 37 39 5d 5b 30 2d 37 5d 29 5c 5c 64 7b 33 2c 31 31 7d 7c 37 28 3f 3a 30 5b 32 2d 38 5d 7c 5b 31 2d 39 5d 5c 5c 64 29 5c 5c 64 7b 33 2c 31 30 7d 7c 38 28 3f 3a 30 5b 32 2d 39 5d 7c 5b 31 2d 39 5d 5c 5c 64 29 5c 5c 64 7b 33 2c 31 30 7d 7c 39 28 3f 3a 30 5b 36 2d 39 5d 5c 5c 64 7b 33 2c 31 30 7d 7c 31 5c 5c 64 7b 34 2c 31 32 7d 7c 5b 32 2d 39 5d 5c 5c 64 7b 34 2c 31 31 7d 29 22 2c 20 2c 20 2c 20 2c 20 22 33 30 31 32 33 34 35 36 22 2c 20 2c 20 2c 20 5b 35 2c 20 36 2c 20 37 2c 20 38 2c 20 Data Ascii: ]\\d{5,13}\|3(?:0\\d{3,13}\|2\\d{9}\|[3-9]\\d{4,13})\|5(?:0[2-8]\|[1256]\\d\|[38][0-8]\|4\\d{0,2}\|[79][0-7])\\d{3,11}\|7(?:0[2-8]\|[1-9]\\d)\\d{3,10}\|8(?:0[2-9]\|[1-9]\\d)\\d{3,10}\|9(?:0[6-9]\\d{3,10}\|1\\d{4,12}\|[2-9]\\d{4,11})", , , , "30123456", , , [5, 6, 7, 8,
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 33 5b 32 33 35 37 5d 30 5b 31 2d 39 5d 5c 5c 64 7b 33 7d 7c 39 5b 32 2d 37 5d 5c 5c 64 7b 35 7d 22 2c 20 2c 20 2c 20 2c 20 22 33 35 30 31 32 33 34 22 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 4e 41 22 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 5b 2d 31 5d 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 4e 41 22 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 5b 2d 31 5d 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 4e 41 22 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 5b 2d 31 5d 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 4e 41 22 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 5b 2d 31 5d 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 4e 41 22 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 2c 20 5b 2d 31 5d 5d 2c 20 22 46 4d 22 2c 20 36 39 31 2c 20 22 30 Data Ascii: ],[, , "3[2357]0[1-9]\\d{3}\|9[2-7]\\d{5}", , , , "3501234"],[, , "NA", , , , , , , [-1]],[, , "NA", , , , , , , [-1]],[, , "NA", , , , , , , [-1]],[, , "NA", , , , , , , [-1]],[, , "NA", , , , , , , [-1]], "FM", 691, "0
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 35 5d 7c 34 37 7c 38 5b 37 38 39 5d 29 7c 38 28 3f 3a 5b 32 2d 35 37 38 39 5d 38 7c 36 5b 34 38 5d 29 7c 39 28 3f 3a 32 5b 32 39 5d 7c 36 5b 37 39 5d 7c 37 5b 31 37 39 5d 7c 38 5b 37 38 39 5d 7c 39 5b 37 38 5d 29 29 5c 5c 64 7b 34 7d 22 2c 20 2c 20 2c 20 2c 20 22 36 37 31 33 30 30 31 32 33 34 22 2c 20 2c 20 2c 20 2c 20 5b 37 5d 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 38 28 3f 3a 30 30 7c 33 33 7c 34 34 7c 35 35 7c 36 36 7c 37 37 7c 38 38 29 5b 32 2d 39 5d 5c 5c 64 7b 36 7d 22 2c 20 2c 20 2c 20 2c 20 22 38 30 30 32 31 32 33 34 35 36 22 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 39 30 30 5b 32 2d 39 5d 5c 5c 64 7b 36 7d 22 2c 20 2c 20 2c 20 2c 20 22 39 30 30 32 31 32 33 34 35 36 22 5d 2c 0d 0a 09 09 09 09 5b 2c 20 2c 20 22 4e 41 22 2c 20 2c 20 2c 20 2c 20 Data Ascii: 5]\|47\|8[789])\|8(?:[2-5789]8\|6[48])\|9(?:2[29]\|6[79]\|7[179]\|8[789]\|9[78]))\\d{4}", , , , "6713001234", , , , [7]],[, , "8(?:00\|33\|44\|55\|66\|77\|88)[2-9]\\d{6}", , , , "8002123456"],[, , "900[2-9]\\d{6}", , , , "9002123456"],[, , "NA", , , ,
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 5b 31 34 5d 5b 30 31 37 2d 39 5d 7c 38 28 3f 3a 5b 30 2d 35 36 39 5d 7c 5b 37 38 5d 5b 30 38 39 5d 29 7c 39 5b 33 38 39 5d 29 7c 33 28 3f 3a 5b 30 35 2d 38 5d 7c 31 28 3f 3a 5b 30 38 39 5d 7c 37 5b 35 2d 39 5d 29 7c 32 28 3f 3a 5b 35 2d 38 5d 7c 5b 30 2d 34 39 5d 5b 30 38 39 5d 29 7c 33 5b 30 31 37 2d 39 5d 7c 34 28 3f 3a 5b 30 37 2d 39 5d 7c 31 31 29 7c 39 28 3f 3a 5b 30 31 36 38 39 5d 7c 5b 32 33 34 35 5d 5b 30 38 39 5d 7c 34 30 7c 37 5b 30 31 38 39 5d 29 29 7c 34 28 3f 3a 5b 30 35 36 5d 7c 31 28 3f 3a 5b 30 31 33 35 2d 39 5d 7c 5b 32 33 5d 5b 30 38 39 5d 7c 32 5b 30 38 39 5d 7c 34 5b 30 38 39 5d 29 7c 32 28 3f 3a 30 5b 30 38 39 5d 7c 5b 31 2d 37 5d 5b 30 38 39 5d 7c 5b 38 39 5d 29 7c 33 28 3f 3a 5b 30 2d 38 5d 5b 30 38 39 5d 7c 39 29 7c 34 28 3f 3a 5b Data Ascii: [14][017-9]\|8(?:[0-569]\|[78][089])\|9[389])\|3(?:[05-8]\|1(?:[089]\|7[5-9])\|2(?:[5-8]\|[0-49][089])\|3[017-9]\|4(?:[07-9]\|11)\|9(?:[01689]\|[2345][089]\|40\|7[0189]))\|4(?:[056]\|1(?:[0135-9]\|[23][089]\|2[089]\|4[089])\|2(?:0[089]\|[1-7][089]\|[89])\|3(?:[0-8][089]\|9)\|4(?:[
2024-02-20 15:12:50 UTC	16384	IN	Data Raw: 31 37 7c 39 39 29 29 7c 36 34 7c 37 38 7c 38 5b 33 39 5d 7c 39 31 37 29 7c 34 28 3f 3a 32 28 3f 3a 5b 36 38 5d 7c 32 30 7c 39 5b 31 37 38 5d 29 7c 36 34 7c 37 5b 33 34 37 5d 29 7c 35 28 3f 3a 5b 32 2d 35 38 39 5d 7c 33 39 5b 36 37 5d 29 7c 36 30 7c 38 28 3f 3a 5b 34 36 2d 39 5d 7c 33 5b 32 37 39 5d 7c 32 5b 31 32 34 35 38 39 5d 29 7c 39 28 3f 3a 5b 32 33 35 2d 38 5d 7c 39 33 28 3f 3a 33 31 7c 34 29 29 22 5d 2c 0d 0a 09 09 09 09 09 09 22 30 24 31 22 0d 0a 09 09 09 09 09 5d 2c 0d 0a 09 09 09 09 09 5b 2c 20 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 20 22 24 31 2d 24 32 2d 24 33 22 2c 20 5b 22 32 28 3f 3a 39 5b 31 34 2d 37 39 5d 7c 37 34 7c 5b 33 34 5d 37 7c 5b 35 36 5d 39 29 7c 38 32 7c 39 39 33 22 5d 2c 20 22 30 24 31 Data Ascii: 17\|99))\|64\|78\|8[39]\|917)\|4(?:2(?:[68]\|20\|9[178])\|64\|7[347])\|5(?:[2-589]\|39[67])\|60\|8(?:[46-9]\|3[279]\|2[124589])\|9(?:[235-8]\|93(?:31\|4))"],"0$1"],[, "(\\d{3})(\\d{2})(\\d{4})", "$1-$2-$3", ["2(?:9[14-79]\|74\|[34]7\|[56]9)\|82\|993"], "0$1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49730	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:50 UTC	946	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/MyMDTaxesLogo.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD
2024-02-20 15:12:50 UTC	635	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:50 GMT Content-Type: image/png Content-Length: 17281 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Tue, 11 Jul 2023 13:58:46 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_607D511A9A9D51A83881C90F63A1EF05_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:50 UTC	15749	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 36 00 00 01 2c 08 06 00 00 00 f9 28 ec d6 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ed dd bf 6e 24 57 b6 2f e8 c8 83 36 c6 ab 6c 80 7e 71 70 1f a0 d8 4f 50 ec 27 10 1b b4 64 15 e5 0b 10 f5 04 c5 f2 c6 13 0b 90 2f d2 92 45 34 e9 dd b1 ba f8 04 4d 3e c0 a0 8b c6 00 73 01 02 a7 e8 5f 20 07 a1 b3 42 27 c5 2e 66 ec d8 f1 3f f3 fb 00 42 52 77 55 32 32 32 22 32 e2 b7 d7 5e 7b b1 5a ad 0a 00 00 00 00 80 39 f9 0f 9f 16 00 00 00 00 30 37 82 4d 00 00 00 00 60 76 04 9b 00 00 00 00 c0 ec 08 36 01 00 00 00 80 d9 11 6c 02 00 00 00 00 b3 23 d8 04 00 00 00 00 66 47 b0 09 00 00 00 00 cc 8e 60 13 00 00 00 00 98 1d c1 26 00 00 00 00 30 3b 82 4d 00 00 00 00 60 76 04 9b Data Ascii: PNGIHDR6,(pHYs.#.#x?v IDATxn$W/6l~qpOP'd/E4M>s_ B'.f?BRwU222"2^{Z907M`v6l#fG`&0;M`v
2024-02-20 15:12:50 UTC	1532	IN	Data Raw: 6b 5a 06 3c 57 0d a2 a4 86 7e 75 fb e3 55 cf 9f f3 72 2d bc 4d 69 7f f0 e3 c4 ab c7 f7 13 42 cd 8f 13 5a 6d fe 77 7a 6c 02 00 00 6c 76 97 50 89 73 14 0f ba 53 79 68 6d da cf 6e dd 6d 07 7d 1d 53 c2 a7 6a 85 ed a3 9a 87 e5 aa fa ab 49 3f c7 fb 99 b4 07 f8 9a 87 91 b7 fd 4b 04 54 7f ef f8 75 1f d6 16 d4 69 a3 6d b0 39 64 cf d2 a9 f8 1c e7 75 4a c5 f6 eb 18 3c 38 8f 81 84 bb 0d fb fc 30 ce cf c3 86 21 e6 ba dc fe bd 77 f1 77 37 55 6e ff 10 af db 65 d5 f6 7e 1c c7 a7 89 55 e3 7d f4 d3 fc 9a 36 15 9b 29 ad 3d ee 47 1e 10 78 d1 62 b5 5a 4d 71 bb 00 00 d8 0d 87 d1 77 ab 2f 0b c7 11 1d 38 4a 0c 79 52 57 b8 ed d3 61 3c 7c 36 9d 72 5e c4 03 f8 59 87 53 0d 53 1f 36 9f d6 56 73 ae 02 a7 65 3c 6c 1f 65 84 b3 f7 2d 2b 02 bb d6 e4 3a 37 54 08 92 e2 6b 2b 22 e7 fa 90 d0 Data Ascii: kZ<W~uUr-MiBZmwzllvPsSyhmnm}SjI?KTuim9duJ<80!ww7Une~U}6)=GxbZMqw/8JyRWa<\|6r^YSS6Vse<le-+:7Tk+"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49729	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:50 UTC	1189	OUT	GET /ITSCThemeDynamic/themes/html/dynamicSpots/overlay-gif/processing-message2.gif HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:50 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:50 GMT Content-Type: image/gif Content-Length: 4548 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 21 Dec 2023 09:58:00 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:50 UTC	4548	IN	Data Raw: 47 49 46 38 39 61 18 01 64 00 e6 48 00 09 85 ba ef f7 fa 7c be da 00 63 9c 19 8d bf 4b a6 cc 5b ae d1 3a 9d c8 2a 95 c3 de ef f6 8c c6 df 6b b6 d6 ad d6 e8 7b b5 ce bd d6 e6 ce d6 de 6b ad c5 b5 c5 ce 9d ce e3 9c ad c5 ce e7 f1 52 94 b5 ef f7 f7 63 84 a5 4a 73 94 42 8c b5 31 5a 84 7b 9c b5 00 31 63 de ef ef 63 9c bd 8c bd d6 ce de ef 9c c5 d6 10 6b 9c bd de ed d6 de e6 ad ce de 21 7b a5 ef ef f7 31 84 ad de e6 ef bd ce d6 e6 ef ef bd c5 d6 84 9c b5 ce d6 e6 a5 b5 ce 8c a5 bd 9c b5 c5 73 8c ad c5 ce de e6 e6 ef b5 c5 d6 10 42 73 21 4a 7b 5a 7b 9c de e6 e6 a5 b5 c5 ce de e6 c5 d6 de 42 63 8c ad bd ce 7b 94 ad 94 ad bd 52 73 94 f7 f7 f7 6b 84 a5 f7 f7 ff 00 31 6b de de e6 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89adH\|cK[:*k{kRcJsB1Z{1cck!{1sBs!J{Z{Bc{Rsk1k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49731	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:50 UTC	1164	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Quick-Links.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:50 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:50 GMT Content-Type: image/png Content-Length: 6576 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:50 UTC	6576	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 19 62 49 44 41 54 78 9c ed dd 7f 4c db f7 9d c7 71 7a 37 81 26 6c 9f ca 28 75 e2 0d 1d 81 52 1c 31 39 1a 0b be 3b 12 8d 50 36 a4 5e bc 5c e0 1f d2 b4 61 52 24 d0 51 25 52 93 2a 4b 93 28 49 ab a4 cd a2 26 95 c2 1a 29 9c 22 0d ba 16 ee 0f 88 56 e7 22 b1 a3 84 a9 e5 0f 1c 71 8a 25 14 67 08 c2 c4 e6 c4 e5 10 d3 d9 e6 0f 98 4e 3a c1 a7 7c cf b3 bf df af bf b6 bf 5f e3 1f cf 87 a6 09 39 b6 f9 fa 63 97 ef cb ef ef fb f3 f9 3c f7 52 53 4f 01 00 00 40 36 fb 1b de 3d 00 00 90 ed 08 34 00 00 20 eb 11 68 00 00 40 d6 23 d0 00 00 80 ac 47 a0 01 00 00 59 8f 40 03 00 00 b2 1e 81 06 00 00 64 3d 02 0d 00 00 Data Ascii: PNGIHDR4 )pHYs&?bIDATxLqz7&l(uR19;P6^\aR$Q%R*K(I&)"V"q%gN:\|_9c<RSO@6=4 h@#GY@d=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49732	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:50 UTC	1164	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Individuals.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:50 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:50 GMT Content-Type: image/png Content-Length: 8166 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:50 UTC	8166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 1f 98 49 44 41 54 78 9c ed dd 7f 68 5b e7 b9 07 70 65 37 54 d0 c9 07 96 ab 12 c1 29 2d b5 93 61 95 5e 64 d8 ad cc 70 5d 96 44 9d c0 a1 cb 2c 6f 5d 4a 53 ab 7f 74 0d 38 35 ac d9 70 45 32 5c ae d7 04 d7 30 af e0 56 d0 dc 3b a8 ec 94 9b 8c 5a be 59 57 83 32 79 d9 70 c5 25 ca 1d f4 c0 76 8f 59 23 05 d2 1c 90 a9 b8 19 92 da a1 40 e0 62 bd c9 c9 c9 79 df f7 e8 48 3a fa 71 ac ef 87 fe 91 5a b2 75 7c 24 eb 3c 7a df e7 fd be 3b f6 ee 5f 70 00 00 00 00 d8 d9 d7 f0 ec 01 00 00 80 dd a1 a0 01 00 00 00 db 43 41 03 00 00 00 b6 87 82 06 00 00 00 6c 0f 05 0d 00 00 00 d8 1e 0a 1a 00 00 00 b0 3d 14 34 00 00 Data Ascii: PNGIHDR4 )pHYs&?IDATxh[pe7T)-a^dp]D,o]JSt85pE2\0V;ZYW2yp%vY#@byH:qZu\|$<z;_pCAl=4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49736	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:50 UTC	1161	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Business.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:50 UTC	660	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:50 GMT Content-Type: image/png Content-Length: 6385 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="0", dtRpid;desc="1751007262" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:50 UTC	6385	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 18 a3 49 44 41 54 78 9c ed dd 6f 4c 1b 67 9e c0 71 f6 f6 04 2f b0 7d 5a 8e 23 4e bc 17 1d 81 45 38 42 72 74 6c 40 3a 1a 5d 4a d0 5a aa 82 76 81 17 4b 76 db 50 29 3a 22 d1 4d a4 4d 2a 9a 6d a2 36 ad f2 87 46 9b 54 4a ae 48 41 8a 54 d2 3f 61 5f 04 b6 25 aa c4 89 10 74 29 2f 4c 16 29 96 50 cd 21 08 a7 b4 0e 0e e5 d8 3b db e8 04 f7 e6 04 d3 75 27 e3 99 f1 d8 9e c7 9e 21 df cf 3b 8c fd cc e3 99 11 f3 e3 79 7e cf f3 fb c1 4f 1a af 15 00 00 00 d8 d9 5f 71 f5 00 00 80 dd 11 d0 00 00 00 db 23 a0 01 00 00 b6 47 40 03 00 00 6c 8f 80 06 00 00 d8 1e 01 0d 00 00 b0 3d 02 1a 00 00 60 7b 04 34 00 00 c0 f6 Data Ascii: PNGIHDR4 )pHYs&?IDATxoLgq/}Z#NE8Brtl@:]JZvKvP):"MM*m6FTJHAT?a_%t)/L)P!;u'!;y~O_q#G@l=`{4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49737	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:50 UTC	1275	OUT	GET /rptp/wcm/connect/11fffd69-e413-4ed0-8644-bf80120a18ab/RSI+logo.png?MOD=AJPERES&CACHEID=ROOTWORKSPACE-11fffd69-e413-4ed0-8644-bf80120a18ab-m8Bm1KV&ContentCache=NONE HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:51 UTC	735	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:51 GMT Content-Type: image/png Content-Length: 2886 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Expires: Tue, 20 Feb 2024 15:22:51 GMT Accept-Ranges: bytes Cache-Control: public,max-age=600,post-check=300,pre-check=600 ETag: "-1615099729" Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:51 UTC	2886	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 50 08 06 00 00 00 a9 bf 73 45 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e1 06 06 0c 0e 07 b2 1a 89 b2 00 00 0a d3 49 44 41 54 78 da e5 9c 7b 70 dc 55 15 c7 3f 9b a4 a1 4d 4a d2 d2 50 5a db b4 e5 6d 69 a5 38 bc 14 a5 22 e0 c2 88 20 1d 1d 87 87 8f 19 65 18 2c fb 80 65 c1 c7 38 b3 2e 2a 88 ac 3b ec 03 44 41 1c 19 94 f1 31 6a 29 23 b8 14 0b 2a 14 91 19 e4 35 f2 68 0b 69 49 93 d2 3c 9a 34 6d 93 34 c9 fa c7 ef fb 6b 6e 7f fd 6d b2 9b ee 6e b6 e9 9d b9 f3 7b ee fd dd 7b ee 39 df f3 bd e7 9e 04 26 a1 c4 12 a9 6a 1d 99 ec 52 35 49 df 6d 8e 25 52 33 c3 41 ff 11 2b 80 a3 81 4f 53 01 65 b2 04 d0 04 Data Ascii: PNGIHDR@PsEbKGDpHYstIMEIDATx{pU?MJPZmi8" e,e8.;DA1j)#5hiI<4m4knmn{{9&jR5Im%R3A+OSe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49738	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:51 UTC	1170	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:51 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:51 GMT Content-Type: image/png Content-Length: 9060 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:51 UTC	9060	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ed dd 6d 4c 5b 59 7a 07 70 b6 ad 40 15 b6 ab a5 0c f1 e0 99 a8 bc 2c 8b 23 56 46 a5 b1 a5 7a a2 10 42 d7 52 1a 76 1a e7 43 49 66 07 46 8a 4a 24 a6 19 69 92 51 36 6f ca cc 8e 42 26 1b 0d 59 69 68 90 82 84 b4 b0 3b 03 fb 01 68 d6 e9 48 9e f5 90 ac 12 3e e0 2c 52 2c a1 98 45 80 ab ec 3a 71 28 a5 95 5f d4 e2 55 a5 ca 3e 93 3b 77 ee 3d e7 f8 fa da d7 f8 9a ff 4f f9 40 fc 72 7c 7d 6d df fb dc 73 9e 73 9e 6f 7d a7 63 a8 0c 00 00 00 40 cf fe 04 9f 1e 00 00 00 e8 1d 02 1a 00 00 00 d0 3d 04 34 00 00 00 a0 7b 08 68 00 00 00 40 f7 10 d0 00 00 00 80 ee 21 a0 01 00 00 00 dd 43 40 Data Ascii: PNGIHDR4 )pHYs&? IDATxmL[Yzp@,#VFzBRvCIfFJ$iQ6oB&Yih;hH>,R,E:q(_U>;w=O@r\|}msso}c@=4{h@!C@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49739	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:51 UTC	1174	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/License-Permit-Search.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:51 UTC	635	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:51 GMT Content-Type: image/png Content-Length: 13103 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:51 UTC	13103	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ed 9d 0f 50 53 77 ba f7 d3 b7 16 f0 92 50 4d 11 02 f1 4f 03 29 10 2f 1a 5f a9 c9 bc 9b aa 88 ac b1 bd 44 5f e3 4c 57 eb 16 76 c6 2e ce 4b 17 67 56 3b ac 56 c7 3f 1d b5 ac 53 ed 8c ac ce c8 ae 33 0b d6 ca dd 19 e2 b5 70 db c6 4b a9 d6 32 9d c4 a5 35 96 d7 60 16 48 d5 1e 09 94 45 9b 3f ab a0 dd f7 1d f2 93 df 3d 9e 7f 39 39 c9 49 02 3c 9f e9 74 62 38 e7 e4 77 4e 02 e7 9b e7 f9 3e cf f3 d4 0b 25 75 12 00 00 00 00 00 80 89 cc ff 80 77 0f 00 00 00 00 80 89 0e 08 1a 00 00 00 00 00 26 3c 20 68 00 00 00 00 00 98 f0 80 a0 01 00 00 00 00 60 c2 03 82 06 00 00 00 00 80 09 0f 08 Data Ascii: PNGIHDR4 )pHYs&? IDATxPSwPMO)/_D_LWv.KgV;V?S3pK25`HE?=99I<tb8wN>%uw&< h`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49740	104.17.25.14	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:51 UTC	674	OUT	GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mdtaxconnect.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:12:51 UTC	975	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:51 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 77160 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "5eb03e5f-12d68" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2750276 Expires: Sun, 09 Feb 2025 15:12:51 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wQ3I%2FCzYCE0OmBxT8yIjC95K988EBOyP%2BmElwIR4bAggjV4Ar1x0Tqez1HSSqLxNfo5cqOwm5oPOSvKM1KkBoxBbj8hhejj0yBboRybVovXpn9vRQSXZA8PfE4tBcCMDmWDdztE4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8587b0b22b3f43ac-EWR alt-svc: h3=":443"; ma=86400
2024-02-20 15:12:51 UTC	394	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-02-20 15:12:51 UTC	1369	IN	Data Raw: 01 0e c9 27 8a 0f 36 a3 3a b0 bb c3 f3 73 eb 6d a3 62 8c 31 d8 a8 6d 30 22 c7 82 1a b0 bf 2a 56 8c a8 8d 1e a3 63 a3 24 2c 30 41 54 50 54 b4 31 12 03 fb f4 ac 3c 0b ed 3b ed f3 d2 60 10 e6 b6 27 f1 48 0e 3f f1 73 ce a9 3a 91 0f 4e 44 9f a8 fc a9 10 49 11 a4 24 8c 04 54 14 8b 5b 81 82 62 34 8a 11 cd fc 7f ea ec ef 2c af ce bc d7 ef bd a3 62 6c 36 91 ba 0b 49 4c e9 69 7d db 8c 26 e0 34 e3 94 6d 2c 27 cb 16 cb f3 23 bd d7 a5 b3 7f 52 77 01 a2 62 75 c0 b6 2c 4b 96 0b c6 06 9b e2 76 8b 03 db 08 6d 5f 2d c0 c0 e6 5c 48 8b 9d fb 8e 48 48 fe aa f3 93 ea 07 c6 c2 3f 98 96 d3 6d f3 0b 39 50 88 ad d8 29 39 e7 4a a8 86 24 c6 bd 88 9c e7 b1 f4 38 f8 e8 c7 da ce ce 7e b9 3b c4 72 15 8d 6e bf 3d 24 11 1a b5 1f 94 4e 64 64 6e 1b 21 27 ae a6 f0 e3 3b b3 f4 ac 38 99 bc 27 Data Ascii: '6:smb1m0"*Vc$,0ATPT1<;`'H?s:NDI$T[b4,bl6ILi}&4m,'#Rwbu,Kvm_-\HHH?m9P)9J$8~;rn=$Nddn!';8'
2024-02-20 15:12:51 UTC	1369	IN	Data Raw: 5b 4c 14 28 65 6c 1c 2b 32 75 2d ee d0 61 d6 98 64 a2 8e 35 3b a2 4e 24 d4 f6 22 a2 48 aa 8f 10 ab 53 46 ba 6f eb 32 69 a8 22 8a d9 5c b3 68 04 37 49 8c f6 a0 3c 53 43 4f 02 ad 19 b8 96 c8 90 48 a0 1e e2 45 77 21 01 2e 1f d7 e9 fd 21 42 53 12 43 aa 67 1e c4 9d 89 63 e3 0e b9 e4 73 2a d5 a7 73 89 28 35 6d 94 3d 71 c6 ca 8a 65 a2 fb f1 59 91 0b 24 eb 5c 3e 10 66 4e 38 80 71 97 8c 78 ea 23 76 0a a5 36 75 6d ef 09 e0 19 9d b0 60 db 4e 4d 2d 4a 00 5c f4 10 46 b7 c7 72 e9 44 02 80 1e b5 5a d3 30 93 07 23 27 ea a5 88 6e ec 11 d2 47 6a 4c 82 da 86 58 14 1b ca 8c a2 41 aa 9d f1 67 59 73 99 2a b2 59 ca dc 07 c7 5e d9 b5 98 3b 22 d8 1d 24 68 62 7f 3d b9 16 19 cf 9b 13 98 30 de 76 48 3c 97 56 76 7f 81 63 9b 5f 00 5c 59 8a 03 ec a3 e8 77 3b 64 42 16 02 83 8b 03 4e 83 Data Ascii: [L(el+2u-ad5;N$"HSFo2i"\h7I<SCOHEw!.!BSCgcss(5m=qeY$\>fN8qx#v6um`NM-J\FrDZ0#'nGjLXAgYsY^;"$hb=0vH<Vvc_\Yw;dBN
2024-02-20 15:12:51 UTC	1369	IN	Data Raw: fd 2a fb bb 04 43 3e c0 1e 1e 83 a7 e1 17 78 50 55 ba 7a 1e ad 7d 59 11 3d 02 0f f5 cc 95 16 bc 7d f5 d0 b6 c7 10 9a 19 0a e7 0d 1c 36 2d 60 2f 22 48 0b 0a 6f 85 26 92 44 97 49 30 ff 45 32 58 61 89 95 2d 1f a9 7b 0e 35 c0 81 99 3c 0d 2c 7d 94 d1 13 60 60 36 fa c7 ed 18 90 6a 69 a2 e9 d8 69 6d 3c 55 75 6a 59 a9 5a fa 6a 0e 42 5c 40 8c 67 cb 33 45 6a 66 70 96 f8 98 9f 3a ba da ed ea 10 57 db c7 ae 9f ba d9 df b3 8e 9c 94 ce 70 a5 c4 b3 33 61 6f af fb 11 81 31 88 64 61 8b f8 20 9c 03 b7 dd ab a5 fd 88 99 4a 82 d7 b2 3f 20 6a ce 71 37 ae be 4d c3 e6 ce 66 66 99 59 b5 66 cb 1c d4 73 02 1e b0 1b 24 9b 9c 09 84 95 48 fd 91 14 e6 ac 6c a5 96 f5 b9 bf c0 88 97 28 25 2e 9b 72 06 e3 d2 77 3f 03 f2 be 6d 3d 7e 0b 82 79 b2 63 59 91 62 67 29 3c cb 57 84 20 2f 56 78 16 Data Ascii: *C>xPUz}Y=}6-`/"Ho&DI0E2Xa-{5<,}``6jiim<UujYZjB\@g3Ejfp:Wp3ao1da J? jq7MffYfs$Hl(%.rw?m=~ycYbg)<W /Vx
2024-02-20 15:12:51 UTC	1369	IN	Data Raw: f2 52 53 92 a4 51 ba 98 74 9e ee 03 36 2c a0 51 e3 6a 5c 08 f0 e3 3c 08 2f 5d 4e ae 73 fb cd 1d a5 3b cd 27 0c 18 48 58 5d 8e 45 98 32 1e 39 90 87 64 a6 6b 59 fd 0d d9 6a 90 8e c2 52 36 d1 d4 ed f7 03 51 12 21 98 ca 00 ea ee f7 20 56 86 bb 99 0a 25 22 08 15 5e d0 60 97 4e 33 4f f2 8c a2 0f fa 86 83 ac 5b f1 1d 76 3a e0 ca 84 3a d9 e8 5e da 9c 72 d7 bf e7 11 40 ea d2 ec 0a 8d 46 c5 5f ae d7 11 e5 01 08 4e 63 cc 42 d2 17 f1 fd c3 38 70 a3 5c 69 af a2 b5 d7 37 cf ee 8b 67 e5 ad 03 2a ee 8f d1 cd fd 2c 83 43 ab 9d 1a c2 0e e1 5b 87 36 b4 54 92 3f ba ba b5 16 85 25 f2 7a fb c5 40 01 06 18 6a 41 70 42 4e 35 f0 9e 22 34 54 9e a5 e0 f4 22 96 7d 30 75 4a f4 87 8f 9e 96 c8 9c 7e 33 f6 1e d9 0e d1 7b 7d 02 75 57 f6 8c e0 ee 4d 93 1e 6a fa 39 c8 2d 82 5d 13 f5 ab 9d Data Ascii: RSQt6,Qj\</]Ns;'HX]E29dkYjR6Q! V%"^`N3O[v::^r@F_NcB8p\i7g*,C[6T?%z@jApBN5"4T"}0uJ~3{}uWMj9-]
2024-02-20 15:12:51 UTC	1369	IN	Data Raw: 60 4c 62 72 c7 92 84 81 d7 9d ea ce 5d 11 e5 78 e2 1d 39 3d 52 19 76 26 2a 51 35 e8 80 04 30 7a 7f 1e f3 cb f8 79 3c 88 e0 01 ea 83 60 4d 7c f6 d4 99 9a 64 4f 86 d9 a5 69 5a ae e3 19 c5 24 ae ee 19 bb 2b 23 1e 4b 48 c8 46 0a 8d c3 e9 c4 ea ed be 83 00 a7 8e 09 ee c8 18 f8 89 1f a7 8f 29 2d 09 be 06 3a 4d 24 cb 79 63 a0 ae 45 c0 25 41 69 95 92 05 32 5d 96 98 08 cc 6c e5 b6 a8 90 89 1c 9a 19 cd 38 86 49 1a bc 79 b2 d2 05 5a 17 47 4a b3 83 1a a2 06 ae 5c d5 1e 32 1a d6 99 58 62 18 bf 4c be f6 f0 9f 49 c2 41 2d fd 47 72 52 00 21 cd 30 a0 13 a0 db 4c 2b c0 51 68 aa 53 f3 59 d4 d2 13 d7 f2 53 bf 35 fd 5f 1e d8 28 a5 06 0e 70 6f 46 9a a7 54 89 87 11 af 23 6b 1c 4e db be ea 6c 7c 72 87 6e 06 b3 64 d7 48 a0 07 1e 96 dc 79 13 db 8a e6 f9 ee e4 c8 26 db 86 17 78 e3 Data Ascii: `Lbr]x9=Rv&*Q50zy<`M\|dOiZ$+#KHF)-:M$ycE%Ai2]l8IyZGJ\2XbLIA-GrR!0L+QhSYS5_(poFT#kNl\|rndHy&x
2024-02-20 15:12:51 UTC	1369	IN	Data Raw: c7 29 00 af 61 99 39 50 89 ab 26 e0 f8 d1 c5 36 4f 6f be d6 03 17 6c a9 3c 9d d4 f3 e2 02 19 f2 19 ef 64 73 3d 23 01 33 c5 73 16 8f b5 50 2d d0 62 44 a0 d4 fc 22 8d 0f ec 5b 3a b0 77 c9 ba 5e 6a f9 89 d3 81 bb d0 51 65 6a 60 8c 8b 97 54 71 92 05 3d a2 fa b1 94 48 26 a3 6f 8f 1b a1 1b 6b c4 89 4c 44 de 57 a1 4f fb 86 c2 f9 94 eb ca 2a 4a 33 73 5b 19 ce 36 9d 6a 31 f0 40 d9 d8 6e 72 3c ae ce be db 87 86 23 89 cd d2 40 09 88 30 bf 9b 63 06 09 a2 9d 1f 05 99 3f ef b5 9d 3c 32 8a 44 d5 d3 a6 09 bf e8 7d af b0 54 73 cd d9 53 ce fd d0 22 e2 0b 52 cd 0a ae 95 a4 2e 7d df 6f 5a de cd 18 e3 87 f9 46 6f 2a 98 95 a7 dd 97 87 b6 ff b7 96 b5 3a dd f4 d6 1b c1 93 bc c1 37 c9 ed f7 48 c2 f2 e4 8d 9a 0e a5 78 a1 b4 5d c5 db c7 61 19 36 1e 76 35 ed 12 52 fd a0 cc be 65 31 Data Ascii: )a9P&6Ool<ds=#3sP-bD"[:w^jQej`Tq=H&okLDWOJ3s[6j1@nr<#@0c?<2D}TsS"R.}oZFo:7Hx]a6v5Re1
2024-02-20 15:12:51 UTC	1369	IN	Data Raw: 15 e2 31 80 2d 82 59 99 97 50 c7 4e c2 bf 00 8a 5c 26 b9 79 4c 38 af d3 b9 cd f7 89 26 30 cb 63 92 c1 76 08 14 f0 c6 89 5c 8e c0 8a a1 f2 4a b5 41 ca cd 3b a4 f2 51 3b 1c 95 5d 85 89 fd 49 b4 4d 38 09 d9 73 af 02 aa d8 14 4d 66 f4 3f d4 b0 07 1c a1 49 12 18 9a b2 72 1b bb 72 21 d2 4b 86 39 d1 8f 38 70 d9 7d 51 bf ec bd 8d 8b e7 67 fb 2d 84 2a 0f 73 6d b5 7e c5 58 06 d7 50 1a 30 64 f8 4d 5e 08 b5 f0 3f 44 c5 18 64 49 82 6d 3c 86 a8 70 3b a1 7f 06 79 8e 06 2c 22 db a6 a6 36 ad e4 76 ca 70 07 54 5c 5e ca 6e f4 db f7 be 7f 05 33 6d a4 3e 38 a4 65 43 ae f1 dc 4e 7d 10 ad cd ea ed 63 c3 a0 e6 d9 ad 24 73 37 db bc 13 fa 9c 23 d5 b5 3c 53 46 2d 41 ba a7 a0 14 e4 86 f9 7a ac d2 e2 89 b1 13 cf 0a 80 42 81 09 2a 7b b8 06 36 63 67 1d 89 87 b1 54 7a ad 47 07 58 1f 32 Data Ascii: 1-YPN\&yL8&0cv\JA;Q;]IM8sMf?Irr!K98p}Qg-sm~XP0dM^?DdIm<p;y,"6vpT\^n3m>8eCN}c$s7#<SF-AzB{6cgTzGX2
2024-02-20 15:12:51 UTC	1369	IN	Data Raw: 4e 7d 87 51 bc 9c 30 bf e5 fe d4 a5 ed 55 bf c9 75 29 4d b6 dd 5b c6 5a 60 22 9f 37 0d b9 e2 1a 0e 3f 2f 5b 43 e4 7b cc 6c f1 82 29 f2 24 18 4d 72 89 f5 c0 9a 7c 5e ba 04 91 09 61 99 bb e2 b7 10 03 fe a7 3a 88 a0 cd 22 e9 d6 8a 9d db 61 09 c2 6c 02 f2 3e 1b de 68 00 c7 e1 79 a2 7f 80 14 61 d1 ce 7b 9e 32 3e af fe 43 50 ae 89 90 b0 4c c5 0f 10 20 9a 6a 3f d1 6e 08 74 67 e5 9e d8 d3 5d 03 a6 16 e1 53 88 b8 f8 f8 7b e1 b5 55 d3 87 05 91 28 27 b3 b5 62 e7 a3 27 66 8f e6 67 30 d3 83 dd ea 18 95 c4 4c 50 41 a5 4d 74 64 15 07 cc 29 e3 b3 32 c3 ba e3 59 21 d6 76 00 8e 26 60 6f 85 af fe 32 12 50 5b 0b 1b 9d 61 de 94 84 bb 35 fb c0 0c 53 87 7c 23 2b 80 b2 01 37 4a 05 a4 8a 0a 23 1b c8 b8 cc 5f ab d5 64 55 a9 a4 36 23 56 19 44 ae 86 c0 9b 42 22 4b 83 f7 d6 7c a2 1a Data Ascii: N}Q0Uu)M[Z`"7?/[C{l)$Mr\|^a:"al>hya{2>CPL j?ntg]S{U('b'fg0LPAMtd)2Y!v&`o2P[a5S\|#+7J#_dU6#VDB"K\|
2024-02-20 15:12:51 UTC	1369	IN	Data Raw: 51 40 ea f8 c8 84 36 e6 90 4e ce 81 84 aa 9e 41 7d 6a c0 8e 42 61 f3 c1 1c 33 ed c5 a5 29 ea 15 c3 cf cb b4 3a 71 ba 49 ab 00 ed af 9e c1 1d 67 5a be 08 32 cf 76 1a 6c 66 2c df 10 d0 a3 a2 ce 7f 59 bf f3 87 d1 ae ec dd 62 d4 a9 ea 1c f9 9e 19 d9 58 6f c3 49 12 c4 97 cb 9c dd 58 a8 81 a2 0e 5f 27 01 c4 12 f2 c3 35 f5 c7 15 5d 1a 4a 84 b8 fc 32 50 d2 08 39 32 b0 a8 43 cd 89 fa d4 ff 0c fd 40 f1 99 a6 43 a5 a0 86 f9 9b 18 36 14 45 9f 65 d1 00 42 40 8b 0b 06 e8 ac df 41 91 39 94 df 87 c3 02 e7 e6 c7 b4 e8 79 06 5d 00 f5 05 48 f1 09 07 89 03 2d 1c e0 20 db 62 b6 a8 39 0d d1 f0 4f 1e f5 19 30 0c 75 77 a7 ac 49 e2 c8 f1 a6 02 37 4a a6 78 95 c5 ab 32 af f3 5c ca 19 56 66 3d 6e 56 91 56 80 ab a4 d0 22 23 39 93 ac d6 76 38 78 0a fb b6 6d 15 0f 14 70 41 68 f6 d3 13 Data Ascii: Q@6NA}jBa3):qIgZ2vlf,YbXoIX_'5]J2P92C@C6EeB@A9y]H- b9O0uwI7Jx2\Vf=nVV"#9v8xmpAh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49742	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:51 UTC	1092	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/public-home-bg.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/ITSCThemeStatic/themes/Portal8.5/css/rsi/md/MD_Custom.css?modifiedDate=2024-02-06T16:48 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:51 UTC	635	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:51 GMT Content-Type: image/png Content-Length: 23395 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Wed, 07 Jun 2023 15:28:00 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:51 UTC	15749	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 36 00 00 01 2c 08 06 00 00 00 f9 28 ec d6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 21 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 32 30 32 33 3a 30 35 3a 30 39 20 31 32 3a 33 35 3a 35 38 f5 0a e1 8c 00 00 5a cb 49 44 41 54 78 5e ed dd bb 92 1c c7 bd ef fb cc 6a 18 c7 23 69 30 14 5b 02 82 90 b5 4d 00 c3 07 c0 d0 db 1e c1 08 ad e5 0a 17 f9 04 9f 80 e0 13 10 f4 85 0b dd 25 9d 20 e4 ed 63 09 f3 00 1c 60 cc 63 11 13 80 74 ce 5a 32 08 18 c7 5a e8 ca 93 bf ea 6c 70 30 ec ee ca cc ba 57 7f 3f 11 a5 e9 6e 0a 33 dd d5 75 fd e5 3f 33 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR6,(sRGBgAMAapHYs.#.#x?v!tEXtCreation Time2023:05:09 12:35:58ZIDATx^j#i0[M% c`ctZ2Zlp0W?n3u?3
2024-02-20 15:12:51 UTC	7646	IN	Data Raw: 36 9b 86 9a 41 27 5d eb ab 80 d8 d9 9b 9d 54 4f 0e a4 af 60 d3 9f 7f 01 00 00 00 00 39 14 c2 55 61 47 04 8d 4d 47 58 b5 5b 08 35 e3 aa 5f 63 59 fb 81 c2 0c 05 30 e1 95 c1 28 58 51 25 ea c3 4b 07 cf ab 31 0d b7 04 2c a5 71 4c 2a 35 22 ea ea 5b 35 5e 44 06 62 d6 da 51 8e c5 78 56 b5 af 69 98 87 5d d4 28 b0 ea 7e 9e 5f f1 6c ed 28 1a 14 5a 0a 35 e5 7a db c7 12 05 cc 55 d5 eb 8c 42 4d 29 4a bf be 7b 40 b0 09 00 00 00 00 99 d4 2d 35 ea 46 d9 99 d3 62 51 8e be 82 6b 48 67 42 cd ba c9 48 d2 55 e1 a6 fb bb aa ee c2 2b bd d0 67 52 68 a1 60 ec e1 c5 6b af 15 66 86 6e e7 3b 3f 63 ec cc fa 31 ce 86 a9 7e 71 e7 17 75 45 1e 43 e8 9b 43 55 6e 5a af d5 67 f1 3f 35 81 57 f8 4f ad d1 77 57 d7 f5 7c 8a fc b1 ab b6 fa d4 9a e2 66 d3 6e d7 ce b9 c1 bb 6d 57 c7 96 62 f1 a4 85 Data Ascii: 6A']TO`9UaGMGX[5_cY0(XQ%K1,qL*5"[5^DbQxVi](~_l(Z5zUBM)J{@-5FbQkHgBHU+gRh`kfn;?c1~quECCUnZg?5WOwW\|fnmWb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49743	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:51 UTC	1168	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Additional-Info.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:51 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:51 GMT Content-Type: image/png Content-Length: 8362 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:51 UTC	8362	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ed dd 7f 88 1b e7 99 07 f0 4d 1b 22 48 b5 03 4d 65 22 18 d3 60 c9 3d 34 e5 60 0c d7 68 39 e4 0d 34 56 2b 70 b8 98 d5 1e b4 25 b1 65 b8 bb 04 d6 b7 70 f8 8e cd de 1a 5c ce c7 9a cd fe 61 0a 6a 04 69 2f 10 ad 5b 70 0f 56 7b 21 24 a0 9e 96 04 d6 fa 63 15 0e 3c 50 d0 72 b1 64 68 3d a0 a5 82 1c 92 7c 87 52 02 c7 ea b5 df 4c a4 79 47 af e6 f7 c8 df 0f c7 e1 6e 76 35 a3 d1 3b af 9e 79 de 1f cf 13 df 79 31 3f 03 00 00 00 10 64 5f c3 a7 07 00 00 00 41 87 80 06 00 00 00 02 0f 01 0d 00 00 00 04 1e 02 1a 00 00 00 08 3c 04 34 00 00 00 10 78 08 68 00 00 00 20 f0 10 d0 00 00 00 40 Data Ascii: PNGIHDR4 )pHYs&? IDATxM"HMe"`=4`h94V+p%ep\aji/[pV{!$c<Prdh=\|RLyGnv5;yy1?d_A<4xh @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49744	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:51 UTC	1165	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/timeout-icon.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:51 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:51 GMT Content-Type: image/png Content-Length: 6318 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:51 UTC	6318	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 36 08 06 00 00 00 9b 67 fa 14 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR<6gpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49745	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:51 UTC	1223	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/img/icons/help.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:51 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:51 GMT Content-Type: image/png Content-Length: 930 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: uwywrYuUt6a5IrkUNMsAdA X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:36 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/img/icons/help.png Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:51 UTC	930	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 10 08 06 00 00 00 c9 56 25 04 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 44 49 44 41 54 78 da 24 93 5d 6c 14 55 14 c7 7f 77 e6 ce ec ce 4c db 65 8b a9 dd d2 4a 04 52 bb 08 48 84 87 6d 4a a2 28 42 35 25 18 11 7c 50 6c 82 1a 25 e1 45 5e 40 13 1f 30 31 31 fa d6 87 c6 9a 7d 50 fc a8 4d 34 7e b4 da 68 63 09 29 31 ad 31 d4 46 2a b5 75 29 45 12 2d 42 61 d9 ee c7 ec cc ec 78 77 9d 79 98 dc 33 e7 eb fe fe e7 88 30 0c 77 84 15 2e 08 8d b0 12 62 bc f3 d5 78 79 6c 62 92 a2 57 56 06 0d d3 8c 52 7d 0e 74 6e e3 95 c3 dd 98 d0 28 e1 56 40 25 2e 54 b0 fa e5 89 b1 cc ca 50 7f 7f ff a1 6d 5b 3b d8 d2 91 24 51 1f c3 f7 7d 3c cd 27 Data Ascii: PNGIHDRV%tEXtSoftwareAdobe ImageReadyqe<DIDATx$]lUwLeJRHmJ(B5%\|Pl%E^@011}PM4~hc)11F*u)E-Baxwy30w.bxylbWVR}tn(V@%.TPm[;$Q}<'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49750	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:52 UTC	790	OUT	GET /ITSCThemeDynamic/themes/html/dynamicSpots/overlay-gif/processing-message2.gif HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:52 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:52 GMT Content-Type: image/gif Content-Length: 4548 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 21 Dec 2023 09:58:00 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:52 UTC	4548	IN	Data Raw: 47 49 46 38 39 61 18 01 64 00 e6 48 00 09 85 ba ef f7 fa 7c be da 00 63 9c 19 8d bf 4b a6 cc 5b ae d1 3a 9d c8 2a 95 c3 de ef f6 8c c6 df 6b b6 d6 ad d6 e8 7b b5 ce bd d6 e6 ce d6 de 6b ad c5 b5 c5 ce 9d ce e3 9c ad c5 ce e7 f1 52 94 b5 ef f7 f7 63 84 a5 4a 73 94 42 8c b5 31 5a 84 7b 9c b5 00 31 63 de ef ef 63 9c bd 8c bd d6 ce de ef 9c c5 d6 10 6b 9c bd de ed d6 de e6 ad ce de 21 7b a5 ef ef f7 31 84 ad de e6 ef bd ce d6 e6 ef ef bd c5 d6 84 9c b5 ce d6 e6 a5 b5 ce 8c a5 bd 9c b5 c5 73 8c ad c5 ce de e6 e6 ef b5 c5 d6 10 42 73 21 4a 7b 5a 7b 9c de e6 e6 a5 b5 c5 ce de e6 c5 d6 de 42 63 8c ad bd ce 7b 94 ad 94 ad bd 52 73 94 f7 f7 f7 6b 84 a5 f7 f7 ff 00 31 6b de de e6 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89adH\|cK[:*k{kRcJsB1Z{1cck!{1sBs!J{Z{Bc{Rsk1k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49749	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:52 UTC	767	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/MyMDTaxesLogo.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947
2024-02-20 15:12:52 UTC	635	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:52 GMT Content-Type: image/png Content-Length: 17281 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Tue, 11 Jul 2023 13:58:46 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:52 UTC	15749	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 36 00 00 01 2c 08 06 00 00 00 f9 28 ec d6 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ed dd bf 6e 24 57 b6 2f e8 c8 83 36 c6 ab 6c 80 7e 71 70 1f a0 d8 4f 50 ec 27 10 1b b4 64 15 e5 0b 10 f5 04 c5 f2 c6 13 0b 90 2f d2 92 45 34 e9 dd b1 ba f8 04 4d 3e c0 a0 8b c6 00 73 01 02 a7 e8 5f 20 07 a1 b3 42 27 c5 2e 66 ec d8 f1 3f f3 fb 00 42 52 77 55 32 32 32 22 32 e2 b7 d7 5e 7b b1 5a ad 0a 00 00 00 00 80 39 f9 0f 9f 16 00 00 00 00 30 37 82 4d 00 00 00 00 60 76 04 9b 00 00 00 00 c0 ec 08 36 01 00 00 00 80 d9 11 6c 02 00 00 00 00 b3 23 d8 04 00 00 00 00 66 47 b0 09 00 00 00 00 cc 8e 60 13 00 00 00 00 98 1d c1 26 00 00 00 00 30 3b 82 4d 00 00 00 00 60 76 04 9b Data Ascii: PNGIHDR6,(pHYs.#.#x?v IDATxn$W/6l~qpOP'd/E4M>s_ B'.f?BRwU222"2^{Z907M`v6l#fG`&0;M`v
2024-02-20 15:12:52 UTC	1532	IN	Data Raw: 6b 5a 06 3c 57 0d a2 a4 86 7e 75 fb e3 55 cf 9f f3 72 2d bc 4d 69 7f f0 e3 c4 ab c7 f7 13 42 cd 8f 13 5a 6d fe 77 7a 6c 02 00 00 6c 76 97 50 89 73 14 0f ba 53 79 68 6d da cf 6e dd 6d 07 7d 1d 53 c2 a7 6a 85 ed a3 9a 87 e5 aa fa ab 49 3f c7 fb 99 b4 07 f8 9a 87 91 b7 fd 4b 04 54 7f ef f8 75 1f d6 16 d4 69 a3 6d b0 39 64 cf d2 a9 f8 1c e7 75 4a c5 f6 eb 18 3c 38 8f 81 84 bb 0d fb fc 30 ce cf c3 86 21 e6 ba dc fe bd 77 f1 77 37 55 6e ff 10 af db 65 d5 f6 7e 1c c7 a7 89 55 e3 7d f4 d3 fc 9a 36 15 9b 29 ad 3d ee 47 1e 10 78 d1 62 b5 5a 4d 71 bb 00 00 d8 0d 87 d1 77 ab 2f 0b c7 11 1d 38 4a 0c 79 52 57 b8 ed d3 61 3c 7c 36 9d 72 5e c4 03 f8 59 87 53 0d 53 1f 36 9f d6 56 73 ae 02 a7 65 3c 6c 1f 65 84 b3 f7 2d 2b 02 bb d6 e4 3a 37 54 08 92 e2 6b 2b 22 e7 fa 90 d0 Data Ascii: kZ<W~uUr-MiBZmwzllvPsSyhmnm}SjI?KTuim9duJ<80!ww7Une~U}6)=GxbZMqw/8JyRWa<\|6r^YSS6Vse<le-+:7Tk+"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49746	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-20 15:12:52 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=29303 Date: Tue, 20 Feb 2024 15:12:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49755	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	963	OUT	GET /rptp/wcm/connect/11fffd69-e413-4ed0-8644-bf80120a18ab/RSI+logo.png?MOD=AJPERES&CACHEID=ROOTWORKSPACE-11fffd69-e413-4ed0-8644-bf80120a18ab-m8Bm1KV&ContentCache=NONE HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	735	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 2886 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Expires: Tue, 20 Feb 2024 15:22:53 GMT Accept-Ranges: bytes Cache-Control: public,max-age=600,post-check=300,pre-check=600 ETag: "-1615099729" Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	2886	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 50 08 06 00 00 00 a9 bf 73 45 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e1 06 06 0c 0e 07 b2 1a 89 b2 00 00 0a d3 49 44 41 54 78 da e5 9c 7b 70 dc 55 15 c7 3f 9b a4 a1 4d 4a d2 d2 50 5a db b4 e5 6d 69 a5 38 bc 14 a5 22 e0 c2 88 20 1d 1d 87 87 8f 19 65 18 2c fb 80 65 c1 c7 38 b3 2e 2a 88 ac 3b ec 03 44 41 1c 19 94 f1 31 6a 29 23 b8 14 0b 2a 14 91 19 e4 35 f2 68 0b 69 49 93 d2 3c 9a 34 6d 93 34 c9 fa c7 ef fb 6b 6e 7f fd 6d b2 9b ee 6e b6 e9 9d b9 f3 7b ee fd dd 7b ee 39 df f3 bd e7 9e 04 26 a1 c4 12 a9 6a 1d 99 ec 52 35 49 df 6d 8e 25 52 33 c3 41 ff 11 2b 80 a3 81 4f 53 01 65 b2 04 d0 04 Data Ascii: PNGIHDR@PsEbKGDpHYstIMEIDATx{pU?MJPZmi8" e,e8.;DA1j)#5hiI<4m4knmn{{9&jR5Im%R3A+OSe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49756	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	852	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Quick-Links.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 6576 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	6576	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 19 62 49 44 41 54 78 9c ed dd 7f 4c db f7 9d c7 71 7a 37 81 26 6c 9f ca 28 75 e2 0d 1d 81 52 1c 31 39 1a 0b be 3b 12 8d 50 36 a4 5e bc 5c e0 1f d2 b4 61 52 24 d0 51 25 52 93 2a 4b 93 28 49 ab a4 cd a2 26 95 c2 1a 29 9c 22 0d ba 16 ee 0f 88 56 e7 22 b1 a3 84 a9 e5 0f 1c 71 8a 25 14 67 08 c2 c4 e6 c4 e5 10 d3 d9 e6 0f 98 4e 3a c1 a7 7c cf b3 bf df af bf b6 bf 5f e3 1f cf 87 a6 09 39 b6 f9 fa 63 97 ef cb ef ef fb f3 f9 3c f7 52 53 4f 01 00 00 40 36 fb 1b de 3d 00 00 90 ed 08 34 00 00 20 eb 11 68 00 00 40 d6 23 d0 00 00 80 ac 47 a0 01 00 00 59 8f 40 03 00 00 b2 1e 81 06 00 00 64 3d 02 0d 00 00 Data Ascii: PNGIHDR4 )pHYs&?bIDATxLqz7&l(uR19;P6^\aR$Q%R*K(I&)"V"q%gN:\|_9c<RSO@6=4 h@#GY@d=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49760	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	852	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Individuals.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 8166 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	8166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 1f 98 49 44 41 54 78 9c ed dd 7f 68 5b e7 b9 07 70 65 37 54 d0 c9 07 96 ab 12 c1 29 2d b5 93 61 95 5e 64 d8 ad cc 70 5d 96 44 9d c0 a1 cb 2c 6f 5d 4a 53 ab 7f 74 0d 38 35 ac d9 70 45 32 5c ae d7 04 d7 30 af e0 56 d0 dc 3b a8 ec 94 9b 8c 5a be 59 57 83 32 79 d9 70 c5 25 ca 1d f4 c0 76 8f 59 23 05 d2 1c 90 a9 b8 19 92 da a1 40 e0 62 bd c9 c9 c9 79 df f7 e8 48 3a fa 71 ac ef 87 fe 91 5a b2 75 7c 24 eb 3c 7a df e7 fd be 3b f6 ee 5f 70 00 00 00 00 d8 d9 d7 f0 ec 01 00 00 80 dd a1 a0 01 00 00 00 db 43 41 03 00 00 00 b6 87 82 06 00 00 00 6c 0f 05 0d 00 00 00 d8 1e 0a 1a 00 00 00 b0 3d 14 34 00 00 Data Ascii: PNGIHDR4 )pHYs&?IDATxh[pe7T)-a^dp]D,o]JSt85pE2\0V;ZYW2yp%vY#@byH:qZu\|$<z;_pCAl=4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49759	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	849	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Business.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 6385 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	6385	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 18 a3 49 44 41 54 78 9c ed dd 6f 4c 1b 67 9e c0 71 f6 f6 04 2f b0 7d 5a 8e 23 4e bc 17 1d 81 45 38 42 72 74 6c 40 3a 1a 5d 4a d0 5a aa 82 76 81 17 4b 76 db 50 29 3a 22 d1 4d a4 4d 2a 9a 6d a2 36 ad f2 87 46 9b 54 4a ae 48 41 8a 54 d2 3f 61 5f 04 b6 25 aa c4 89 10 74 29 2f 4c 16 29 96 50 cd 21 08 a7 b4 0e 0e e5 d8 3b db e8 04 f7 e6 04 d3 75 27 e3 99 f1 d8 9e c7 9e 21 df cf 3b 8c fd cc e3 99 11 f3 e3 79 7e cf f3 fb c1 4f 1a af 15 00 00 00 d8 d9 5f 71 f5 00 00 80 dd 11 d0 00 00 00 db 23 a0 01 00 00 b6 47 40 03 00 00 6c 8f 80 06 00 00 d8 1e 01 0d 00 00 b0 3d 02 1a 00 00 60 7b 04 34 00 00 c0 f6 Data Ascii: PNGIHDR4 )pHYs&?IDATxoLgq/}Z#NE8Brtl@:]JZvKvP):"MM*m6FTJHAT?a_%t)/L)P!;u'!;y~O_q#G@l=`{4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49757	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	858	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 9060 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	9060	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ed dd 6d 4c 5b 59 7a 07 70 b6 ad 40 15 b6 ab a5 0c f1 e0 99 a8 bc 2c 8b 23 56 46 a5 b1 a5 7a a2 10 42 d7 52 1a 76 1a e7 43 49 66 07 46 8a 4a 24 a6 19 69 92 51 36 6f ca cc 8e 42 26 1b 0d 59 69 68 90 82 84 b4 b0 3b 03 fb 01 68 d6 e9 48 9e f5 90 ac 12 3e e0 2c 52 2c a1 98 45 80 ab ec 3a 71 28 a5 95 5f d4 e2 55 a5 ca 3e 93 3b 77 ee 3d e7 f8 fa da d7 f8 9a ff 4f f9 40 fc 72 7c 7d 6d df fb dc 73 9e 73 9e 6f 7d a7 63 a8 0c 00 00 00 40 cf fe 04 9f 1e 00 00 00 e8 1d 02 1a 00 00 00 d0 3d 04 34 00 00 00 a0 7b 08 68 00 00 00 40 f7 10 d0 00 00 00 80 ee 21 a0 01 00 00 00 dd 43 40 Data Ascii: PNGIHDR4 )pHYs&? IDATxmL[Yzp@,#VFzBRvCIfFJ$iQ6oB&Yih;hH>,R,E:q(_U>;w=O@r\|}msso}c@=4{h@!C@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49758	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	862	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/License-Permit-Search.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	635	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 13103 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	13103	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ed 9d 0f 50 53 77 ba f7 d3 b7 16 f0 92 50 4d 11 02 f1 4f 03 29 10 2f 1a 5f a9 c9 bc 9b aa 88 ac b1 bd 44 5f e3 4c 57 eb 16 76 c6 2e ce 4b 17 67 56 3b ac 56 c7 3f 1d b5 ac 53 ed 8c ac ce c8 ae 33 0b d6 ca dd 19 e2 b5 70 db c6 4b a9 d6 32 9d c4 a5 35 96 d7 60 16 48 d5 1e 09 94 45 9b 3f ab a0 dd f7 1d f2 93 df 3d 9e 7f 39 39 c9 49 02 3c 9f e9 74 62 38 e7 e4 77 4e 02 e7 9b e7 f9 3e cf f3 d4 0b 25 75 12 00 00 00 00 00 80 89 cc ff 80 77 0f 00 00 00 00 80 89 0e 08 1a 00 00 00 00 00 26 3c 20 68 00 00 00 00 00 98 f0 80 a0 01 00 00 00 00 60 c2 03 82 06 00 00 00 00 80 09 0f 08 Data Ascii: PNGIHDR4 )pHYs&? IDATxPSwPMO)/_D_LWv.KgV;V?S3pK25`HE?=99I<tb8wN>%uw&< h`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49763	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-20 15:12:53 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=29282 Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-02-20 15:12:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49764	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	1310	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/images/favicon.ico HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:53 UTC	959	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/x-icon Content-Length: 1639 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: 0GjwhxlV9q2qXmHd_wuTFA X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:38 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 20 Jun 2022 17:56:10 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/images/favicon.ico Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	1639	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 02 00 00 00 fc 18 ed a3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 06 09 49 44 41 54 78 da 84 56 5b 6c 55 45 14 9d 3d 73 ee 6d b9 b4 94 f7 c3 42 c0 07 68 fb 61 88 31 d8 fa 41 50 89 7e 40 2a 98 28 90 82 8a 06 3e 4c 14 4c 4c 14 24 4d b4 f8 8a 49 91 90 f8 a7 44 40 12 52 13 f5 cf f0 08 a2 80 69 8c 04 44 04 42 51 2c 2a 58 04 4a 5f b4 b7 67 66 5c 7b cf b9 a7 97 42 f1 e4 e6 e4 dc 73 66 f6 63 ad b5 f7 9e c8 7f f7 a0 22 e5 9d 73 ca 18 72 4a 29 af 89 9c 57 7c 11 fe 29 4f 8a bc d7 de c7 fa e8 a9 f8 99 f7 3a d4 30 17 11 d6 79 dc 61 4c 6b 6c 60 23 1a 26 60 9d b4 35 3a e6 57 0e ab ec 8d fb c4 87 55 94 89 fb b5 ff 5f eb b8 Data Ascii: PNGIHDR tEXtSoftwareAdobe ImageReadyqe<IDATxV[lUE=smBha1AP~@(>LLL$MID@RiDBQ,XJ_gf\{Bsfc"srJ)W\|)O:0yaLkl`#&`5:WU_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49766	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	856	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/Additional-Info.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 8362 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Thu, 01 Jun 2023 16:32:52 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	8362	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f0 00 00 00 86 08 02 00 00 00 34 20 29 d8 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ed dd 7f 88 1b e7 99 07 f0 4d 1b 22 48 b5 03 4d 65 22 18 d3 60 c9 3d 34 e5 60 0c d7 68 39 e4 0d 34 56 2b 70 b8 98 d5 1e b4 25 b1 65 b8 bb 04 d6 b7 70 f8 8e cd de 1a 5c ce c7 9a cd fe 61 0a 6a 04 69 2f 10 ad 5b 70 0f 56 7b 21 24 a0 9e 96 04 d6 fa 63 15 0e 3c 50 d0 72 b1 64 68 3d a0 a5 82 1c 92 7c 87 52 02 c7 ea b5 df 4c a4 79 47 af e6 f7 c8 df 0f c7 e1 6e 76 35 a3 d1 3b af 9e 79 de 1f cf 13 df 79 31 3f 03 00 00 00 10 64 5f c3 a7 07 00 00 00 41 87 80 06 00 00 00 02 0f 01 0d 00 00 00 04 1e 02 1a 00 00 00 08 3c 04 34 00 00 00 10 78 08 68 00 00 00 20 f0 10 d0 00 00 00 40 Data Ascii: PNGIHDR4 )pHYs&? IDATxM"HMe"`=4`h94V+p%ep\aji/[pV{!$c<Prdh=\|RLyGnv5;yy1?d_A<4xh @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49768	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	853	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/timeout-icon.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	660	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 6318 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Server-Timing: dtSInfo;desc="0", dtRpid;desc="-581513145" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	6318	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 36 08 06 00 00 00 9b 67 fa 14 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR<6gpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49769	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	911	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/img/icons/help.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 930 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: YQlxz-YZ_2ySV89KWtrcJg X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:38 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/img/icons/help.png Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	930	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 10 08 06 00 00 00 c9 56 25 04 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 44 49 44 41 54 78 da 24 93 5d 6c 14 55 14 c7 7f 77 e6 ce ec ce 4c db 65 8b a9 dd d2 4a 04 52 bb 08 48 84 87 6d 4a a2 28 42 35 25 18 11 7c 50 6c 82 1a 25 e1 45 5e 40 13 1f 30 31 31 fa d6 87 c6 9a 7d 50 fc a8 4d 34 7e b4 da 68 63 09 29 31 ad 31 d4 46 2a b5 75 29 45 12 2d 42 61 d9 ee c7 ec cc ec 78 77 9d 79 98 dc 33 e7 eb fe fe e7 88 30 0c 77 84 15 2e 08 8d b0 12 62 bc f3 d5 78 79 6c 62 92 a2 57 56 06 0d d3 8c 52 7d 0e 74 6e e3 95 c3 dd 98 d0 28 e1 56 40 25 2e 54 b0 fa e5 89 b1 cc ca 50 7f 7f ff a1 6d 5b 3b d8 d2 91 24 51 1f c3 f7 7d 3c cd 27 Data Ascii: PNGIHDRV%tEXtSoftwareAdobe ImageReadyqe<DIDATx$]lUwLeJRHmJ(B5%\|Pl%E^@011}PM4~hc)11F*u)E-Baxwy30w.bxylbWVR}tn(V@%.TPm[;$Q}<'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49770	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:53 UTC	855	OUT	GET /ITSCThemeStatic/themes/Portal8.5/img/public-home-bg.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtPC=-2$241968937_119h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; dtSa=-; rxvt=1708443768961\|1708441968947; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0
2024-02-20 15:12:53 UTC	635	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:53 GMT Content-Type: image/png Content-Length: 23395 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Wed, 07 Jun 2023 15:28:00 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:53 UTC	15749	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 36 00 00 01 2c 08 06 00 00 00 f9 28 ec d6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 21 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 32 30 32 33 3a 30 35 3a 30 39 20 31 32 3a 33 35 3a 35 38 f5 0a e1 8c 00 00 5a cb 49 44 41 54 78 5e ed dd bb 92 1c c7 bd ef fb cc 6a 18 c7 23 69 30 14 5b 02 82 90 b5 4d 00 c3 07 c0 d0 db 1e c1 08 ad e5 0a 17 f9 04 9f 80 e0 13 10 f4 85 0b dd 25 9d 20 e4 ed 63 09 f3 00 1c 60 cc 63 11 13 80 74 ce 5a 32 08 18 c7 5a e8 ca 93 bf ea 6c 70 30 ec ee ca cc ba 57 7f 3f 11 a5 e9 6e 0a 33 dd d5 75 fd e5 3f 33 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR6,(sRGBgAMAapHYs.#.#x?v!tEXtCreation Time2023:05:09 12:35:58ZIDATx^j#i0[M% c`ctZ2Zlp0W?n3u?3
2024-02-20 15:12:53 UTC	7646	IN	Data Raw: 36 9b 86 9a 41 27 5d eb ab 80 d8 d9 9b 9d 54 4f 0e a4 af 60 d3 9f 7f 01 00 00 00 00 39 14 c2 55 61 47 04 8d 4d 47 58 b5 5b 08 35 e3 aa 5f 63 59 fb 81 c2 0c 05 30 e1 95 c1 28 58 51 25 ea c3 4b 07 cf ab 31 0d b7 04 2c a5 71 4c 2a 35 22 ea ea 5b 35 5e 44 06 62 d6 da 51 8e c5 78 56 b5 af 69 98 87 5d d4 28 b0 ea 7e 9e 5f f1 6c ed 28 1a 14 5a 0a 35 e5 7a db c7 12 05 cc 55 d5 eb 8c 42 4d 29 4a bf be 7b 40 b0 09 00 00 00 00 99 d4 2d 35 ea 46 d9 99 d3 62 51 8e be 82 6b 48 67 42 cd ba c9 48 d2 55 e1 a6 fb bb aa ee c2 2b bd d0 67 52 68 a1 60 ec e1 c5 6b af 15 66 86 6e e7 3b 3f 63 ec cc fa 31 ce 86 a9 7e 71 e7 17 75 45 1e 43 e8 9b 43 55 6e 5a af d5 67 f1 3f 35 81 57 f8 4f ad d1 77 57 d7 f5 7c 8a fc b1 ab b6 fa d4 9a e2 66 d3 6e d7 ce b9 c1 bb 6d 57 c7 96 62 f1 a4 85 Data Ascii: 6A']TO`9UaGMGX[5_cY0(XQ%K1,qL*5"[5^DbQxVi](~_l(Z5zUBM)J{@-5FbQkHgBHU+gRh`kfn;?c1~quECCUnZg?5WOwW\|fnmWb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49777	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:56 UTC	1358	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:56 UTC	1003	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:56 GMT Content-Type: image/png Content-Length: 332 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: 0GjwhxlV9q2qXmHd_wuTFA X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:41 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:56 UTC	332	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 64 10 02 00 00 00 98 de 11 74 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 00 8a 49 44 41 54 28 cf ed cf a1 0d c2 40 14 80 e1 3f 17 0c 13 a0 1a 14 cc 82 a8 42 d6 e3 50 45 b3 02 0b 30 04 0d 1a 14 02 50 1d 80 34 0c 80 68 72 f4 ee de bb 6b 02 13 a0 09 09 ea d3 1f f1 9c 52 7f 35 00 f0 e7 13 16 8f 18 f6 9c a8 51 97 8a 7e 86 2e e2 23 b5 c8 25 96 69 83 64 da a6 09 61 a5 cb 78 c4 1f e4 1e 73 fc 40 e6 7a c3 15 a1 d6 92 6e 17 72 1d d2 8d 7d 23 95 79 ad d9 52 f1 9c fa 4c 46 58 eb 5c 08 df 6e fe 14 6f e3 cc 43 f6 64 a5 cc e5 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 32 30 31 33 2d 31 30 2d 32 30 54 31 39 Data Ascii: PNGIHDRdtbKGDXpHYsHHFk>IDAT(@?BPE0P4hrkR5Q~.#%idaxs@znr}#yRLFX\noCd%tEXtdate:create2013-10-20T19

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49776	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:56 UTC	1358	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:56 UTC	1003	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:56 GMT Content-Type: image/png Content-Length: 387 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: 0GjwhxlV9q2qXmHd_wuTFA X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:41 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:56 UTC	387	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 64 10 02 00 00 00 98 de 11 74 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 00 c1 49 44 41 54 28 cf e5 90 3d 6a c2 00 18 40 1f 1f b8 74 29 82 90 4e ed e0 e0 50 1c 85 74 ed 11 ba 25 f4 0e 3d 43 ce a0 f4 06 66 72 77 d4 45 4c a7 76 29 cd 94 40 45 0b e6 a7 6d 48 93 98 08 9f 83 87 50 e8 f4 96 07 0f 1e d9 ac 5a ec 5f 04 00 fe 0d 02 12 2a 51 1b 97 0f c1 d6 31 be a8 c5 18 9f ef 55 39 d8 1b a4 75 31 6d 42 d2 76 61 36 ae a8 a1 0e 1e f1 f5 5f af e9 13 75 f2 e7 3a 61 7b 91 b7 ea 89 68 a1 4f cc f9 2a b2 55 7d cb 26 ce 1e 76 91 e8 bb 3e 32 15 35 70 f0 8e ca 8c cf f5 cf 4d f5 2b 98 3a e2 4d f4 0a 87 a5 a8 75 ac df 31 e4 95 f0 Data Ascii: PNGIHDRdtbKGDXpHYsHHFk>IDAT(=j@t)NPt%=CfrwELv)@EmHPZ_Q1U9u1mBva6_u:a{hOU}&v>25pM+:Mu1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49775	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:56 UTC	1348	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:56 UTC	993	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:56 GMT Content-Type: image/png Content-Length: 346 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: 0GjwhxlV9q2qXmHd_wuTFA X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:41 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:56 UTC	346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 01 90 10 02 00 00 00 b0 aa 41 cf 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 00 98 49 44 41 54 48 c7 ed cf 21 0e 82 00 18 05 e0 f7 de 66 73 d3 6a 70 63 1a 35 18 34 13 e4 10 6c 26 bd 11 07 30 38 4e 40 32 3b 3c 01 05 37 31 e8 1c 06 1c 41 12 48 f0 14 4e c3 9f be fc e1 1e bd fc 77 2e 00 00 0c c3 30 8c 6f 83 34 2d 8a ba c6 c9 7f 4e 9b ae 38 42 80 a9 b8 e4 0e 33 64 4e d9 6b b6 b8 c4 e5 b5 c9 a4 90 09 5d e9 c8 2b 3c 31 e6 0d 9e 14 32 81 8b 7c 5e 0d 5a 07 8f 7d 75 6e 57 d2 86 11 16 e2 98 01 26 c2 01 6b 0c 45 07 7d 74 fe 22 6d 18 86 f1 43 3e 42 33 2e 4e c0 fc 4c ca 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 Data Ascii: PNGIHDRAbKGDXpHYsHHFk>IDATH!fsjpc54l&08N@2;<71AHNw.0o4-N8B3dNk]+<12\|^Z}unW&kE}t"mC>B3.NL%tEXtdate:create

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49780	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:59 UTC	1706	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=868715137&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 639 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:59 UTC	639	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 31 39 36 36 36 30 31 25 37 43 31 37 30 38 34 34 31 39 37 32 31 39 34 25 37 43 64 6e 25 37 43 36 34 33 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 32 25 37 43 5f 6f 6e 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 31 39 37 32 31 39 32 25 37 43 31 37 30 38 34 34 31 39 37 32 31 39 34 25 37 43 64 6e 25 37 43 36 34 33 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 24 64 4f 3d 6d 64 74 61 78 63 6f 6e 6e 65 63 74 2e 67 6f 76 2c 6d 64 2e 72 70 65 24 50 56 3d 31 24 72 49 64 3d Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708441966601%7C1708441972194%7Cdn%7C643%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%2C2%7C2%7C_onload_%7C_load_%7C-%7C1708441972192%7C1708441972194%7Cdn%7C643%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0$dO=mdtaxconnect.gov,md.rpe$PV=1$rId=
2024-02-20 15:12:59 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:12:59 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49781	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:59 UTC	1708	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=1544159405&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 1718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:59 UTC	1718	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 31 39 36 36 36 30 31 25 37 43 31 37 30 38 34 34 31 39 37 32 31 39 34 25 37 43 64 6e 25 37 43 36 34 33 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 30 38 34 34 31 39 36 36 36 30 31 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 34 33 32 39 25 35 45 70 63 25 37 43 56 43 44 25 37 43 35 34 30 36 25 37 43 56 43 44 53 25 37 43 35 25 37 43 56 43 53 25 37 43 35 36 37 30 25 37 43 56 43 4f 25 37 43 37 31 38 38 25 37 43 56 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708441966601%7C1708441972194%7Cdn%7C643%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1708441966601%7C_vc_%7CV%7C4329%5Epc%7CVCD%7C5406%7CVCDS%7C5%7CVCS%7C5670%7CVCO%7C7188%7CVC
2024-02-20 15:12:59 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:12:59 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49782	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:59 UTC	911	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/images/favicon.ico HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:59 UTC	959	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:59 GMT Content-Type: image/x-icon Content-Length: 1639 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: 0GjwhxlV9q2qXmHd_wuTFA X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:44 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 20 Jun 2022 17:56:10 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/images/favicon.ico Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:59 UTC	1639	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 02 00 00 00 fc 18 ed a3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 06 09 49 44 41 54 78 da 84 56 5b 6c 55 45 14 9d 3d 73 ee 6d b9 b4 94 f7 c3 42 c0 07 68 fb 61 88 31 d8 fa 41 50 89 7e 40 2a 98 28 90 82 8a 06 3e 4c 14 4c 4c 14 24 4d b4 f8 8a 49 91 90 f8 a7 44 40 12 52 13 f5 cf f0 08 a2 80 69 8c 04 44 04 42 51 2c 2a 58 04 4a 5f b4 b7 67 66 5c 7b cf b9 a7 97 42 f1 e4 e6 e4 dc 73 66 f6 63 ad b5 f7 9e c8 7f f7 a0 22 e5 9d 73 ca 18 72 4a 29 af 89 9c 57 7c 11 fe 29 4f 8a bc d7 de c7 fa e8 a9 f8 99 f7 3a d4 30 17 11 d6 79 dc 61 4c 6b 6c 60 23 1a 26 60 9d b4 35 3a e6 57 0e ab ec 8d fb c4 87 55 94 89 fb b5 ff 5f eb b8 Data Ascii: PNGIHDR tEXtSoftwareAdobe ImageReadyqe<IDATxV[lUE=smBha1AP~@(>LLL$MID@RiDBQ,XJ_gf\{Bsfc"srJ)W\|)O:0yaLkl`#&`5:WU_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49783	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:59 UTC	949	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:59 UTC	993	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:59 GMT Content-Type: image/png Content-Length: 346 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: 0GjwhxlV9q2qXmHd_wuTFA X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:44 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:59 UTC	346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 01 90 10 02 00 00 00 b0 aa 41 cf 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 00 98 49 44 41 54 48 c7 ed cf 21 0e 82 00 18 05 e0 f7 de 66 73 d3 6a 70 63 1a 35 18 34 13 e4 10 6c 26 bd 11 07 30 38 4e 40 32 3b 3c 01 05 37 31 e8 1c 06 1c 41 12 48 f0 14 4e c3 9f be fc e1 1e bd fc 77 2e 00 00 0c c3 30 8c 6f 83 34 2d 8a ba c6 c9 7f 4e 9b ae 38 42 80 a9 b8 e4 0e 33 64 4e d9 6b b6 b8 c4 e5 b5 c9 a4 90 09 5d e9 c8 2b 3c 31 e6 0d 9e 14 32 81 8b 7c 5e 0d 5a 07 8f 7d 75 6e 57 d2 86 11 16 e2 98 01 26 c2 01 6b 0c 45 07 7d 74 fe 22 6d 18 86 f1 43 3e 42 33 2e 4e c0 fc 4c ca 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 Data Ascii: PNGIHDRAbKGDXpHYsHHFk>IDATH!fsjpc54l&08N@2;<71AHNw.0o4-N8B3dNk]+<12\|^Z}unW&kE}t"mC>B3.NL%tEXtdate:create

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49784	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:59 UTC	959	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:59 UTC	1003	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:59 GMT Content-Type: image/png Content-Length: 387 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: 0GjwhxlV9q2qXmHd_wuTFA X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:44 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:59 UTC	387	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 64 10 02 00 00 00 98 de 11 74 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 00 c1 49 44 41 54 28 cf e5 90 3d 6a c2 00 18 40 1f 1f b8 74 29 82 90 4e ed e0 e0 50 1c 85 74 ed 11 ba 25 f4 0e 3d 43 ce a0 f4 06 66 72 77 d4 45 4c a7 76 29 cd 94 40 45 0b e6 a7 6d 48 93 98 08 9f 83 87 50 e8 f4 96 07 0f 1e d9 ac 5a ec 5f 04 00 fe 0d 02 12 2a 51 1b 97 0f c1 d6 31 be a8 c5 18 9f ef 55 39 d8 1b a4 75 31 6d 42 d2 76 61 36 ae a8 a1 0e 1e f1 f5 5f af e9 13 75 f2 e7 3a 61 7b 91 b7 ea 89 68 a1 4f cc f9 2a b2 55 7d cb 26 ce 1e 76 91 e8 bb 3e 32 15 35 70 f0 8e ca 8c cf f5 cf 4d f5 2b 98 3a e2 4d f4 0a 87 a5 a8 75 ac df 31 e4 95 f0 Data Ascii: PNGIHDRdtbKGDXpHYsHHFk>IDAT(=j@t)NPt%=CfrwELv)@EmHPZ_Q1U9u1mBva6_u:a{hOU}&v>25pM+:Mu1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49785	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:59 UTC	959	OUT	GET /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:59 UTC	1003	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:59 GMT Content-Type: image/png Content-Length: 332 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Accept-Ranges: bytes X-Request-Digest: 0GjwhxlV9q2qXmHd_wuTFA X-DataSource-Digest: a9u35S-GsJR__LxzULIWAA Expires: Wed, 19 Feb 2025 21:01:44 GMT Cache-Control: public, max-age=31556925 Last-Modified: Mon, 18 Sep 2023 06:44:00 GMT Content-Location: /rptp/contenthandler/!ut/p/digest!a9u35S-GsJR__LxzULIWAA/war/ITSCThemeStatic/themes/Portal8.5/css/rsi/cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:12:59 UTC	332	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 64 10 02 00 00 00 98 de 11 74 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 00 8a 49 44 41 54 28 cf ed cf a1 0d c2 40 14 80 e1 3f 17 0c 13 a0 1a 14 cc 82 a8 42 d6 e3 50 45 b3 02 0b 30 04 0d 1a 14 02 50 1d 80 34 0c 80 68 72 f4 ee de bb 6b 02 13 a0 09 09 ea d3 1f f1 9c 52 7f 35 00 f0 e7 13 16 8f 18 f6 9c a8 51 97 8a 7e 86 2e e2 23 b5 c8 25 96 69 83 64 da a6 09 61 a5 cb 78 c4 1f e4 1e 73 fc 40 e6 7a c3 15 a1 d6 92 6e 17 72 1d d2 8d 7d 23 95 79 ad d9 52 f1 9c fa 4c 46 58 eb 5c 08 df 6e fe 14 6f e3 cc 43 f6 64 a5 cc e5 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 32 30 31 33 2d 31 30 2d 32 30 54 31 39 Data Ascii: PNGIHDRdtbKGDXpHYsHHFk>IDAT(@?BPE0P4hrkR5Q~.#%idaxs@znr}#yRLFX\noCd%tEXtdate:create2013-10-20T19

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49786	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:59 UTC	1275	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=868715137&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:59 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:59 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:12:59 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49787	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:12:59 UTC	1276	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=1544159405&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:12:59 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:12:59 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:12:59 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49789	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:01 UTC	1708	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=3783890996&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 6877 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:01 UTC	6877	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 72 70 74 70 25 32 46 70 6f 72 74 61 6c 25 32 46 68 6f 6d 65 25 32 46 21 75 74 25 32 46 70 25 32 46 7a 31 25 32 46 30 34 5f 53 6a 39 43 50 79 6b 73 73 79 30 78 50 4c 4d 6e 4d 7a 30 76 4d 41 66 49 6a 6f 38 7a 69 6a 53 30 4d 6e 4e 30 39 44 49 79 38 33 45 4f 44 6a 51 77 63 5f 52 31 44 54 63 49 63 76 59 41 73 45 5f 31 77 51 67 71 69 67 4e 49 47 4f 49 43 6a 41 56 42 5f 46 43 45 6c 42 62 6b 52 42 75 6d 4f 69 6f 6f 41 37 59 46 63 4c 51 21 21 25 32 46 64 7a 25 32 46 64 35 25 32 46 4c 32 64 42 49 53 45 76 5a 30 46 42 49 53 39 6e 51 53 45 68 25 32 46 24 74 76 74 3d 31 37 30 38 34 34 31 39 36 36 36 30 31 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 Data Ascii: $tvn=%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F$tvt=1708441966601$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$
2024-02-20 15:13:01 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:01 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:01 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49790	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:01 UTC	1389	OUT	GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-TOKEN--rptp-portal-home=5D99C1EC36A7F67B7D16007D851B22C3467ACFC1309A5B177A2F4D7430310BF902B4671ACEC2EC7F68E1D59D8FCAB135C149; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:01 UTC	1289	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: X-TOKEN--rptp-portal-home=77CE6717484932FC6306B16893FFCF02D2C18625A8DA16C7495C9F126B4752582F1E0FED578B0513BE65E70FE8075519B895; Path=/rptp/portal/home; HttpOnly; Secure; SameSite=Strict X-TOKEN: 77CE6717484932FC6306B16893FFCF02D2C18625A8DA16C7495C9F126B4752582F1E0FED578B0513BE65E70FE8075519B895 X-Frame-Options: SAMEORIGIN Content-Location: /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Pragma: no-cache Vary: Cookie,User-Agent Server-Timing: dtSInfo;desc="0", dtRpid;desc="-817357422" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en
2024-02-20 15:13:01 UTC	15095	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 3c 21 2d 2d 20 72 65 6c 3d 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 20 69 6e 64 69 63 61 74 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 Data Ascii: 8000<!DOCTYPE html><html lang="en" ><head><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=Edge">... rel=dynamic-content indicates an element
2024-02-20 15:13:01 UTC	16384	IN	Data Raw: 65 6e 64 28 29 3b 0d 0a 09 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 73 69 74 65 57 69 64 65 48 65 6c 70 4c 69 6e 6b 22 20 74 69 74 6c 65 3d 22 47 6c 6f 62 61 6c 20 48 65 6c 70 22 3e 0d 0a 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 63 65 73 73 69 62 6c 65 54 65 78 74 22 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 3c 2f 73 70 61 6e 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 0d 0a 3c 2f 61 3e 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 72 65 6e 64 65 72 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 69 6e 20 74 6f 70 20 6c 69 6e 6b 73 20 2d 2d 3e 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 45 6e 64 20 Data Ascii: end();}</script>...<a href="#void" id="siteWideHelpLink" title="Global Help"><span class="accessibleText">Global Help</span>Global Help</a>-->... This next line of code is to render Chat Now link in top links -->... Chat Now link End
2024-02-20 15:13:02 UTC	16384	IN	Data Raw: 66 6f 22 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 6f 70 4d 61 72 67 69 6e 44 62 6c 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 22 3e 0d 0a 09 09 0d 0a 09 09 3c 2f 64 69 76 3e 20 20 20 20 0d 0a 09 3c 2f 64 69 76 3e 20 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 21 2d 2d 20 45 4e 44 20 66 6f 6f 74 65 72 20 2d 2d 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 44 69 76 20 45 6e 64 20 2d 2d 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 73 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 64 65 66 69 6e 65 20 61 6e 64 20 69 6e 69 74 69 61 6c 69 7a 65 20 61 20 44 69 76 20 74 Data Ascii: fo"><div class="row topMarginDbl"><div class="col-sm-12"></div> </div> </div>... END footer --></div></c:if></c:if>... Chat Now Div End -->... This next lines of code is to define and initialize a Div t
2024-02-20 15:13:02 UTC	16384	IN	Data Raw: 74 70 68 6f 6e 65 40 72 65 73 3a 2f 49 54 53 43 54 68 65 6d 65 44 79 6e 61 6d 69 63 2f 74 68 65 6d 65 73 2f 68 74 6d 6c 2f 64 79 6e 61 6d 69 63 53 70 6f 74 73 2f 73 65 61 72 63 68 5f 6d 6f 62 69 6c 65 2e 6a 73 70 22 3e 3c 2f 61 3e 2d 2d 3e 0d 0a 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 2d 2d 3e 0d 0a 09 09 09 09 20 20 3c 2f 6e 61 76 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 68 65 61 64 65 72 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 2d 62 6f 64 79 22 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 61 74 61 53 65 63 20 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 20 3c 21 2d 2d 20 63 Data Ascii: tphone@res:/ITSCThemeDynamic/themes/html/dynamicSpots/search_mobile.jsp"></a>--></div>... /.navbar-collapse --> </nav></div></div></div></header><div class="layout-body"><div class="dataSec container-fluid"> ... c
2024-02-20 15:13:02 UTC	8525	IN	Data Raw: 66 69 63 61 74 69 6f 6e 20 4e 75 6d 62 65 72 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 63 6f 6c 2d 6c 67 2d 34 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 20 70 61 6e 65 6c 2d 64 65 66 61 75 6c 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 54 61 78 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 73 22 20 73 72 63 3d 22 2f 49 54 53 43 54 68 65 6d 65 53 74 61 74 69 63 2f 74 68 65 6d 65 73 2f 50 6f 72 74 61 6c 38 2e 35 2f 69 6d 67 2f 54 61 78 2d 50 72 6f 66 65 73 73 69 Data Ascii: fication Number</a></div></div></div></div></div></div><div class="row"><div class="col-12 col-lg-4"><div class="panel panel-default"><div class="panel-heading"><img alt="Tax Professionals" src="/ITSCThemeStatic/themes/Portal8.5/img/Tax-Professi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49793	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:01 UTC	1276	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=3783890996&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.0.1708441971.0.0.0; rxvt=1708443772188\|1708441968947; dtPC=-2$241968937_119h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:01 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:01 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:01 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49798	142.250.72.110	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:01 UTC	858	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:02 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:13:02 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:02 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-02-20 15:13:02 UTC	1252	IN	Data Raw: 66 62 2c 67 62 2c 68 62 2c 69 62 2c 77 2c 6a 62 2c 6d 62 2c 6f 62 2c 73 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b Data Ascii: fb,gb,hb,ib,w,jb,mb,ob,sb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;
2024-02-20 15:13:02 UTC	1252	IN	Data Raw: 28 30 29 2b 66 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b Data Ascii: (0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};
2024-02-20 15:13:02 UTC	1252	IN	Data Raw: 53 63 72 69 70 74 28 61 29 3a 61 3b 62 3d 6e 65 77 20 53 61 3b 62 2e 6e 67 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 61 29 72 65 74 75 72 6e 20 61 2e 6e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 41 22 29 3b 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 57 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 59 61 2e 61 70 70 6c 79 28 31 2c Data Ascii: Script(a):a;b=new Sa;b.ng=a;return b};_.Ua=function(a){if(a instanceof Sa)return a.ng;throw Error("A");};Va=function(){};Xa=function(a){return new _.Wa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.$a=function(a){var b=_.Ya.apply(1,
2024-02-20 15:13:02 UTC	1252	IN	Data Raw: 28 22 61 22 29 3b 7d 3b 69 62 3d 68 62 28 74 68 69 73 29 3b 0a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 69 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 67 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ("a");};ib=hb(this);w=function(a,b){if(b)a:{var c=ib;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&gb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){
2024-02-20 15:13:02 UTC	1252	IN	Data Raw: 61 29 29 3b 7d 3b 5f 2e 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 78 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6d 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: a));};_.lb=function(a){if(!(a instanceof Array)){a=_.x(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};mb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.nb=function(){functi
2024-02-20 15:13:02 UTC	1252	IN	Data Raw: 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b 7d 7d 29 3b 77 28 22 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f Data Ascii: )b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{}});w("Reflect.construct",function(){return _.nb});w("Reflect.setPrototypeOf",function(a){return a?a:sb?function(b,c){try{return sb(b,c),!0}catch(d){return!1}}:null});w("Promise",functio
2024-02-20 15:13:02 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 62 61 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 Data Ascii: function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}"function"==typeof h?this.ba(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`
2024-02-20 15:13:02 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 28 71 2c 70 29 7b 6d 3d 71 3b 6e 3d 70 7d 29 3b 74 68 69 73 2e 4c 63 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d Data Ascii: nction(q,p){m=q;n=p});this.Lc(l(g,m),l(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Lc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null=
2024-02-20 15:13:02 UTC	1252	IN	Data Raw: 3d 3d 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 75 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 67 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b Data Ascii: ===m}function d(l){if(!ub(l,f)){var m=new b;gb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49797	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:02 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1708441950036&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-02-20 15:13:02 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-02-20 15:13:02 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-02-20 15:13:02 UTC	476	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D17C840C233C45CB94163A2A34E2028B Ref B: BY3EDGE0218 Ref C: 2024-02-20T15:13:02Z Date: Tue, 20 Feb 2024 15:13:02 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1708441982.17108e7c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49801	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:06 UTC	1722	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23mainContent&bp=3&app=717c68634dfb8989&crc=2513533501&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 1735 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441983.0.0.0; rxvt=1708443783366\|1708441968947; dtPC=-2$241980754_631h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:06 UTC	1735	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 31 39 38 30 30 32 34 25 37 43 31 37 30 38 34 34 31 39 38 33 33 37 39 25 37 43 64 6e 25 37 43 35 31 31 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 30 38 34 34 31 39 38 30 30 32 34 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 31 38 33 37 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 35 39 38 25 37 43 56 43 44 53 25 37 43 38 25 37 43 56 43 53 25 37 43 33 34 33 35 25 37 43 56 43 4f 25 37 43 34 39 32 35 25 37 43 56 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708441980024%7C1708441983379%7Cdn%7C511%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1708441980024%7C_vc_%7CV%7C1837%5Epc%7CVCD%7C1598%7CVCDS%7C8%7CVCS%7C3435%7CVCO%7C4925%7CVC
2024-02-20 15:13:06 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:06 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:06 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49802	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:07 UTC	1290	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23mainContent&bp=3&app=717c68634dfb8989&crc=2513533501&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441983.0.0.0; rxvt=1708443783366\|1708441968947; dtPC=-2$241980754_631h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:07 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:07 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:07 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49804	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:07 UTC	1429	OUT	GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-TOKEN--rptp-portal-home=77CE6717484932FC6306B16893FFCF02D2C18625A8DA16C7495C9F126B4752582F1E0FED578B0513BE65E70FE8075519B895; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441983.0.0.0; rxvt=1708443783366\|1708441968947; dtPC=-2$241980754_631h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:07 UTC	1289	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: X-TOKEN--rptp-portal-home=1DD408A0D9976DACCC66B6E1BCAE167AC078F97C511089DCFA39D1D47590FB47F6CF643E60C94D6763A70F855B4CCE779C8D; Path=/rptp/portal/home; HttpOnly; Secure; SameSite=Strict X-TOKEN: 1DD408A0D9976DACCC66B6E1BCAE167AC078F97C511089DCFA39D1D47590FB47F6CF643E60C94D6763A70F855B4CCE779C8D X-Frame-Options: SAMEORIGIN Content-Location: /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Pragma: no-cache Vary: Cookie,User-Agent Server-Timing: dtSInfo;desc="0", dtRpid;desc="-849224700" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en
2024-02-20 15:13:07 UTC	15095	IN	Data Raw: 66 66 66 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 3c 21 2d 2d 20 72 65 6c 3d 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 20 69 6e 64 69 63 61 74 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 Data Ascii: fff8<!DOCTYPE html><html lang="en" ><head><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=Edge">... rel=dynamic-content indicates an element
2024-02-20 15:13:07 UTC	16384	IN	Data Raw: 6e 64 28 29 3b 0d 0a 09 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 73 69 74 65 57 69 64 65 48 65 6c 70 4c 69 6e 6b 22 20 74 69 74 6c 65 3d 22 47 6c 6f 62 61 6c 20 48 65 6c 70 22 3e 0d 0a 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 63 65 73 73 69 62 6c 65 54 65 78 74 22 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 3c 2f 73 70 61 6e 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 0d 0a 3c 2f 61 3e 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 72 65 6e 64 65 72 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 69 6e 20 74 6f 70 20 6c 69 6e 6b 73 20 2d 2d 3e 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 45 6e 64 20 2d Data Ascii: nd();}</script>...<a href="#void" id="siteWideHelpLink" title="Global Help"><span class="accessibleText">Global Help</span>Global Help</a>-->... This next line of code is to render Chat Now link in top links -->... Chat Now link End -
2024-02-20 15:13:07 UTC	16384	IN	Data Raw: 6f 22 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 6f 70 4d 61 72 67 69 6e 44 62 6c 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 22 3e 0d 0a 09 09 0d 0a 09 09 3c 2f 64 69 76 3e 20 20 20 20 0d 0a 09 3c 2f 64 69 76 3e 20 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 21 2d 2d 20 45 4e 44 20 66 6f 6f 74 65 72 20 2d 2d 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 44 69 76 20 45 6e 64 20 2d 2d 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 73 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 64 65 66 69 6e 65 20 61 6e 64 20 69 6e 69 74 69 61 6c 69 7a 65 20 61 20 44 69 76 20 74 6f Data Ascii: o"><div class="row topMarginDbl"><div class="col-sm-12"></div> </div> </div>... END footer --></div></c:if></c:if>... Chat Now Div End -->... This next lines of code is to define and initialize a Div to
2024-02-20 15:13:07 UTC	16384	IN	Data Raw: 73 3a 2f 49 54 53 43 54 68 65 6d 65 44 79 6e 61 6d 69 63 2f 74 68 65 6d 65 73 2f 68 74 6d 6c 2f 64 79 6e 61 6d 69 63 53 70 6f 74 73 2f 73 65 61 72 63 68 5f 6d 6f 62 69 6c 65 2e 6a 73 70 22 3e 3c 2f 61 3e 2d 2d 3e 0d 0a 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 2d 2d 3e 0d 0a 09 09 09 09 20 20 3c 2f 6e 61 76 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 68 65 61 64 65 72 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 2d 62 6f 64 79 22 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 61 74 61 53 65 63 20 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 20 3c 21 2d 2d 20 63 6f 6e 74 61 69 6e 65 72 20 Data Ascii: s:/ITSCThemeDynamic/themes/html/dynamicSpots/search_mobile.jsp"></a>--></div>... /.navbar-collapse --> </nav></div></div></div></header><div class="layout-body"><div class="dataSec container-fluid"> ... container
2024-02-20 15:13:07 UTC	8524	IN	Data Raw: 4e 75 6d 62 65 72 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 63 6f 6c 2d 6c 67 2d 34 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 20 70 61 6e 65 6c 2d 64 65 66 61 75 6c 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 54 61 78 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 73 22 20 73 72 63 3d 22 2f 49 54 53 43 54 68 65 6d 65 53 74 61 74 69 63 2f 74 68 65 6d 65 73 2f 50 6f 72 74 61 6c 38 2e 35 2f 69 6d 67 2f 54 61 78 2d 50 72 6f 66 65 73 73 69 6f 6e 61 6c 73 2e 70 6e 67 Data Ascii: Number</a></div></div></div></div></div></div><div class="row"><div class="col-12 col-lg-4"><div class="panel panel-default"><div class="panel-heading"><img alt="Tax Professionals" src="/ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49805	142.250.72.110	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:07 UTC	858	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:08 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:13:07 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:08 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-02-20 15:13:08 UTC	1252	IN	Data Raw: 66 62 2c 67 62 2c 68 62 2c 69 62 2c 77 2c 6a 62 2c 6d 62 2c 6f 62 2c 73 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b Data Ascii: fb,gb,hb,ib,w,jb,mb,ob,sb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;
2024-02-20 15:13:08 UTC	1252	IN	Data Raw: 28 30 29 2b 66 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b Data Ascii: (0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};
2024-02-20 15:13:08 UTC	1252	IN	Data Raw: 53 63 72 69 70 74 28 61 29 3a 61 3b 62 3d 6e 65 77 20 53 61 3b 62 2e 6e 67 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 61 29 72 65 74 75 72 6e 20 61 2e 6e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 41 22 29 3b 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 57 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 59 61 2e 61 70 70 6c 79 28 31 2c Data Ascii: Script(a):a;b=new Sa;b.ng=a;return b};_.Ua=function(a){if(a instanceof Sa)return a.ng;throw Error("A");};Va=function(){};Xa=function(a){return new _.Wa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.$a=function(a){var b=_.Ya.apply(1,
2024-02-20 15:13:08 UTC	1252	IN	Data Raw: 28 22 61 22 29 3b 7d 3b 69 62 3d 68 62 28 74 68 69 73 29 3b 0a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 69 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 67 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ("a");};ib=hb(this);w=function(a,b){if(b)a:{var c=ib;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&gb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){
2024-02-20 15:13:08 UTC	1252	IN	Data Raw: 61 29 29 3b 7d 3b 5f 2e 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 78 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6d 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: a));};_.lb=function(a){if(!(a instanceof Array)){a=_.x(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};mb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.nb=function(){functi
2024-02-20 15:13:08 UTC	1252	IN	Data Raw: 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b 7d 7d 29 3b 77 28 22 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f Data Ascii: )b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{}});w("Reflect.construct",function(){return _.nb});w("Reflect.setPrototypeOf",function(a){return a?a:sb?function(b,c){try{return sb(b,c),!0}catch(d){return!1}}:null});w("Promise",functio
2024-02-20 15:13:08 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 62 61 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 Data Ascii: function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}"function"==typeof h?this.ba(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`
2024-02-20 15:13:08 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 28 71 2c 70 29 7b 6d 3d 71 3b 6e 3d 70 7d 29 3b 74 68 69 73 2e 4c 63 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d Data Ascii: nction(q,p){m=q;n=p});this.Lc(l(g,m),l(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Lc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null=
2024-02-20 15:13:08 UTC	1252	IN	Data Raw: 3d 3d 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 75 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 67 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b Data Ascii: ===m}function d(l){if(!ub(l,f)){var m=new b;gb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49803	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:10 UTC	1788	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0%2F&bp=3&app=717c68634dfb8989&crc=2449053465&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 1797 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:10 UTC	1797	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 31 39 38 35 39 39 38 25 37 43 31 37 30 38 34 34 31 39 38 37 39 39 34 25 37 43 64 6e 25 37 43 35 31 31 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 30 38 34 34 31 39 38 35 39 39 38 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 31 37 37 36 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 35 37 35 25 37 43 56 43 44 53 25 37 43 31 25 37 43 56 43 53 25 37 43 32 30 37 30 25 37 43 56 43 4f 25 37 43 33 35 34 33 25 37 43 56 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708441985998%7C1708441987994%7Cdn%7C511%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1708441985998%7C_vc_%7CV%7C1776%5Epc%7CVCD%7C1575%7CVCDS%7C1%7CVCS%7C2070%7CVCO%7C3543%7CVC
2024-02-20 15:13:10 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:10 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:10 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49812	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:11 UTC	1316	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0%2F&bp=3&app=717c68634dfb8989&crc=2449053465&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:11 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:11 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:11 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49815	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:11 UTC	692	OUT	GET /Individuals/iFile_ChooseForm/default.asp HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:11 UTC	265	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html Server: Microsoft-IIS/10.0 Set-Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; path=/ X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:13 GMT Content-Length: 20961 Connection: close
2024-02-20 15:13:11 UTC	5594	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 3c 21 2d 2d 2f 2f 0d 0a 2f 2a 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 09 4f 70 65 6e 48 65 6c 70 57 69 6e 2e 6a 73 20 2d 20 47 6c 6f 62 61 6c 20 69 6e 63 6c 75 64 65 20 75 73 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 0d Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><script language="javascript">...///* *********************************************************OpenHelpWin.js - Global include used to open a
2024-02-20 15:13:11 UTC	1460	IN	Data Raw: 70 61 63 65 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 2f 3e 3c 2f 61 3e 3c 2f 74 64 3e 0d 0a 09 09 09 3c 74 64 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 72 79 6c 61 6e 64 74 61 78 65 73 2e 67 6f 76 2f 64 69 76 69 73 69 6f 6e 73 2f 63 6f 6d 70 2e 70 68 70 22 20 6f 6e 6d 6f 75 73 65 6f 75 74 3d 22 6e 61 76 53 77 69 74 63 68 28 27 6e 61 76 33 27 2c 27 6f 75 74 27 29 22 20 20 6f 6e 6d 6f 75 73 65 6f 76 65 72 3d 22 6e 61 76 53 77 69 74 63 68 28 27 6e 61 76 33 27 2c 27 69 6e 27 29 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 49 6e 64 69 76 69 64 75 61 6c 73 2f 67 6c 6d 65 64 69 61 2f 6e 65 77 48 65 61 64 65 72 2f 6e 61 76 33 2e 70 6e 67 22 20 6e 61 6d 65 3d 22 6e 61 76 33 22 20 62 6f 72 64 65 72 3d 22 30 22 20 68 73 70 61 63 65 3d Data Ascii: pace="0" vspace="0" /></a></td><td><a href="https://www.marylandtaxes.gov/divisions/comp.php" onmouseout="navSwitch('nav3','out')" onmouseover="navSwitch('nav3','in')"><img src="/Individuals/glmedia/newHeader/nav3.png" name="nav3" border="0" hspace=
2024-02-20 15:13:11 UTC	7300	IN	Data Raw: 54 61 62 6c 65 31 22 3e 0d 0a 09 3c 21 2d 2d 20 42 45 47 49 4e 20 73 70 65 63 69 61 6c 20 72 6f 77 20 61 64 64 65 64 20 66 6f 72 20 74 68 65 20 49 6e 64 69 76 69 64 75 61 6c 73 20 73 69 74 65 20 2d 2d 3e 0d 0a 09 3c 74 72 3e 3c 74 64 20 63 6f 6c 73 70 61 6e 3d 27 35 27 20 73 74 79 6c 65 3d 27 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 35 46 35 46 35 3b 68 65 69 67 68 74 3a 35 70 78 3b 27 3e 3c 69 6d 67 20 73 72 63 3d 27 2f 49 6e 64 69 76 69 64 75 61 6c 73 2f 67 6c 6d 65 64 69 61 2f 63 6c 65 61 72 70 69 78 65 6c 2e 67 69 66 27 20 61 6c 74 3d 27 27 20 2f 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 0d 0a 09 3c 21 2d 2d 20 45 4e 44 20 73 70 65 63 69 61 6c 20 72 6f 77 20 61 64 64 65 64 20 66 6f 72 20 74 68 65 20 49 6e 64 69 76 69 64 75 61 6c 73 20 73 69 74 Data Ascii: Table1">... BEGIN special row added for the Individuals site --><tr><td colspan='5' style='background-color:#F5F5F5;height:5px;'><img src='/Individuals/glmedia/clearpixel.gif' alt='' /></td></tr>... END special row added for the Individuals sit
2024-02-20 15:13:11 UTC	6607	IN	Data Raw: 73 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 62 3e 44 69 73 63 6c 61 69 6d 65 72 73 3c 2f 62 3e 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 48 65 6c 70 2f 69 69 68 5f 67 65 6e 69 6e 66 6f 2e 61 73 70 23 52 65 70 72 69 6e 74 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 62 3e 41 64 64 69 74 69 6f 6e 61 6c 20 43 6f 70 69 65 73 3c 2f 62 3e 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s" target="_blank"><b>Disclaimers</b></a> </li> <li> <a href="Help/iih_geninfo.asp#Reprint" target="_blank"><b>Additional Copies</b></a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49814	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:11 UTC	687	OUT	GET /Individuals/glStyles/defaultcss.css HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:11 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 30 Jan 2014 14:40:40 GMT Accept-Ranges: bytes ETag: "a865943fc91dcf1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:13 GMT Content-Length: 1663 Connection: close
2024-02-20 15:13:11 UTC	1663	IN	Data Raw: 62 6f 64 79 20 7b 0d 0a 09 09 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 74 64 20 09 09 20 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 2e 35 70 74 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 3b 0d 0a 09 09 09 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 09 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 09 09 09 7d 09 0d 0a 0d 0a 2f 2a 0d 0a 74 64 20 09 09 20 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 2e 35 70 74 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 3b 0d 0a 09 09 09 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 09 09 09 74 65 78 74 2d Data Ascii: body {margin: 0px;background-color: #ffffff;}td {font-size: 9.5pt;font-family: arial;color: black;text-align: left;}/*td {font-size: 9.5pt;font-family: arial;color: black;text-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49816	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:11 UTC	683	OUT	GET /Individuals/glStyles/appcss.css HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Fri, 17 Jan 2020 16:15:37 GMT Accept-Ranges: bytes ETag: "7494a15a51cdd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:13 GMT Content-Length: 7697 Connection: close
2024-02-20 15:13:12 UTC	5592	IN	Data Raw: 2f 2a 20 41 2e 73 75 62 69 74 65 6d 20 63 6c 61 73 73 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 76 69 73 69 74 65 64 20 6c 69 6e 6b 20 61 73 20 2a 2f 20 2f 2a 20 64 69 66 66 65 72 65 6e 74 20 0d 0a 63 6f 6c 6f 72 2e 20 2a 2f 20 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 20 0d 0a 41 2e 73 75 62 69 74 65 6d 3a 76 69 73 69 74 65 64 2c 20 41 2e 73 75 62 69 74 65 6d 3a 6c 69 6e 6b 2c 20 41 2e 73 75 62 69 74 65 6d 3a 68 6f 76 65 72 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 3a 20 41 72 69 61 6c 3b 20 0d 0a 66 6f 6e 74 2d 77 65 69 67 68 74 20 3a 20 62 6f 6c 64 Data Ascii: /* A.subitem classes can be used to display the visited link as / / different color. / / ------------------------------------------------------------ */ A.subitem:visited, A.subitem:link, A.subitem:hover { font-family : Arial; font-weight : bold
2024-02-20 15:13:12 UTC	2105	IN	Data Raw: 2a 20 74 68 65 20 42 75 74 74 6f 6e 73 20 63 6c 61 73 73 20 64 65 66 69 6e 65 73 20 74 68 65 20 0d 0a 6e 61 76 69 67 61 74 69 6f 6e 20 62 75 74 74 6f 6e 73 20 2a 2f 20 2f 2a 20 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 20 0d 0a 69 6e 70 75 74 2e 69 46 69 6c 65 42 75 74 74 6f 6e 73 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 3b 20 63 6f 6c 6f 72 3a 20 23 46 35 46 35 46 35 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 0d 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 32 36 34 44 3b 20 7d 20 2f 2a 20 Data Ascii: * the Buttons class defines the navigation buttons / / ----------------------------------------------------------- / input.iFileButtons { font-family: arial; color: #F5F5F5; font-weight: bold; text-align: center; background-color:#00264D; } /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49817	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:11 UTC	687	OUT	GET /Individuals/glstyles/stylesheet.css HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Fri, 17 Jan 2020 15:54:47 GMT Accept-Ranges: bytes ETag: "1c1fd0714ecdd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:13 GMT Content-Length: 2647 Connection: close
2024-02-20 15:13:12 UTC	2647	IN	Data Raw: 2f 2a 20 47 4c 4f 42 41 4c 20 53 54 59 4c 45 53 20 2a 2f 0d 0a 0d 0a 2f 2a 20 43 4f 4c 4f 52 20 50 41 4c 4c 45 54 54 45 3a 20 0d 0a 09 44 61 72 6b 20 52 65 64 3a 23 39 39 30 30 30 30 0d 0a 09 44 61 72 6b 20 42 6c 75 65 3a 20 23 30 30 32 36 34 44 0d 0a 09 4c 69 67 68 74 20 42 6c 75 65 3a 20 23 46 35 46 35 46 35 0d 0a 09 53 69 6c 76 65 72 3a 20 23 46 35 46 35 46 35 20 20 0d 0a 2a 2f 0d 0a 09 0d 0a 62 6f 64 79 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 36 32 2e 35 25 3b 0d 0a 20 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 7d 0d 0a 09 0d 0a 70 2c 20 74 64 2c 20 6c 69 2c 20 64 64 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 64 74 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 Data Ascii: /* GLOBAL STYLES // COLOR PALLETTE: Dark Red:#990000Dark Blue: #00264DLight Blue: #F5F5F5Silver: #F5F5F5 */body {margin: 0px;font-size: 62.5%; text-align: center;}p, td, li, dd, blockquote, dt{font-family: ver

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49818	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:11 UTC	690	OUT	GET /Individuals/glstyles/appstylesheet.css HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	266	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Fri, 31 Jan 2020 20:04:52 GMT Accept-Ranges: bytes ETag: "d533ab371d8d51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:13 GMT Content-Length: 9307 Connection: close
2024-02-20 15:13:12 UTC	2673	IN	Data Raw: 2f 2a 20 47 4c 4f 42 41 4c 20 41 50 50 4c 49 43 41 54 49 4f 4e 20 53 54 59 4c 45 53 20 2a 2f 0d 0a 0d 0a 2f 2a 20 43 4f 4c 4f 52 20 50 41 4c 4c 45 54 54 45 3a 20 0d 0a 09 44 61 72 6b 20 52 65 64 3a 23 39 39 30 30 30 30 0d 0a 09 44 61 72 6b 20 42 6c 75 65 3a 20 23 30 30 32 36 34 44 0d 0a 09 53 69 6c 76 65 72 3a 20 23 46 35 46 35 46 35 0d 0a 2a 2f 0d 0a 0d 0a 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0d 0a 2f 2a 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 55 74 69 6c 69 74 79 20 53 65 63 74 69 6f 6e 09 09 09 09 09 09 09 09 09 09 20 2a 2f 0d 0a 2f 2a 20 4f 70 74 69 6f 6e 61 6c 20 2d 20 67 6f 65 Data Ascii: /* GLOBAL APPLICATION STYLES // COLOR PALLETTE: Dark Red:#990000Dark Blue: #00264DSilver: #F5F5F5// ================================================================= // Application Utility Section // Optional - goe
2024-02-20 15:13:12 UTC	6634	IN	Data Raw: 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 09 09 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 09 33 70 78 20 37 70 78 3b 20 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 09 09 09 31 34 70 78 3b 20 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 09 09 09 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 09 09 09 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 61 70 70 4d 65 6e 75 20 61 3a 6c 69 6e 6b 20 7b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 09 09 09 62 6f 6c 64 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 09 09 09 09 2e 38 65 6d 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 09 09 09 09 09 23 30 30 32 36 34 44 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 09 09 Data Ascii: background-repeat:no-repeat;background-position:3px 7px; padding-left:14px; margin-right:5px; margin-bottom:2px;}#appMenu a:link {font-weight: bold;font-size: .8em;color: #00264D;text-decoration:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49819	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:11 UTC	669	OUT	GET /Individuals/glinclude/script.js HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	280	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Sun, 19 Jan 2020 00:07:29 GMT Accept-Ranges: bytes ETag: "312467705cced51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:13 GMT Content-Length: 464 Connection: close
2024-02-20 15:13:12 UTC	464	IN	Data Raw: 2f 2f 3c 21 2d 2d 0d 0a 2f 2f 62 65 67 69 6e 20 72 6f 6c 6c 6f 76 65 72 20 73 63 72 69 70 74 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 76 53 77 69 74 63 68 28 78 2c 20 79 29 20 7b 0d 0a 09 0d 0a 09 69 66 20 28 79 20 3d 3d 20 27 69 6e 27 29 20 7b 0d 0a 09 09 0d 0a 09 09 2f 2f 74 68 69 73 5b 30 5d 20 3d 20 6e 65 77 20 49 6d 61 67 65 28 29 3b 0d 0a 09 09 0d 0a 09 09 2f 2f 74 68 69 73 5b 30 5d 2e 73 72 63 20 3d 20 64 6f 63 75 6d 65 6e 74 5b 78 5d 2e 73 72 63 3b 0d 0a 09 09 0d 0a 09 09 2f 2f 74 68 69 73 5b 31 5d 20 3d 20 6e 65 77 20 49 6d 61 67 65 28 29 3b 0d 0a 0d 0a 09 09 64 6f 63 75 6d 65 6e 74 5b 78 5d 2e 73 72 63 20 3d 20 22 2f 69 6e 64 69 76 69 64 75 61 6c 73 2f 67 6c 6d 65 64 69 61 2f 6e 65 77 48 65 61 64 65 72 2f 22 20 2b 20 78 20 2b 20 22 5f 6f 76 Data Ascii: //...//begin rollover scriptfunction navSwitch(x, y) {if (y == 'in') {//this[0] = new Image();//this[0].src = document[x].src;//this[1] = new Image();document[x].src = "/individuals/glmedia/newHeader/" + x + "_ov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49820	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:11 UTC	742	OUT	GET /Individuals/glmedia/newHeader/top_banner.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	268	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Wed, 11 Jan 2023 18:38:04 GMT Accept-Ranges: bytes ETag: "16591cd7eb25d91:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:13 GMT Content-Length: 1281 Connection: close
2024-02-20 15:13:12 UTC	1281	IN	Data Raw: 47 49 46 38 39 61 e8 03 29 00 f7 00 00 00 00 00 ff ff ff 2d 31 92 00 99 ff b7 76 77 a9 67 6a 6a 61 62 b7 64 6f 67 57 59 77 58 5d a4 9d 9e 97 91 92 95 42 53 68 0b 20 6a 0c 22 6c 0d 23 74 10 27 a5 46 5c b1 54 68 81 5e 66 90 0a 2c 71 0b 23 65 0a 20 6e 0c 24 72 0d 26 77 0e 27 7d 10 2a 6f 0e 25 78 10 29 8a 14 32 7e 13 2d 82 14 2f 7b 13 2d 78 13 2b 7e 15 2f 85 17 32 8a 1a 36 92 1d 3a 95 1f 3d 9f 24 43 9c 23 42 94 22 3f 98 27 43 9e 29 47 a7 2e 4d 9f 2c 49 92 28 43 ab 32 51 b0 36 55 94 2e 48 87 09 2a 93 10 32 94 15 36 9e 1d 3f a6 1f 44 80 18 33 8a 1c 3a 99 21 40 90 1f 3d 9a 22 42 a0 26 46 9c 25 45 a5 2a 4a ae 2e 50 a3 7e 88 69 09 25 80 11 31 73 10 2e 76 14 31 82 1b 39 87 30 49 74 2d 42 7c 46 56 63 0f 2a 70 14 31 79 17 36 68 15 30 5d 0a 26 50 0f 26 4a 0e 24 57 11 Data Ascii: GIF89a)-1vwgjjabdogWYwX]BSh j"l#t'F\Th^f,q#e n$r&w'}o%x)2~-/{-x+~/26:=$C#B"?'C)G.M,I(C2Q6U.H26?D3:!@="B&F%EJ.P~i%1s.v190It-B\|FVcp1y6h0]&P&J$W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49821	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:11 UTC	743	OUT	GET /Individuals/glmedia/newHeader/cont_banner.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Wed, 11 Jan 2023 18:38:04 GMT Accept-Ranges: bytes ETag: "6591cd7eb25d91:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:13 GMT Content-Length: 9863 Connection: close
2024-02-20 15:13:12 UTC	4132	IN	Data Raw: 47 49 46 38 39 61 e8 03 43 00 f7 00 00 00 00 00 ff ff ff 00 99 ff 00 00 66 d8 28 2a cb 27 2b bd 26 2e ae 25 2d 9c 26 2e d9 36 49 e6 3d 50 2a 16 18 c4 29 3d a7 55 60 8e 13 2a 6e 0b 1e af 70 7e a8 33 4f 5b 16 2a 92 77 7f c8 ac b6 72 2b 47 a5 89 97 b4 96 aa 68 5a 71 01 01 67 01 01 65 01 01 62 01 01 5e 01 01 4f 04 04 68 04 04 63 09 09 6a 0c 0c 64 0e 0f 6c 14 14 70 19 1a 72 24 24 78 30 30 7d 3d 3d 84 43 43 73 6d 6d 9f a8 a8 c2 e2 e2 e8 f7 f7 f9 94 94 95 4d 4e 88 55 56 94 62 63 99 01 07 6d 79 7b a6 9c 9e bd 95 96 aa b6 b7 cb 87 8a ae 90 93 b5 01 0b 71 c3 c5 d2 28 29 2d cf d1 d9 9c a1 ab ee f0 f4 65 6e 7f 7f 8b 9f cb d7 eb ae bf d9 ba ca e2 cf dc ef d6 e1 f1 ae b0 b3 c2 d2 e8 da e5 f4 9c b3 ce d2 e2 f6 f4 f9 ff ab d3 ff 69 7b 90 7d bf ff 9d cd ff b9 db ff e9 f4 Data Ascii: GIF89aCf('+&.%-&.6I=P)=U`np~3O[wr+GhZqgeb^Ohcjdlpr$$x00}==CCsmmMNUVbcmy{q()-eni{}
2024-02-20 15:13:12 UTC	5731	IN	Data Raw: 09 8a 5b d4 a7 a8 18 89 12 f1 9f 7e 0a a2 06 ff 51 37 29 45 3e c0 18 19 75 13 a9 03 51 a1 0e 3a 70 19 01 6c 14 ba 7a c9 12 a8 83 ea 9e 58 69 a1 03 8a 10 9f fa 2a 93 fa 55 1c ea 10 4d d0 87 79 b4 97 5b 70 aa 08 61 a9 b2 68 37 fd 09 56 80 28 87 b2 a8 72 60 45 a9 ee 04 ab 07 21 ab 3f 8a a9 6a 1a 11 44 6a a4 d8 d0 38 bd e1 0c 87 d3 8d 4c 0a 1c e0 b0 2e 84 55 0e e4 70 0e 58 6a a5 c7 29 4a f0 40 0d ca d0 0e 5e 8a 8f 62 2a 8f c8 40 91 12 21 07 6a 80 20 7b 42 a6 c3 6a 1b db 39 5d e6 a2 2d 73 24 a7 0d 11 46 f5 09 88 82 ea a6 07 41 3e cb a6 a8 81 c8 a6 b3 aa a2 3d c9 7e 04 61 7e fe 2a 00 2e d7 9f c8 b2 7a 13 21 af d0 92 65 17 77 5e a8 e8 af 7f 4a 79 d3 86 5e fc 0a 11 60 65 4d c9 e2 af d1 d7 45 86 29 aa 4d a6 6b e1 f9 b0 09 11 b1 10 81 a2 8b 69 7a 22 8b 10 24 bb 99 Data Ascii: [~Q7)E>uQ:plzXiUMy[pah7V(r`E!?jDj8L.UpXj)J@^b@!j {Bj9]-s$FA>=~a~*.z!ew^Jy^`eME)Mkiz"$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49823	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	732	OUT	GET /Individuals/glmedia/clearpixel.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	265	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 28 May 2009 14:44:30 GMT Accept-Ranges: bytes ETag: "0db8fcea2dfc91:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 49 Connection: close
2024-02-20 15:13:12 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 05 14 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49824	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	736	OUT	GET /Individuals/glmedia/newHeader/nav7.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	265	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "181597d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 548 Connection: close
2024-02-20 15:13:12 UTC	548	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 61 00 00 00 15 08 06 00 00 00 56 b5 80 74 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 01 b9 49 44 41 54 68 43 ed 97 bd 4e 03 31 0c c7 7d 79 03 d8 10 0b 88 8f 1d 24 96 ae 88 a1 65 05 1e a1 8c b0 f0 06 dd 58 da 8d f6 19 58 b9 3e 41 59 10 b0 31 90 22 58 60 84 27 80 f2 f7 c5 ee 9d d8 a8 4e 8d a5 e6 a7 ba 49 9c 9c 55 d9 b1 dd cb e8 ea 67 42 ca 04 53 e7 64 91 98 17 c9 e3 06 48 41 30 40 0a 82 01 52 10 0c 10 25 08 79 1b ff 01 0e 64 21 74 8f a1 83 1e 9f 85 23 65 82 01 52 10 0c e0 a8 7c 4b b0 c5 32 4a 14 4a 16 97 28 16 8f 72 d5 86 4e f7 bc 94 b4 ea 99 7c 03 22 65 4d d7 53 d8 5e 65 cf e3 b9 86 6c c5 Data Ascii: PNGIHDRaVtsRGBgAMAapHYs(JIDAThCN1}y$eXX>AY1"X`'NIUgBSdHA0@R%yd!t#eR\|K2JJ(rN\|"eMS^el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49825	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	741	OUT	GET /Individuals/glmedia/appMedia/bulletBlue_5.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/glstyles/appstylesheet.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 22 Feb 2011 15:16:08 GMT Accept-Ranges: bytes ETag: "0ec2a6ea3d2cb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 152 Connection: close
2024-02-20 15:13:12 UTC	152	IN	Data Raw: 47 49 46 38 39 61 05 00 05 00 c4 00 00 35 53 72 4c 67 83 d6 d8 d9 ee f0 f3 00 18 31 a5 b2 c0 7d 90 a5 90 a0 b1 d8 de e4 8e 9f b0 4b 63 7c 6b 81 98 d6 da df 00 26 4d bc c6 d0 00 10 21 4b 56 62 14 25 36 00 0a 13 00 1b 36 4b 61 77 10 34 58 16 1f 27 4b 52 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 05 00 05 00 00 05 15 e0 e0 1c 06 52 24 4b 45 05 40 43 44 ca f4 48 17 03 59 97 10 02 00 3b Data Ascii: GIF89a5SrLg1}Kc\|k&M!KVb%66Kaw4X'KRX!,R$KE@CDHY;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49822	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	746	OUT	GET /Individuals/glmedia/newHeader/ifileblue_Logo.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Fri, 17 Jan 2020 13:14:15 GMT Accept-Ranges: bytes ETag: "e4118a438cdd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 3925 Connection: close
2024-02-20 15:13:12 UTC	3925	IN	Data Raw: 47 49 46 38 39 61 86 00 46 00 f7 00 00 00 00 00 ff ff ff d7 c7 c8 d2 c2 c3 d1 c1 c2 e2 d2 d3 de cf d0 d8 c9 ca e3 d4 d5 da cd ce cb bf c0 e7 dc dd e1 d6 d7 eb e0 e1 c7 b4 b6 e8 de df ee e4 e5 ec e2 e3 e9 df e0 df d0 d2 db cc ce e2 d3 d5 cf bb be ce ba bd d6 c3 c6 e6 da dc f6 f0 f1 c6 b2 b6 c5 b1 b5 d3 c3 c6 ca b8 bc c3 b5 b8 de d1 d4 ed e4 e6 c6 b2 b7 cb ba be d4 c3 c7 e0 d4 d7 cf bd c2 ca b8 bd e7 dc df df d4 d7 cf be c3 c7 b6 bb c9 b6 bc b7 ab af c3 b2 b8 c3 b1 b8 c1 af b6 cb bb c1 df d2 d7 f5 f0 f2 c4 b2 ba c5 b1 bb fd fb fc bd a3 b2 be a9 b5 bf ac b7 b9 a0 af bd a4 b3 c3 aa b9 bd a1 b3 ba a1 b1 b9 a2 b1 bf a3 b6 bb a9 b5 b8 a2 b1 b9 9e b1 b6 9b ae bc a1 b4 b5 98 af b9 9c b3 b1 87 aa af 8a a9 b2 94 ad b5 97 b0 b3 95 ae b9 9b b4 b5 99 b0 b1 90 ac af 93 Data Ascii: GIF89aF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49826	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	736	OUT	GET /Individuals/glmedia/newHeader/nav1.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "20feed6d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 1112 Connection: close
2024-02-20 15:13:12 UTC	1112	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bc 00 00 00 15 08 06 00 00 00 fc 5a 84 8d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 ed 49 44 41 54 68 43 ed 99 3d 6f 13 31 1c c6 9d b0 c0 08 9f 80 97 a4 42 15 0b 20 96 74 44 0c 09 4b 07 c8 da 2d 1d d3 0f c0 c8 07 68 37 d2 8f 00 0c 5d 9a 0e 88 31 59 10 b0 54 08 35 e1 e5 13 00 23 48 28 e5 f7 f8 ec d4 a4 79 6b da 20 dc f8 a7 38 77 67 df f9 7c e7 c7 7f 3f 4e 72 e6 59 ef d0 0c e3 90 ec 7c de 1d 24 12 e7 83 a4 e8 c4 42 91 04 9f 58 28 92 e0 13 0b 45 12 7c 62 a1 88 4f f0 57 8c e9 d4 58 53 2b 3d 36 a6 e4 b2 45 ed 81 cb 27 35 6f b8 cc 33 66 93 7b aa 7e 3e 73 61 5c fd e1 f3 1d 4b 94 25 26 13 77 Data Ascii: PNGIHDRZsRGBgAMAapHYs+IDAThC=o1B tDK-h7]1YT5#H(yk 8wg\|?NrY\|$BX(E\|bOWXS+=6E'5o3f{~>sa\K%&w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49827	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	736	OUT	GET /Individuals/glmedia/newHeader/nav2.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "db58f16d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 1037 Connection: close
2024-02-20 15:13:12 UTC	1037	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bc 00 00 00 15 08 06 00 00 00 fc 5a 84 8d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 03 a2 49 44 41 54 68 43 ed 99 bb 72 d3 40 14 86 d7 a2 81 12 9e 80 8b 9d 61 32 34 c0 d0 24 65 86 22 4e 93 02 dc a6 73 4a d3 f0 06 74 34 a6 23 79 84 0c 45 1a 3b 15 a5 d3 30 40 93 61 98 d8 5c 9e 00 28 61 86 b1 f9 ce 6a 8f a3 d8 8a 2e 24 01 29 da 6f bc 96 b4 ab 3d da cb ef b3 67 ad 9a 79 39 9e 98 38 26 64 07 81 bb f0 78 2e 06 5e d1 9e 4a e1 05 ef a9 14 5e f0 9e 4a e1 05 ef a9 14 e5 11 fc 35 63 86 6d f6 d2 92 1e 1b b3 e4 b2 85 f6 43 97 4f ea df 72 99 67 4c 97 67 8a 7d 3e e7 42 a2 fd ff dc f7 8b 44 39 3d fc 55 Data Ascii: PNGIHDRZsRGBgAMAapHYs(JIDAThCr@a24$e"NsJt4#yE;0@a\(aj.$)o=gy98&dx.^J^J5cmCOrgLg}>BD9=U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49829	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	452	OUT	GET /Individuals/glmedia/newHeader/top_banner.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	268	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Wed, 11 Jan 2023 18:38:04 GMT Accept-Ranges: bytes ETag: "16591cd7eb25d91:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 1281 Connection: close
2024-02-20 15:13:12 UTC	1281	IN	Data Raw: 47 49 46 38 39 61 e8 03 29 00 f7 00 00 00 00 00 ff ff ff 2d 31 92 00 99 ff b7 76 77 a9 67 6a 6a 61 62 b7 64 6f 67 57 59 77 58 5d a4 9d 9e 97 91 92 95 42 53 68 0b 20 6a 0c 22 6c 0d 23 74 10 27 a5 46 5c b1 54 68 81 5e 66 90 0a 2c 71 0b 23 65 0a 20 6e 0c 24 72 0d 26 77 0e 27 7d 10 2a 6f 0e 25 78 10 29 8a 14 32 7e 13 2d 82 14 2f 7b 13 2d 78 13 2b 7e 15 2f 85 17 32 8a 1a 36 92 1d 3a 95 1f 3d 9f 24 43 9c 23 42 94 22 3f 98 27 43 9e 29 47 a7 2e 4d 9f 2c 49 92 28 43 ab 32 51 b0 36 55 94 2e 48 87 09 2a 93 10 32 94 15 36 9e 1d 3f a6 1f 44 80 18 33 8a 1c 3a 99 21 40 90 1f 3d 9a 22 42 a0 26 46 9c 25 45 a5 2a 4a ae 2e 50 a3 7e 88 69 09 25 80 11 31 73 10 2e 76 14 31 82 1b 39 87 30 49 74 2d 42 7c 46 56 63 0f 2a 70 14 31 79 17 36 68 15 30 5d 0a 26 50 0f 26 4a 0e 24 57 11 Data Ascii: GIF89a)-1vwgjjabdogWYwX]BSh j"l#t'F\Th^f,q#e n$r&w'}o%x)2~-/{-x+~/26:=$C#B"?'C)G.M,I(C2Q6U.H26?D3:!@="B&F%EJ.P~i%1s.v190It-B\|FVcp1y6h0]&P&J$W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49828	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	453	OUT	GET /Individuals/glmedia/newHeader/cont_banner.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Wed, 11 Jan 2023 18:38:04 GMT Accept-Ranges: bytes ETag: "6591cd7eb25d91:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 9863 Connection: close
2024-02-20 15:13:12 UTC	4132	IN	Data Raw: 47 49 46 38 39 61 e8 03 43 00 f7 00 00 00 00 00 ff ff ff 00 99 ff 00 00 66 d8 28 2a cb 27 2b bd 26 2e ae 25 2d 9c 26 2e d9 36 49 e6 3d 50 2a 16 18 c4 29 3d a7 55 60 8e 13 2a 6e 0b 1e af 70 7e a8 33 4f 5b 16 2a 92 77 7f c8 ac b6 72 2b 47 a5 89 97 b4 96 aa 68 5a 71 01 01 67 01 01 65 01 01 62 01 01 5e 01 01 4f 04 04 68 04 04 63 09 09 6a 0c 0c 64 0e 0f 6c 14 14 70 19 1a 72 24 24 78 30 30 7d 3d 3d 84 43 43 73 6d 6d 9f a8 a8 c2 e2 e2 e8 f7 f7 f9 94 94 95 4d 4e 88 55 56 94 62 63 99 01 07 6d 79 7b a6 9c 9e bd 95 96 aa b6 b7 cb 87 8a ae 90 93 b5 01 0b 71 c3 c5 d2 28 29 2d cf d1 d9 9c a1 ab ee f0 f4 65 6e 7f 7f 8b 9f cb d7 eb ae bf d9 ba ca e2 cf dc ef d6 e1 f1 ae b0 b3 c2 d2 e8 da e5 f4 9c b3 ce d2 e2 f6 f4 f9 ff ab d3 ff 69 7b 90 7d bf ff 9d cd ff b9 db ff e9 f4 Data Ascii: GIF89aCf('+&.%-&.6I=P)=U`np~3O[wr+GhZqgeb^Ohcjdlpr$$x00}==CCsmmMNUVbcmy{q()-eni{}
2024-02-20 15:13:12 UTC	5731	IN	Data Raw: 09 8a 5b d4 a7 a8 18 89 12 f1 9f 7e 0a a2 06 ff 51 37 29 45 3e c0 18 19 75 13 a9 03 51 a1 0e 3a 70 19 01 6c 14 ba 7a c9 12 a8 83 ea 9e 58 69 a1 03 8a 10 9f fa 2a 93 fa 55 1c ea 10 4d d0 87 79 b4 97 5b 70 aa 08 61 a9 b2 68 37 fd 09 56 80 28 87 b2 a8 72 60 45 a9 ee 04 ab 07 21 ab 3f 8a a9 6a 1a 11 44 6a a4 d8 d0 38 bd e1 0c 87 d3 8d 4c 0a 1c e0 b0 2e 84 55 0e e4 70 0e 58 6a a5 c7 29 4a f0 40 0d ca d0 0e 5e 8a 8f 62 2a 8f c8 40 91 12 21 07 6a 80 20 7b 42 a6 c3 6a 1b db 39 5d e6 a2 2d 73 24 a7 0d 11 46 f5 09 88 82 ea a6 07 41 3e cb a6 a8 81 c8 a6 b3 aa a2 3d c9 7e 04 61 7e fe 2a 00 2e d7 9f c8 b2 7a 13 21 af d0 92 65 17 77 5e a8 e8 af 7f 4a 79 d3 86 5e fc 0a 11 60 65 4d c9 e2 af d1 d7 45 86 29 aa 4d a6 6b e1 f9 b0 09 11 b1 10 81 a2 8b 69 7a 22 8b 10 24 bb 99 Data Ascii: [~Q7)E>uQ:plzXiUMy[pah7V(r`E!?jDj8L.UpXj)J@^b@!j {Bj9]-s$FA>=~a~*.z!ew^Jy^`eME)Mkiz"$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49830	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	736	OUT	GET /Individuals/glmedia/newHeader/nav3.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:12 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "30fef46d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 1322 Connection: close
2024-02-20 15:13:12 UTC	1322	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bc 00 00 00 15 08 06 00 00 00 fc 5a 84 8d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 04 bf 49 44 41 54 68 43 ed 99 3d 73 d3 40 10 86 cf a6 81 0e f8 05 7c d8 19 26 43 03 0c 8d 5d 32 14 72 9a 14 90 36 9d 53 c6 0d 5d ca 74 34 4e 47 e8 68 09 45 1a db 15 a5 dd 64 80 26 93 61 6c f3 f1 0b 80 12 66 18 9b f7 3d dd 2a 67 45 52 64 4b 49 70 7c cf 44 91 74 a7 bb 5b ed ed ed ee c9 05 f5 6a 34 56 51 8c 51 5c 2c 9a 1b 87 e3 72 e0 2c da b1 50 38 83 77 2c 14 ce e0 1d 0b 85 33 78 c7 42 91 9b c1 57 ee 2a 35 78 8e bd 6e dd 3f 78 5d bf 69 2a e7 94 a6 79 1f fc 45 de 9f 07 95 c7 d0 25 06 d4 3a c5 f5 04 d0 af d4 Data Ascii: PNGIHDRZsRGBgAMAapHYs(JIDAThC=s@\|&C]2r6S]t4NGhEd&alf=gERdKIp\|Dt[j4VQQ\,r,P8w,3xBW5xn?x]i*yE%:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49831	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	736	OUT	GET /Individuals/glmedia/newHeader/nav4.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "441af96d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 1101 Connection: close
2024-02-20 15:13:13 UTC	1101	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 79 00 00 00 15 08 06 00 00 00 62 cc 41 68 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 03 e2 49 44 41 54 68 43 ed 98 b1 72 12 41 18 c7 17 c6 17 d0 17 30 2a a4 70 6c d4 b1 81 d2 b1 80 34 29 94 36 5d 28 49 63 97 d2 07 20 9d a1 b3 8d 16 69 02 95 25 34 8e da 64 6c 38 35 be 80 fa 00 4e f0 f7 df db c5 e3 e4 ee 38 82 33 26 dc 6f 38 f6 6e f7 76 f7 db fd be fd ef 42 c9 bc 3c 9f 18 cf 84 db 72 d9 3d 14 5c 15 0a 8f ae 01 85 93 d7 80 c2 c9 6b 40 e1 e4 35 20 bf 93 6f 18 33 de e5 8c a6 eb 99 31 35 97 2d 76 9f b8 7c ae fe 1d 97 99 93 2e 6d aa 3e 9f b9 cf 4b 81 cd 7d d7 8e bd b8 df 25 ef 5f b1 12 9b 57 c8 Data Ascii: PNGIHDRybAhsRGBgAMAapHYs(JIDAThCrA0*pl4)6](Ic i%4dl85N83&o8nvB<r=\k@5 o315-v\|.m>K}%_W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49832	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	736	OUT	GET /Individuals/glmedia/newHeader/nav5.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "c3f8fd6d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 1002 Connection: close
2024-02-20 15:13:13 UTC	1002	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 79 00 00 00 15 08 06 00 00 00 62 cc 41 68 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 03 7f 49 44 41 54 68 43 ed 98 bb 72 d3 40 14 86 8f 35 3c 00 f0 02 04 b0 a9 68 80 a1 b1 4b 86 c2 a6 a1 00 b7 e9 ec d2 69 e8 52 f2 00 76 87 dd d1 06 8a 34 b1 2b ca b8 61 80 86 0a 19 08 2f 00 3c 00 63 f3 ff da dd 64 2d 7b 25 ad 26 f6 4c 2c 7d 13 59 7b d1 9e 3d da 73 d9 55 2a f2 66 be 10 c3 02 c5 20 d0 95 92 5d a1 b4 68 01 28 8d 5c 00 4a 23 17 80 d2 c8 05 c0 cb c8 f5 bb 22 e3 97 38 9f 75 f4 85 72 1f 6d 3e f4 f5 78 fc ad ad 6f 84 9b ab 7a 77 d0 b6 29 b6 f2 4e 1e 64 37 32 8c 79 fa 44 a4 76 26 d2 18 89 54 70 75 Data Ascii: PNGIHDRybAhsRGBgAMAapHYs(JIDAThCr@5<hKiRv4+a/<cd-{%&L,}Y{=sU*f ]h(\J#"8urm>xozw)Nd72yDv&Tpu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49833	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	736	OUT	GET /Individuals/glmedia/newHeader/nav6.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	265	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "81ff27d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 721 Connection: close
2024-02-20 15:13:13 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 61 00 00 00 15 08 06 00 00 00 56 b5 80 74 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 02 66 49 44 41 54 68 43 ed 98 ad 92 13 41 10 c7 7b f7 0d c0 51 18 3e 72 27 28 0c 54 61 12 49 21 36 1a ce c6 5d e4 bd c0 49 1e 20 e7 c8 39 2c 20 30 24 0a 99 18 04 06 75 09 1f 06 24 c7 0b c0 f1 eb d9 9e 65 92 cb c5 65 76 aa 98 5f ed 64 76 3e 77 d3 dd fb ef 6c 0a 79 f1 e7 42 3c 17 9c 96 a5 35 32 b1 c8 16 4f 80 ec 84 04 c8 4e 48 80 ec 84 04 88 ef 84 eb 22 93 67 fc 06 38 b4 c2 f9 21 7d 6d 31 b1 7b e8 5a bb 0d a2 3b 61 f4 58 a4 a2 1e 9e 8a 14 6f 44 a6 d7 44 c6 f4 b5 69 84 b6 89 ee 84 7d 8c ae 7c d2 8f 9f 22 7d Data Ascii: PNGIHDRaVtsRGBgAMAapHYs(JfIDAThCA{Q>r'(TaI!6]I 9, 0$u$eev_dv>wlyB<52ONH"g8!}m1{Z;aXoDDi}\|"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49834	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	442	OUT	GET /Individuals/glmedia/clearpixel.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	265	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 28 May 2009 14:44:30 GMT Accept-Ranges: bytes ETag: "0db8fcea2dfc91:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 49 Connection: close
2024-02-20 15:13:13 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 05 14 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49838	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	446	OUT	GET /Individuals/glmedia/newHeader/nav7.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	265	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "181597d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 548 Connection: close
2024-02-20 15:13:13 UTC	548	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 61 00 00 00 15 08 06 00 00 00 56 b5 80 74 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 01 b9 49 44 41 54 68 43 ed 97 bd 4e 03 31 0c c7 7d 79 03 d8 10 0b 88 8f 1d 24 96 ae 88 a1 65 05 1e a1 8c b0 f0 06 dd 58 da 8d f6 19 58 b9 3e 41 59 10 b0 31 90 22 58 60 84 27 80 f2 f7 c5 ee 9d d8 a8 4e 8d a5 e6 a7 ba 49 9c 9c 55 d9 b1 dd cb e8 ea 67 42 ca 04 53 e7 64 91 98 17 c9 e3 06 48 41 30 40 0a 82 01 52 10 0c 10 25 08 79 1b ff 01 0e 64 21 74 8f a1 83 1e 9f 85 23 65 82 01 52 10 0c e0 a8 7c 4b b0 c5 32 4a 14 4a 16 97 28 16 8f 72 d5 86 4e f7 bc 94 b4 ea 99 7c 03 22 65 4d d7 53 d8 5e 65 cf e3 b9 86 6c c5 Data Ascii: PNGIHDRaVtsRGBgAMAapHYs(JIDAThCN1}y$eXX>AY1"X`'NIUgBSdHA0@R%yd!t#eR\|K2JJ(rN\|"eMS^el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49835	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	453	OUT	GET /Individuals/glmedia/appMedia/bulletBlue_5.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 22 Feb 2011 15:16:08 GMT Accept-Ranges: bytes ETag: "0ec2a6ea3d2cb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 152 Connection: close
2024-02-20 15:13:13 UTC	152	IN	Data Raw: 47 49 46 38 39 61 05 00 05 00 c4 00 00 35 53 72 4c 67 83 d6 d8 d9 ee f0 f3 00 18 31 a5 b2 c0 7d 90 a5 90 a0 b1 d8 de e4 8e 9f b0 4b 63 7c 6b 81 98 d6 da df 00 26 4d bc c6 d0 00 10 21 4b 56 62 14 25 36 00 0a 13 00 1b 36 4b 61 77 10 34 58 16 1f 27 4b 52 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 05 00 05 00 00 05 15 e0 e0 1c 06 52 24 4b 45 05 40 43 44 ca f4 48 17 03 59 97 10 02 00 3b Data Ascii: GIF89a5SrLg1}Kc\|k&M!KVb%66Kaw4X'KRX!,R$KE@CDHY;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49837	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:12 UTC	446	OUT	GET /Individuals/glmedia/newHeader/nav1.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "20feed6d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 1112 Connection: close
2024-02-20 15:13:13 UTC	1112	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bc 00 00 00 15 08 06 00 00 00 fc 5a 84 8d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 ed 49 44 41 54 68 43 ed 99 3d 6f 13 31 1c c6 9d b0 c0 08 9f 80 97 a4 42 15 0b 20 96 74 44 0c 09 4b 07 c8 da 2d 1d d3 0f c0 c8 07 68 37 d2 8f 00 0c 5d 9a 0e 88 31 59 10 b0 54 08 35 e1 e5 13 00 23 48 28 e5 f7 f8 ec d4 a4 79 6b da 20 dc f8 a7 38 77 67 df f9 7c e7 c7 7f 3f 4e 72 e6 59 ef d0 0c e3 90 ec 7c de 1d 24 12 e7 83 a4 e8 c4 42 91 04 9f 58 28 92 e0 13 0b 45 12 7c 62 a1 88 4f f0 57 8c e9 d4 58 53 2b 3d 36 a6 e4 b2 45 ed 81 cb 27 35 6f b8 cc 33 66 93 7b aa 7e 3e 73 61 5c fd e1 f3 1d 4b 94 25 26 13 77 Data Ascii: PNGIHDRZsRGBgAMAapHYs+IDAThC=o1B tDK-h7]1YT5#H(yk 8wg\|?NrY\|$BX(E\|bOWXS+=6E'5o3f{~>sa\K%&w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49839	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:13 UTC	456	OUT	GET /Individuals/glmedia/newHeader/ifileblue_Logo.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Fri, 17 Jan 2020 13:14:15 GMT Accept-Ranges: bytes ETag: "e4118a438cdd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 3925 Connection: close
2024-02-20 15:13:13 UTC	3925	IN	Data Raw: 47 49 46 38 39 61 86 00 46 00 f7 00 00 00 00 00 ff ff ff d7 c7 c8 d2 c2 c3 d1 c1 c2 e2 d2 d3 de cf d0 d8 c9 ca e3 d4 d5 da cd ce cb bf c0 e7 dc dd e1 d6 d7 eb e0 e1 c7 b4 b6 e8 de df ee e4 e5 ec e2 e3 e9 df e0 df d0 d2 db cc ce e2 d3 d5 cf bb be ce ba bd d6 c3 c6 e6 da dc f6 f0 f1 c6 b2 b6 c5 b1 b5 d3 c3 c6 ca b8 bc c3 b5 b8 de d1 d4 ed e4 e6 c6 b2 b7 cb ba be d4 c3 c7 e0 d4 d7 cf bd c2 ca b8 bd e7 dc df df d4 d7 cf be c3 c7 b6 bb c9 b6 bc b7 ab af c3 b2 b8 c3 b1 b8 c1 af b6 cb bb c1 df d2 d7 f5 f0 f2 c4 b2 ba c5 b1 bb fd fb fc bd a3 b2 be a9 b5 bf ac b7 b9 a0 af bd a4 b3 c3 aa b9 bd a1 b3 ba a1 b1 b9 a2 b1 bf a3 b6 bb a9 b5 b8 a2 b1 b9 9e b1 b6 9b ae bc a1 b4 b5 98 af b9 9c b3 b1 87 aa af 8a a9 b2 94 ad b5 97 b0 b3 95 ae b9 9b b4 b5 99 b0 b1 90 ac af 93 Data Ascii: GIF89aF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49836	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:13 UTC	1721	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23mainContent&bp=3&app=717c68634dfb8989&crc=896692844&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 6047 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:13 UTC	6047	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 72 70 74 70 25 32 46 70 6f 72 74 61 6c 25 32 46 68 6f 6d 65 25 32 46 21 75 74 25 32 46 70 25 32 46 7a 31 25 32 46 30 34 5f 53 6a 39 43 50 79 6b 73 73 79 30 78 50 4c 4d 6e 4d 7a 30 76 4d 41 66 49 6a 6f 38 7a 69 6a 53 30 4d 6e 4e 30 39 44 49 79 38 33 45 4f 44 6a 51 77 63 5f 52 31 44 54 63 49 63 76 59 41 73 45 5f 31 77 51 67 71 69 67 4e 49 47 4f 49 43 6a 41 56 42 5f 46 43 45 6c 42 62 6b 52 42 75 6d 4f 69 6f 6f 41 37 59 46 63 4c 51 21 21 25 32 46 64 7a 25 32 46 64 35 25 32 46 4c 32 64 42 49 53 45 76 5a 30 46 42 49 53 39 6e 51 53 45 68 25 32 46 24 74 76 74 3d 31 37 30 38 34 34 31 39 38 30 30 32 34 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 Data Ascii: $tvn=%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F$tvt=1708441980024$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$
2024-02-20 15:13:13 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:13 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:13 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49840	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:13 UTC	446	OUT	GET /Individuals/glmedia/newHeader/nav2.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "db58f16d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:15 GMT Content-Length: 1037 Connection: close
2024-02-20 15:13:13 UTC	1037	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bc 00 00 00 15 08 06 00 00 00 fc 5a 84 8d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 03 a2 49 44 41 54 68 43 ed 99 bb 72 d3 40 14 86 d7 a2 81 12 9e 80 8b 9d 61 32 34 c0 d0 24 65 86 22 4e 93 02 dc a6 73 4a d3 f0 06 74 34 a6 23 79 84 0c 45 1a 3b 15 a5 d3 30 40 93 61 98 d8 5c 9e 00 28 61 86 b1 f9 ce 6a 8f a3 d8 8a 2e 24 01 29 da 6f bc 96 b4 ab 3d da cb ef b3 67 ad 9a 79 39 9e 98 38 26 64 07 81 bb f0 78 2e 06 5e d1 9e 4a e1 05 ef a9 14 5e f0 9e 4a e1 05 ef a9 14 e5 11 fc 35 63 86 6d f6 d2 92 1e 1b b3 e4 b2 85 f6 43 97 4f ea df 72 99 67 4c 97 67 8a 7d 3e e7 42 a2 fd ff dc f7 8b 44 39 3d fc 55 Data Ascii: PNGIHDRZsRGBgAMAapHYs(JIDAThCr@a24$e"NsJt4#yE;0@a\(aj.$)o=gy98&dx.^J^J5cmCOrgLg}>BD9=U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49841	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:13 UTC	709	OUT	GET /favicon.ico HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/Individuals/iFile_ChooseForm/default.asp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: PHP/8.3.3 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:26 GMT Content-Length: 56800 Connection: close
2024-02-20 15:13:13 UTC	5359	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 20 74 65 6d 70 6c 61 74 65 3d 22 2f 54 65 6d 70 6c 61 74 65 73 2f 4e 45 57 2d 74 65 6d 70 6c 61 74 65 2e 64 77 74 2e 70 68 70 22 20 63 6f 64 65 4f 75 74 73 69 64 65 48 54 4d 4c 49 73 4c 6f 63 6b 65 64 3d 22 66 61 6c 73 65 22 20 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 45 64 69 74 61 62 6c 65 20 6e 61 6d 65 3d 22 68 65 61 64 22 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 45 6e 64 45 64 69 74 61 62 6c 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 48 65 61 64 20 42 45 47 49 4e 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d Data Ascii: <!DOCTYPE html> <html class="no-js" lang="en">... InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" --><head>... InstanceBeginEditable name="head" -->... InstanceEndEditable -->... Head BEGIN --><!-
2024-02-20 15:13:13 UTC	10136	IN	Data Raw: 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 6e 61 76 62 61 72 2d 64 61 72 6b 20 6e 61 76 62 61 72 2d 73 74 61 74 69 63 2d 74 6f 70 20 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 6e 6f 2d 6d 61 72 67 69 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 20 69 64 3d 22 6e 61 76 62 61 72 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: style="padding: 0;"> <nav class="navbar navbar-default navbar-dark navbar-static-top no-border-radius no-margin" style="top: 0;"> <div class="container-fluid" id="navbar-inner-container">
2024-02-20 15:13:13 UTC	1448	IN	Data Raw: 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 62 75 73 69 6e 65 73 73 2f 69 6e 63 6f 6d 65 2f 66 69 6c 69 6e 67 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 70 68 70 23 64 65 61 64 6c 69 6e 65 73 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 57 68 65 6e 20 74 6f 20 46 69 6c 65 22 3e 57 68 65 6e 20 74 6f 20 46 69 6c 65 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 62 75 73 69 6e 65 73 73 2f 62 75 73 69 6e 65 73 73 2d 66 61 71 73 2e 70 68 70 22 20 Data Ascii: <a href="/business/income/filing-information.php#deadlines" class="menu-link-text" title="When to File">When to File</a> <hr> <a href="/business/business-faqs.php"
2024-02-20 15:13:13 UTC	7240	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 64 72 6f 70 64 6f 77 6e 2d 72 69 67 68 74 20 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 70 72 6f 73 2f 69 6e 64 65 78 2e 70 68 70 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6a 75 73 74 69 66 79 3b 22 20 74 69 74 6c 65 3d 22 54 61 78 20 Data Ascii: <li class="dropdown dropdown-right widget-default clearfix pad-0-25-sm"> <a href="/pros/index.php" style="font-size: 14px; font-weight: 700; color: #222; text-align: justify;" title="Tax
2024-02-20 15:13:13 UTC	7240	IN	Data Raw: 20 54 61 78 20 46 6f 72 6d 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 0d 0a 09 09 09 09 09 09 09 09 09 09 76 61 6c 75 65 3d 22 2f 69 6e 64 69 76 69 64 75 61 6c 2f 69 6e 63 6f 6d 65 2f 66 6f 72 6d 73 2f 32 30 32 33 5f 49 6e 63 6f 6d 65 5f 54 61 78 5f 46 6f 72 6d 73 2e 70 68 70 22 0d 0a 09 09 09 09 09 09 09 09 09 09 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 20 6c 61 62 65 6c 3d 22 32 30 32 33 20 49 6e 63 6f 6d 65 20 54 61 78 20 46 6f 72 6d 73 22 3e 32 30 32 32 20 49 6e 63 6f 6d 65 20 54 61 78 20 46 6f 72 6d 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 0d 0a 09 09 09 09 09 09 09 09 09 09 76 61 6c 75 65 3d 22 2f 69 6e 73 74 72 75 63 74 69 6f 6e 2d Data Ascii: Tax Forms</option><optionvalue="/individual/income/forms/2023_Income_Tax_Forms.php"style="font-weight:bold;" label="2023 Income Tax Forms">2022 Income Tax Forms</option><optionvalue="/instruction-
2024-02-20 15:13:13 UTC	7240	IN	Data Raw: 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 31 30 5f 35 31 31 44 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 31 30 2f 35 31 31 44 0d 0a 09 09 09 09 09 09 09 09 09 09 09 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 09 32 30 32 33 22 3e 35 31 30 2f 35 31 31 44 0d 0a 09 09 09 09 09 09 09 09 09 09 09 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 09 32 30 32 33 3c 2f 6f 70 74 69 6f 6e 3e 20 2d 2d 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 21 2d 2d 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 31 30 5f 35 31 31 45 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 31 30 2f 35 31 31 45 22 3e 35 31 30 2f 35 31 31 45 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 6f 70 74 69 6f 6e 3e 2d 2d 3e 0d 0a 0d 0a 09 09 09 09 Data Ascii: value="/forms/23_forms/510_511D.pdf" label="510/511D-2023">510/511D-2023</option> -->...<option value="/forms/23_forms/510_511E.pdf" label="510/511E">510/511E</option>-->
2024-02-20 15:13:13 UTC	7240	IN	Data Raw: 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 22 3e 50 4f 50 55 4c 41 52 3c 2f 70 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 6d 65 64 69 61 2d 6b 69 74 73 2f 69 6e 64 65 78 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 53 6f 63 69 61 6c 20 4d 65 64 69 61 20 54 Data Ascii: rfix pad-0-25-sm"> <p style="font-size: 14px; font-weight: 700;">POPULAR</p> <a href="/media-kits/index.php" class="menu-link-text" title="Social Media T
2024-02-20 15:13:13 UTC	7240	IN	Data Raw: 63 65 20 44 69 76 69 73 69 6f 6e 20 28 43 44 29 22 3e 20 43 6f 6d 70 6c 69 61 6e 63 65 20 44 69 76 69 73 69 6f 6e 20 28 43 44 29 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 61 66 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 4f 66 66 69 63 65 20 6f 66 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 61 6e 64 20 46 69 6e 61 6e 63 65 20 28 41 20 26 61 6d 70 3b 20 46 29 20 22 3e 20 4f 66 66 69 63 65 20 6f 66 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 61 6e 64 20 46 69 6e 61 6e 63 65 20 28 41 20 26 61 6d 70 3b 20 46 29 20 3c 2f Data Ascii: ce Division (CD)"> Compliance Division (CD) </a><hr> <a href="/divisions/af.php" class="menu-link-text" title="Office of Administration and Finance (A & F) "> Office of Administration and Finance (A & F) </
2024-02-20 15:13:13 UTC	1448	IN	Data Raw: 6c 67 2d 32 20 63 6f 6c 2d 6d 64 2d 32 20 63 6f 6c 2d 73 6d 2d 32 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 33 33 33 39 39 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 65 6d 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 65 6d 3b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 2e 35 65 6d 3b 22 3e 0d 0a 09 0d 0a 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 75 6c 22 3e 0d 0a 20 20 20 20 3c 6c 69 20 73 74 79 6c 65 3d 22 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 43 6f 6d 70 74 72 6f 6c 6c 65 72 6f 66 4d 61 72 79 6c 61 6e 64 2f 22 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d Data Ascii: lg-2 col-md-2 col-sm-2" style="background-color: #333399; padding-top: 1em; padding-bottom: 1em; padding-right: 0.5em;"> <ul class="footer-ul"> <li style="float: right;"><a href="https://www.facebook.com/ComptrollerofMaryland/" class="footer-
2024-02-20 15:13:13 UTC	2209	IN	Data Raw: 73 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 73 73 65 73 74 73 2f 6a 73 2f 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2f 6f 77 6c 2e 63 61 72 6f 75 73 65 6c 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0d 0a 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 73 73 65 73 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2d 65 61 73 69 6e 67 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0d 0a 3c 21 2d 2d Data Ascii: s/js/bootstrap.min.js" type="text/javascript"></script>...<script src="/assests/js/owl-carousel/owl.carousel.js" type="text/javascript"></script>-->...<script src="/assests/js/jquery-easing/jquery.easing.js" type="text/javascript"></script>-->...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49842	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:13 UTC	446	OUT	GET /Individuals/glmedia/newHeader/nav3.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "30fef46d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:16 GMT Content-Length: 1322 Connection: close
2024-02-20 15:13:13 UTC	1322	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bc 00 00 00 15 08 06 00 00 00 fc 5a 84 8d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 04 bf 49 44 41 54 68 43 ed 99 3d 73 d3 40 10 86 cf a6 81 0e f8 05 7c d8 19 26 43 03 0c 8d 5d 32 14 72 9a 14 90 36 9d 53 c6 0d 5d ca 74 34 4e 47 e8 68 09 45 1a db 15 a5 dd 64 80 26 93 61 6c f3 f1 0b 80 12 66 18 9b f7 3d dd 2a 67 45 52 64 4b 49 70 7c cf 44 91 74 a7 bb 5b ed ed ed ee c9 05 f5 6a 34 56 51 8c 51 5c 2c 9a 1b 87 e3 72 e0 2c da b1 50 38 83 77 2c 14 ce e0 1d 0b 85 33 78 c7 42 91 9b c1 57 ee 2a 35 78 8e bd 6e dd 3f 78 5d bf 69 2a e7 94 a6 79 1f fc 45 de 9f 07 95 c7 d0 25 06 d4 3a c5 f5 04 d0 af d4 Data Ascii: PNGIHDRZsRGBgAMAapHYs(JIDAThC=s@\|&C]2r6S]t4NGhEd&alf=gERdKIp\|Dt[j4VQQ\,r,P8w,3xBW5xn?x]i*yE%:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49843	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:13 UTC	446	OUT	GET /Individuals/glmedia/newHeader/nav4.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "441af96d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:16 GMT Content-Length: 1101 Connection: close
2024-02-20 15:13:13 UTC	1101	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 79 00 00 00 15 08 06 00 00 00 62 cc 41 68 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 03 e2 49 44 41 54 68 43 ed 98 b1 72 12 41 18 c7 17 c6 17 d0 17 30 2a a4 70 6c d4 b1 81 d2 b1 80 34 29 94 36 5d 28 49 63 97 d2 07 20 9d a1 b3 8d 16 69 02 95 25 34 8e da 64 6c 38 35 be 80 fa 00 4e f0 f7 df db c5 e3 e4 ee 38 82 33 26 dc 6f 38 f6 6e f7 76 f7 db fd be fd ef 42 c9 bc 3c 9f 18 cf 84 db 72 d9 3d 14 5c 15 0a 8f ae 01 85 93 d7 80 c2 c9 6b 40 e1 e4 35 20 bf 93 6f 18 33 de e5 8c a6 eb 99 31 35 97 2d 76 9f b8 7c ae fe 1d 97 99 93 2e 6d aa 3e 9f b9 cf 4b 81 cd 7d d7 8e bd b8 df 25 ef 5f b1 12 9b 57 c8 Data Ascii: PNGIHDRybAhsRGBgAMAapHYs(JIDAThCrA0*pl4)6](Ic i%4dl85N83&o8nvB<r=\k@5 o315-v\|.m>K}%_W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49844	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:13 UTC	446	OUT	GET /Individuals/glmedia/newHeader/nav5.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "c3f8fd6d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:16 GMT Content-Length: 1002 Connection: close
2024-02-20 15:13:13 UTC	1002	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 79 00 00 00 15 08 06 00 00 00 62 cc 41 68 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 03 7f 49 44 41 54 68 43 ed 98 bb 72 d3 40 14 86 8f 35 3c 00 f0 02 04 b0 a9 68 80 a1 b1 4b 86 c2 a6 a1 00 b7 e9 ec d2 69 e8 52 f2 00 76 87 dd d1 06 8a 34 b1 2b ca b8 61 80 86 0a 19 08 2f 00 3c 00 63 f3 ff da dd 64 2d 7b 25 ad 26 f6 4c 2c 7d 13 59 7b d1 9e 3d da 73 d9 55 2a f2 66 be 10 c3 02 c5 20 d0 95 92 5d a1 b4 68 01 28 8d 5c 00 4a 23 17 80 d2 c8 05 c0 cb c8 f5 bb 22 e3 97 38 9f 75 f4 85 72 1f 6d 3e f4 f5 78 fc ad ad 6f 84 9b ab 7a 77 d0 b6 29 b6 f2 4e 1e 64 37 32 8c 79 fa 44 a4 76 26 d2 18 89 54 70 75 Data Ascii: PNGIHDRybAhsRGBgAMAapHYs(JIDAThCr@5<hKiRv4+a/<cd-{%&L,}Y{=sU*f ]h(\J#"8urm>xozw)Nd72yDv&Tpu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49845	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:13 UTC	446	OUT	GET /Individuals/glmedia/newHeader/nav6.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:13 UTC	265	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 15 Jan 2020 19:14:36 GMT Accept-Ranges: bytes ETag: "81ff27d8cbd51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:16 GMT Content-Length: 721 Connection: close
2024-02-20 15:13:13 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 61 00 00 00 15 08 06 00 00 00 56 b5 80 74 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 02 66 49 44 41 54 68 43 ed 98 ad 92 13 41 10 c7 7b f7 0d c0 51 18 3e 72 27 28 0c 54 61 12 49 21 36 1a ce c6 5d e4 bd c0 49 1e 20 e7 c8 39 2c 20 30 24 0a 99 18 04 06 75 09 1f 06 24 c7 0b c0 f1 eb d9 9e 65 92 cb c5 65 76 aa 98 5f ed 64 76 3e 77 d3 dd fb ef 6c 0a 79 f1 e7 42 3c 17 9c 96 a5 35 32 b1 c8 16 4f 80 ec 84 04 c8 4e 48 80 ec 84 04 88 ef 84 eb 22 93 67 fc 06 38 b4 c2 f9 21 7d 6d 31 b1 7b e8 5a bb 0d a2 3b 61 f4 58 a4 a2 1e 9e 8a 14 6f 44 a6 d7 44 c6 f4 b5 69 84 b6 89 ee 84 7d 8c ae 7c d2 8f 9f 22 7d Data Ascii: PNGIHDRaVtsRGBgAMAapHYs(JfIDAThCA{Q>r'(TaI!6]I 9, 0$u$eev_dv>wlyB<52ONH"g8!}m1{Z;aXoDDi}\|"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49847	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:14 UTC	419	OUT	GET /favicon.ico HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD
2024-02-20 15:13:14 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: PHP/8.3.3 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:26 GMT Content-Length: 56800 Connection: close
2024-02-20 15:13:14 UTC	5359	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 20 74 65 6d 70 6c 61 74 65 3d 22 2f 54 65 6d 70 6c 61 74 65 73 2f 4e 45 57 2d 74 65 6d 70 6c 61 74 65 2e 64 77 74 2e 70 68 70 22 20 63 6f 64 65 4f 75 74 73 69 64 65 48 54 4d 4c 49 73 4c 6f 63 6b 65 64 3d 22 66 61 6c 73 65 22 20 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 45 64 69 74 61 62 6c 65 20 6e 61 6d 65 3d 22 68 65 61 64 22 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 45 6e 64 45 64 69 74 61 62 6c 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 48 65 61 64 20 42 45 47 49 4e 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d Data Ascii: <!DOCTYPE html> <html class="no-js" lang="en">... InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" --><head>... InstanceBeginEditable name="head" -->... InstanceEndEditable -->... Head BEGIN --><!-
2024-02-20 15:13:14 UTC	11584	IN	Data Raw: 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 6e 61 76 62 61 72 2d 64 61 72 6b 20 6e 61 76 62 61 72 2d 73 74 61 74 69 63 2d 74 6f 70 20 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 6e 6f 2d 6d 61 72 67 69 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 20 69 64 3d 22 6e 61 76 62 61 72 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: style="padding: 0;"> <nav class="navbar navbar-default navbar-dark navbar-static-top no-border-radius no-margin" style="top: 0;"> <div class="container-fluid" id="navbar-inner-container">
2024-02-20 15:13:14 UTC	8688	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 64 72 6f 70 64 6f 77 6e 2d 72 69 67 68 74 20 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 70 72 6f 73 2f 69 6e 64 65 78 2e 70 68 70 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6a 75 73 74 69 66 79 3b 22 20 74 69 74 6c 65 3d 22 54 61 78 20 Data Ascii: <li class="dropdown dropdown-right widget-default clearfix pad-0-25-sm"> <a href="/pros/index.php" style="font-size: 14px; font-weight: 700; color: #222; text-align: justify;" title="Tax
2024-02-20 15:13:14 UTC	1448	IN	Data Raw: 09 09 09 09 09 09 09 09 09 35 30 32 49 4e 4a 0d 0a 09 09 09 09 09 09 09 09 09 09 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 49 6e 6a 75 72 65 64 20 53 70 6f 75 73 65 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 30 32 52 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 30 32 52 0d 0a 09 09 09 09 09 09 09 09 09 09 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 52 65 74 69 72 65 6d 65 6e 74 20 49 6e 63 6f 6d 65 22 3e 35 30 32 52 0d 0a 09 09 09 09 09 09 09 09 09 09 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 52 65 74 69 72 65 6d 65 6e 74 20 49 6e 63 6f 6d 65 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 Data Ascii: 502INJ-Injured Spouse</option><option value="/forms/23_forms/502R.pdf" label="502R-Retirement Income">502R-Retirement Income</option><option value="/for
2024-02-20 15:13:14 UTC	5792	IN	Data Raw: 0d 0a 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 30 35 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 30 35 20 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 4e 6f 6e 72 65 73 69 64 65 6e 74 20 52 65 74 75 72 6e 22 3e 35 30 35 20 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 4e 6f 6e 72 65 73 69 64 65 6e 74 20 52 65 74 75 72 6e 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 30 35 4e 52 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 30 35 4e 52 0d 0a 09 09 09 09 09 09 09 09 09 09 2d 20 4e 52 0d 0a 09 09 09 09 09 09 09 09 09 09 43 6f 6d 70 75 74 61 74 69 6f 6e 22 3e 0d 0a 09 09 09 09 09 09 Data Ascii: <option value="/forms/23_forms/505.pdf" label="505 -Nonresident Return">505 -Nonresident Return</option><option value="/forms/23_forms/505NR.pdf" label="505NR- NRComputation">
2024-02-20 15:13:14 UTC	1448	IN	Data Raw: 61 72 22 3e 57 68 61 74 27 73 20 4e 65 77 20 54 68 69 73 20 54 61 78 20 59 65 61 72 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 20 20 20 20 3c 62 72 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 69 6e 73 74 72 75 63 74 69 6f 6e 2d 62 6f 6f 6b 6c 65 74 73 32 30 32 33 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 49 6e 64 69 76 69 64 75 61 6c 20 54 61 78 20 49 6e 73 74 72 75 63 74 69 6f 6e 73 22 3e 49 6e 64 69 76 69 64 75 61 6c 20 54 61 78 20 49 6e 73 74 72 75 63 74 69 6f 6e 73 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 20 20 3c 62 72 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 74 65 72 61 63 74 69 76 65 2e 6d 61 72 79 6c 61 6e 64 Data Ascii: ar">What's New This Tax Year</a> <br><a href="/instruction-booklets2023.php" class="menu-link-text" title="Individual Tax Instructions">Individual Tax Instructions</a> <br><a href="https://interactive.maryland
2024-02-20 15:13:14 UTC	5792	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 72 6f 77 2d 61 75 74 6f 68 65 69 67 68 74 20 6e 6f 2d 6d 61 72 67 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 36 20 63 6f 6c 2d 6d 64 2d 36 20 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 61 75 74 6f 68 65 69 67 68 74 20 63 6c 65 61 72 66 69 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 Data Ascii: <div class="row row-autoheight no-margin"> <div class="col-lg-6 col-md-6 col-sm-6 col-xs-12 col-autoheight clearfix"> <div class="widget-default clearfix pad-0-25-sm">
2024-02-20 15:13:14 UTC	1448	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 75 6e 63 6c 61 69 6d 65 64 2d 70 72 6f 70 65 72 74 79 2f 69 6e 64 65 78 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 55 6e 63 6c 61 69 6d 65 64 20 50 72 6f 70 65 72 74 79 22 3e 55 6e 63 6c 61 69 6d 65 64 20 50 72 6f 70 65 72 74 79 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <a href="/unclaimed-property/index.php" class="menu-link-text" title="Unclaimed Property">Unclaimed Property</a> </div> </div>
2024-02-20 15:13:14 UTC	5792	IN	Data Raw: 78 74 22 20 74 69 74 6c 65 3d 22 4f 66 66 69 63 65 20 6f 66 20 4c 65 67 69 73 6c 61 74 69 76 65 20 41 66 66 61 69 72 73 20 53 74 61 74 65 20 41 67 65 6e 63 79 20 46 72 61 75 64 20 52 65 70 6f 72 74 69 6e 67 22 3e 4f 66 66 69 63 65 20 6f 66 20 4c 65 67 69 73 6c 61 74 69 76 65 20 41 66 66 61 69 72 73 20 53 74 61 74 65 20 41 67 65 6e 63 79 20 46 72 61 75 64 20 52 65 70 6f 72 74 69 6e 67 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 74 61 78 2d 73 65 63 75 72 69 74 79 2f 69 64 65 Data Ascii: xt" title="Office of Legislative Affairs State Agency Fraud Reporting">Office of Legislative Affairs State Agency Fraud Reporting</a> <hr> <a href="/tax-security/ide
2024-02-20 15:13:14 UTC	1448	IN	Data Raw: 69 63 65 73 20 28 4f 46 50 29 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 09 09 09 09 09 09 09 09 09 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 68 65 61 72 69 6e 67 73 2d 61 70 70 65 61 6c 73 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 48 65 61 72 69 6e 67 73 20 26 61 6d 70 3b 20 41 70 70 65 61 6c 73 22 3e 20 48 65 61 72 69 6e 67 73 20 26 61 6d 70 3b 20 41 70 70 65 61 6c 73 20 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 68 72 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 Data Ascii: ices (OFP) </a><hr> <a href="/divisions/hearings-appeals.php" class="menu-link-text" title="Hearings & Appeals"> Hearings & Appeals </a><hr> <a href="/divisions/hr.php" class="menu-link-text"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49846	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:14 UTC	1289	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23mainContent&bp=3&app=717c68634dfb8989&crc=896692844&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:14 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:14 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:14 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49850	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:16 UTC	1243	OUT	GET /rptp/portal/home HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-TOKEN--rptp-portal-home=1DD408A0D9976DACCC66B6E1BCAE167AC078F97C511089DCFA39D1D47590FB47F6CF643E60C94D6763A70F855B4CCE779C8D; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:16 UTC	788	IN	HTTP/1.1 302 Found Date: Tue, 20 Feb 2024 15:13:16 GMT Content-Length: 0 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Location: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-998685031" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49849	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:16 UTC	1389	OUT	GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-TOKEN--rptp-portal-home=1DD408A0D9976DACCC66B6E1BCAE167AC078F97C511089DCFA39D1D47590FB47F6CF643E60C94D6763A70F855B4CCE779C8D; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441987.0.0.0; rxvt=1708443787992\|1708441968947; dtPC=-2$241986942_943h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:16 UTC	1289	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: X-TOKEN--rptp-portal-home=D1EF67787F46B0ABE3B6F9949ECEE6CF2A8BDA62B8F80D00BC1877B110CC5ADC81E8E5BFC6A26A21D8112CDF332379C3C6EF; Path=/rptp/portal/home; HttpOnly; Secure; SameSite=Strict X-TOKEN: D1EF67787F46B0ABE3B6F9949ECEE6CF2A8BDA62B8F80D00BC1877B110CC5ADC81E8E5BFC6A26A21D8112CDF332379C3C6EF X-Frame-Options: SAMEORIGIN Content-Location: /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Pragma: no-cache Vary: Cookie,User-Agent Server-Timing: dtSInfo;desc="0", dtRpid;desc="1454466129" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en
2024-02-20 15:13:16 UTC	15095	IN	Data Raw: 33 66 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 3c 21 2d 2d 20 72 65 6c 3d 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 20 69 6e 64 69 63 61 74 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 Data Ascii: 3fc0<!DOCTYPE html><html lang="en" ><head><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=Edge">... rel=dynamic-content indicates an element
2024-02-20 15:13:16 UTC	16384	IN	Data Raw: 29 3b 0d 0a 09 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 73 69 74 65 57 69 64 65 48 65 6c 70 4c 69 6e 6b 22 20 74 69 74 6c 65 3d 22 47 6c 6f 62 61 6c 20 48 65 6c 70 22 3e 0d 0a 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 63 65 73 73 69 62 6c 65 54 65 78 74 22 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 3c 2f 73 70 61 6e 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 0d 0a 3c 2f 61 3e 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 72 65 6e 64 65 72 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 69 6e 20 74 6f 70 20 6c 69 6e 6b 73 20 2d 2d 3e 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 45 6e 64 20 2d 2d 3e 3c Data Ascii: );}</script>...<a href="#void" id="siteWideHelpLink" title="Global Help"><span class="accessibleText">Global Help</span>Global Help</a>-->... This next line of code is to render Chat Now link in top links -->... Chat Now link End --><
2024-02-20 15:13:16 UTC	16384	IN	Data Raw: 6e 74 69 6e 66 6f 22 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 6f 70 4d 61 72 67 69 6e 44 62 6c 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 22 3e 0d 0a 09 09 0d 0a 09 09 3c 2f 64 69 76 3e 20 20 20 20 0d 0a 09 3c 2f 64 69 76 3e 20 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 21 2d 2d 20 45 4e 44 20 66 6f 6f 74 65 72 20 2d 2d 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 44 69 76 20 45 6e 64 20 2d 2d 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 73 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 64 65 66 69 6e 65 20 61 6e 64 20 69 6e 69 74 69 61 6c 69 7a 65 20 61 20 44 Data Ascii: ntinfo"><div class="row topMarginDbl"><div class="col-sm-12"></div> </div> </div>... END footer --></div></c:if></c:if>... Chat Now Div End -->... This next lines of code is to define and initialize a D
2024-02-20 15:13:16 UTC	16384	IN	Data Raw: 6e 65 40 72 65 73 3a 2f 49 54 53 43 54 68 65 6d 65 44 79 6e 61 6d 69 63 2f 74 68 65 6d 65 73 2f 68 74 6d 6c 2f 64 79 6e 61 6d 69 63 53 70 6f 74 73 2f 73 65 61 72 63 68 5f 6d 6f 62 69 6c 65 2e 6a 73 70 22 3e 3c 2f 61 3e 2d 2d 3e 0d 0a 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 2d 2d 3e 0d 0a 09 09 09 09 20 20 3c 2f 6e 61 76 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 68 65 61 64 65 72 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 2d 62 6f 64 79 22 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 61 74 61 53 65 63 20 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 20 3c 21 2d 2d 20 63 6f 6e 74 61 Data Ascii: ne@res:/ITSCThemeDynamic/themes/html/dynamicSpots/search_mobile.jsp"></a>--></div>... /.navbar-collapse --> </nav></div></div></div></header><div class="layout-body"><div class="dataSec container-fluid"> ... conta
2024-02-20 15:13:16 UTC	8529	IN	Data Raw: 74 69 6f 6e 20 4e 75 6d 62 65 72 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 63 6f 6c 2d 6c 67 2d 34 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 20 70 61 6e 65 6c 2d 64 65 66 61 75 6c 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 54 61 78 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 73 22 20 73 72 63 3d 22 2f 49 54 53 43 54 68 65 6d 65 53 74 61 74 69 63 2f 74 68 65 6d 65 73 2f 50 6f 72 74 61 6c 38 2e 35 2f 69 6d 67 2f 54 61 78 2d 50 72 6f 66 65 73 73 69 6f 6e 61 6c Data Ascii: tion Number</a></div></div></div></div></div></div><div class="row"><div class="col-12 col-lg-4"><div class="panel panel-default"><div class="panel-heading"><img alt="Tax Professionals" src="/ITSCThemeStatic/themes/Portal8.5/img/Tax-Professional

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49851	142.250.72.110	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:16 UTC	858	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:17 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:13:17 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:17 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-02-20 15:13:17 UTC	1252	IN	Data Raw: 66 62 2c 67 62 2c 68 62 2c 69 62 2c 77 2c 6a 62 2c 6d 62 2c 6f 62 2c 73 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b Data Ascii: fb,gb,hb,ib,w,jb,mb,ob,sb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;
2024-02-20 15:13:17 UTC	1252	IN	Data Raw: 28 30 29 2b 66 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b Data Ascii: (0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};
2024-02-20 15:13:17 UTC	1252	IN	Data Raw: 53 63 72 69 70 74 28 61 29 3a 61 3b 62 3d 6e 65 77 20 53 61 3b 62 2e 6e 67 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 61 29 72 65 74 75 72 6e 20 61 2e 6e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 41 22 29 3b 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 57 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 59 61 2e 61 70 70 6c 79 28 31 2c Data Ascii: Script(a):a;b=new Sa;b.ng=a;return b};_.Ua=function(a){if(a instanceof Sa)return a.ng;throw Error("A");};Va=function(){};Xa=function(a){return new _.Wa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.$a=function(a){var b=_.Ya.apply(1,
2024-02-20 15:13:17 UTC	1252	IN	Data Raw: 28 22 61 22 29 3b 7d 3b 69 62 3d 68 62 28 74 68 69 73 29 3b 0a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 69 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 67 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ("a");};ib=hb(this);w=function(a,b){if(b)a:{var c=ib;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&gb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){
2024-02-20 15:13:17 UTC	1252	IN	Data Raw: 61 29 29 3b 7d 3b 5f 2e 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 78 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6d 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: a));};_.lb=function(a){if(!(a instanceof Array)){a=_.x(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};mb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.nb=function(){functi
2024-02-20 15:13:17 UTC	1252	IN	Data Raw: 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b 7d 7d 29 3b 77 28 22 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f Data Ascii: )b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{}});w("Reflect.construct",function(){return _.nb});w("Reflect.setPrototypeOf",function(a){return a?a:sb?function(b,c){try{return sb(b,c),!0}catch(d){return!1}}:null});w("Promise",functio
2024-02-20 15:13:17 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 62 61 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 Data Ascii: function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}"function"==typeof h?this.ba(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`
2024-02-20 15:13:17 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 28 71 2c 70 29 7b 6d 3d 71 3b 6e 3d 70 7d 29 3b 74 68 69 73 2e 4c 63 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d Data Ascii: nction(q,p){m=q;n=p});this.Lc(l(g,m),l(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Lc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null=
2024-02-20 15:13:17 UTC	1252	IN	Data Raw: 3d 3d 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 75 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 67 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b Data Ascii: ===m}function d(l){if(!ub(l,f)){var m=new b;gb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49853	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:19 UTC	1788	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0%2F&bp=3&app=717c68634dfb8989&crc=4042273332&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 6136 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441997.0.0.0; rxvt=1708443797402\|1708441968947; dtPC=-2$241995968_128h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:19 UTC	6136	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 72 70 74 70 25 32 46 70 6f 72 74 61 6c 25 32 46 68 6f 6d 65 25 32 46 21 75 74 25 32 46 70 25 32 46 7a 31 25 32 46 30 34 5f 53 6a 39 43 50 79 6b 73 73 79 30 78 50 4c 4d 6e 4d 7a 30 76 4d 41 66 49 6a 6f 38 7a 69 6a 53 30 4d 6e 4e 30 39 44 49 79 38 33 45 4f 44 6a 51 77 63 5f 52 31 44 54 63 49 63 76 59 41 73 45 5f 31 77 51 67 71 69 67 4e 49 47 4f 49 43 6a 41 56 42 5f 46 43 45 6c 42 62 6b 52 42 75 6d 4f 69 6f 6f 41 37 59 46 63 4c 51 21 21 25 32 46 64 7a 25 32 46 64 35 25 32 46 4c 32 64 4a 51 53 45 76 55 55 74 33 51 53 38 30 54 6d 78 46 4c 31 6f 32 58 7a 4d 34 4d 45 4e 48 53 44 41 79 53 6b 64 56 55 7a 49 77 51 55 39 42 56 54 52 57 51 55 6f 79 4d 45 45 30 25 32 46 24 74 76 74 3d 31 37 30 38 34 34 31 39 38 35 39 39 38 24 74 76 6d 3d 69 31 Data Ascii: $tvn=%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0%2F$tvt=1708441985998$tvm=i1
2024-02-20 15:13:19 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:19 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:19 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49854	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:19 UTC	1316	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dJQSEvUUt3QS80TmxFL1o2XzM4MENHSDAySkdVUzIwQU9BVTRWQUoyMEE0%2F&bp=3&app=717c68634dfb8989&crc=4042273332&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441997.0.0.0; rxvt=1708443797402\|1708441968947; dtPC=-2$241995968_128h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:19 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:19 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:19 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49855	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:20 UTC	1708	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2533786512&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 1731 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441997.0.0.0; rxvt=1708443797402\|1708441968947; dtPC=-2$241995968_128h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:20 UTC	1731	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 31 39 39 35 30 32 36 25 37 43 31 37 30 38 34 34 31 39 39 37 34 30 35 25 37 43 64 6e 25 37 43 35 31 31 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 30 38 34 34 31 39 39 35 30 32 36 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 31 34 31 30 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 36 34 39 25 37 43 56 43 44 53 25 37 43 32 25 37 43 56 43 53 25 37 43 32 34 34 39 25 37 43 56 43 4f 25 37 43 33 39 39 32 25 37 43 56 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708441995026%7C1708441997405%7Cdn%7C511%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1708441995026%7C_vc_%7CV%7C1410%5Epc%7CVCD%7C1649%7CVCDS%7C2%7CVCS%7C2449%7CVCO%7C3992%7CVC
2024-02-20 15:13:20 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:20 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:20 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49856	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:21 UTC	1276	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2533786512&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441997.0.0.0; rxvt=1708443797402\|1708441968947; dtPC=-2$241995968_128h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:21 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:21 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:21 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49857	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:21 UTC	1389	OUT	GET /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-TOKEN--rptp-portal-home=D1EF67787F46B0ABE3B6F9949ECEE6CF2A8BDA62B8F80D00BC1877B110CC5ADC81E8E5BFC6A26A21D8112CDF332379C3C6EF; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708441997.0.0.0; rxvt=1708443797402\|1708441968947; dtPC=-2$241995968_128h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:21 UTC	1288	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: X-TOKEN--rptp-portal-home=D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4; Path=/rptp/portal/home; HttpOnly; Secure; SameSite=Strict X-TOKEN: D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4 X-Frame-Options: SAMEORIGIN Content-Location: /rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Pragma: no-cache Vary: Cookie,User-Agent Server-Timing: dtSInfo;desc="0", dtRpid;desc="392448136" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en
2024-02-20 15:13:21 UTC	15096	IN	Data Raw: 66 66 66 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 3c 21 2d 2d 20 72 65 6c 3d 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 20 69 6e 64 69 63 61 74 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 Data Ascii: fff8<!DOCTYPE html><html lang="en" ><head><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=Edge">... rel=dynamic-content indicates an element
2024-02-20 15:13:21 UTC	16384	IN	Data Raw: 64 28 29 3b 0d 0a 09 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 73 69 74 65 57 69 64 65 48 65 6c 70 4c 69 6e 6b 22 20 74 69 74 6c 65 3d 22 47 6c 6f 62 61 6c 20 48 65 6c 70 22 3e 0d 0a 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 63 65 73 73 69 62 6c 65 54 65 78 74 22 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 3c 2f 73 70 61 6e 3e 47 6c 6f 62 61 6c 20 48 65 6c 70 0d 0a 3c 2f 61 3e 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 72 65 6e 64 65 72 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 69 6e 20 74 6f 70 20 6c 69 6e 6b 73 20 2d 2d 3e 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 45 6e 64 20 2d 2d Data Ascii: d();}</script>...<a href="#void" id="siteWideHelpLink" title="Global Help"><span class="accessibleText">Global Help</span>Global Help</a>-->... This next line of code is to render Chat Now link in top links -->... Chat Now link End --
2024-02-20 15:13:21 UTC	16384	IN	Data Raw: 22 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 6f 70 4d 61 72 67 69 6e 44 62 6c 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 22 3e 0d 0a 09 09 0d 0a 09 09 3c 2f 64 69 76 3e 20 20 20 20 0d 0a 09 3c 2f 64 69 76 3e 20 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 21 2d 2d 20 45 4e 44 20 66 6f 6f 74 65 72 20 2d 2d 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 44 69 76 20 45 6e 64 20 2d 2d 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 73 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 64 65 66 69 6e 65 20 61 6e 64 20 69 6e 69 74 69 61 6c 69 7a 65 20 61 20 44 69 76 20 74 6f 20 Data Ascii: "><div class="row topMarginDbl"><div class="col-sm-12"></div> </div> </div>... END footer --></div></c:if></c:if>... Chat Now Div End -->... This next lines of code is to define and initialize a Div to
2024-02-20 15:13:21 UTC	16384	IN	Data Raw: 3a 2f 49 54 53 43 54 68 65 6d 65 44 79 6e 61 6d 69 63 2f 74 68 65 6d 65 73 2f 68 74 6d 6c 2f 64 79 6e 61 6d 69 63 53 70 6f 74 73 2f 73 65 61 72 63 68 5f 6d 6f 62 69 6c 65 2e 6a 73 70 22 3e 3c 2f 61 3e 2d 2d 3e 0d 0a 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2f 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 2d 2d 3e 0d 0a 09 09 09 09 20 20 3c 2f 6e 61 76 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 68 65 61 64 65 72 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 2d 62 6f 64 79 22 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 61 74 61 53 65 63 20 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 20 3c 21 2d 2d 20 63 6f 6e 74 61 69 6e 65 72 20 64 Data Ascii: :/ITSCThemeDynamic/themes/html/dynamicSpots/search_mobile.jsp"></a>--></div>... /.navbar-collapse --> </nav></div></div></div></header><div class="layout-body"><div class="dataSec container-fluid"> ... container d
2024-02-20 15:13:21 UTC	8523	IN	Data Raw: 75 6d 62 65 72 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 63 6f 6c 2d 6c 67 2d 34 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 20 70 61 6e 65 6c 2d 64 65 66 61 75 6c 74 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 54 61 78 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 73 22 20 73 72 63 3d 22 2f 49 54 53 43 54 68 65 6d 65 53 74 61 74 69 63 2f 74 68 65 6d 65 73 2f 50 6f 72 74 61 6c 38 2e 35 2f 69 6d 67 2f 54 61 78 2d 50 72 6f 66 65 73 73 69 6f 6e 61 6c 73 2e 70 6e 67 22 Data Ascii: umber</a></div></div></div></div></div></div><div class="row"><div class="col-12 col-lg-4"><div class="panel panel-default"><div class="panel-heading"><img alt="Tax Professionals" src="/ITSCThemeStatic/themes/Portal8.5/img/Tax-Professionals.png"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49859	142.250.72.110	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:21 UTC	858	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:21 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:13:21 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:21 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-02-20 15:13:21 UTC	1252	IN	Data Raw: 66 62 2c 67 62 2c 68 62 2c 69 62 2c 77 2c 6a 62 2c 6d 62 2c 6f 62 2c 73 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b Data Ascii: fb,gb,hb,ib,w,jb,mb,ob,sb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;
2024-02-20 15:13:21 UTC	1252	IN	Data Raw: 28 30 29 2b 66 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b Data Ascii: (0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};
2024-02-20 15:13:21 UTC	1252	IN	Data Raw: 53 63 72 69 70 74 28 61 29 3a 61 3b 62 3d 6e 65 77 20 53 61 3b 62 2e 6e 67 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 61 29 72 65 74 75 72 6e 20 61 2e 6e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 41 22 29 3b 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 57 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 59 61 2e 61 70 70 6c 79 28 31 2c Data Ascii: Script(a):a;b=new Sa;b.ng=a;return b};_.Ua=function(a){if(a instanceof Sa)return a.ng;throw Error("A");};Va=function(){};Xa=function(a){return new _.Wa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.$a=function(a){var b=_.Ya.apply(1,
2024-02-20 15:13:21 UTC	1252	IN	Data Raw: 28 22 61 22 29 3b 7d 3b 69 62 3d 68 62 28 74 68 69 73 29 3b 0a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 69 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 67 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ("a");};ib=hb(this);w=function(a,b){if(b)a:{var c=ib;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&gb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){
2024-02-20 15:13:21 UTC	1252	IN	Data Raw: 61 29 29 3b 7d 3b 5f 2e 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 78 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6d 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: a));};_.lb=function(a){if(!(a instanceof Array)){a=_.x(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};mb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.nb=function(){functi
2024-02-20 15:13:21 UTC	1252	IN	Data Raw: 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b 7d 7d 29 3b 77 28 22 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f Data Ascii: )b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{}});w("Reflect.construct",function(){return _.nb});w("Reflect.setPrototypeOf",function(a){return a?a:sb?function(b,c){try{return sb(b,c),!0}catch(d){return!1}}:null});w("Promise",functio
2024-02-20 15:13:21 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 62 61 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 Data Ascii: function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}"function"==typeof h?this.ba(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`
2024-02-20 15:13:21 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 28 71 2c 70 29 7b 6d 3d 71 3b 6e 3d 70 7d 29 3b 74 68 69 73 2e 4c 63 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d Data Ascii: nction(q,p){m=q;n=p});this.Lc(l(g,m),l(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Lc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null=
2024-02-20 15:13:21 UTC	1252	IN	Data Raw: 3d 3d 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 75 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 67 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b Data Ascii: ===m}function d(l){if(!ub(l,f)){var m=new b;gb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49858	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:24 UTC	1715	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23void&bp=3&app=717c68634dfb8989&crc=1476524393&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 1761 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442001.0.0.0; rxvt=1708443801509\|1708441968947; dtPC=-2$242000773_875h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:24 UTC	1761	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 31 39 39 39 39 36 37 25 37 43 31 37 30 38 34 34 32 30 30 31 35 31 31 25 37 43 64 6e 25 37 43 35 31 31 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 62 67 25 37 43 31 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 30 38 34 34 31 39 39 39 39 36 37 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 31 31 38 30 25 35 45 70 62 25 37 43 56 43 44 25 37 43 31 33 32 32 25 37 43 56 43 44 53 25 37 43 36 25 37 43 56 43 53 25 37 43 31 36 30 31 25 37 43 56 43 4f 25 37 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708441999967%7C1708442001511%7Cdn%7C511%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%7Cbg%7C1%2C2%7C3%7C_event_%7C1708441999967%7C_vc_%7CV%7C1180%5Epb%7CVCD%7C1322%7CVCDS%7C6%7CVCS%7C1601%7CVCO%7C
2024-02-20 15:13:24 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:24 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:24 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49864	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:24 UTC	1283	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23void&bp=3&app=717c68634dfb8989&crc=1476524393&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442001.0.0.0; rxvt=1708443801509\|1708441968947; dtPC=-2$242000773_875h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:25 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:24 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:25 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49865	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:25 UTC	1259	OUT	GET /rptp/portal/home/new-user-signup HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-TOKEN--rptp-portal-home=D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442001.0.0.0; rxvt=1708443801509\|1708441968947; dtPC=-2$242000773_875h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:25 UTC	851	IN	HTTP/1.1 302 Found Date: Tue, 20 Feb 2024 15:13:25 GMT Content-Length: 0 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Location: https://mdtaxconnect.gov/rptp/portal/home/new-user-signup/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="935222621" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49866	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:25 UTC	1453	OUT	GET /rptp/portal/home/new-user-signup/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-TOKEN--rptp-portal-home=D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442001.0.0.0; rxvt=1708443801509\|1708441968947; dtPC=-2$242000773_875h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:25 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Location: /rptp/portal/home/new-user-signup/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Pragma: no-cache Vary: Cookie,User-Agent Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1227373980" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en
2024-02-20 15:13:25 UTC	15369	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 3c 21 2d 2d 20 72 65 6c 3d 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 20 69 6e 64 69 63 61 74 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 Data Ascii: 8000<!DOCTYPE html><html lang="en" ><head><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=Edge">... rel=dynamic-content indicates an element
2024-02-20 15:13:25 UTC	16384	IN	Data Raw: 64 65 72 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 69 6e 20 74 6f 70 20 6c 69 6e 6b 73 20 2d 2d 3e 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 6c 69 6e 6b 20 45 6e 64 20 2d 2d 3e 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 4c 6f 67 20 6f 75 74 20 6c 69 6e 6b 20 66 6f 72 20 6c 6f 67 67 65 64 20 69 6e 20 75 73 65 72 20 2d 2d 3e 3c 21 2d 2d 20 4c 6f 67 20 4f 75 74 20 4c 69 6e 6b 20 43 6f 64 65 20 45 6e 64 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 6e 67 75 61 67 65 20 66 6c 69 70 70 69 6e 67 20 2d 2d 3e 3c 21 2d 2d 20 43 6f 6d 6d 65 6e 74 65 64 20 62 61 73 65 64 20 6f 6e 20 4d 61 69 6c 20 64 61 74 65 64 20 32 31 2d 31 31 2d 32 30 31 34 20 77 69 74 68 20 73 75 62 6a 65 63 74 20 22 46 57 3a 20 43 75 73 74 6f 6d Data Ascii: der Chat Now link in top links -->... Chat Now link End -->... This next line of code is to Log out link for logged in user -->... Log Out Link Code End -->... Language flipping -->... Commented based on Mail dated 21-11-2014 with subject "FW: Custom
2024-02-20 15:13:25 UTC	16384	IN	Data Raw: 2d 2d 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 2f 63 3a 69 66 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 43 68 61 74 20 4e 6f 77 20 44 69 76 20 45 6e 64 20 2d 2d 3e 0d 0a 09 09 09 09 3c 21 2d 2d 20 54 68 69 73 20 6e 65 78 74 20 6c 69 6e 65 73 20 6f 66 20 63 6f 64 65 20 69 73 20 74 6f 20 64 65 66 69 6e 65 20 61 6e 64 20 69 6e 69 74 69 61 6c 69 7a 65 20 61 20 44 69 76 20 74 6f 20 6f 70 65 6e 20 61 73 20 6d 6f 64 65 6c 20 70 6f 70 20 75 70 20 6f 6e 20 63 6c 69 63 6b 69 6e 67 20 68 65 6c 70 20 2d 2d 3e 0d 0a 09 09 09 09 3c 64 69 76 20 69 64 3d 22 61 70 70 48 65 6c 70 44 69 76 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 69 64 3d 22 68 6c 70 44 69 76 49 64 22 3e Data Ascii: --></div></c:if></c:if>... Chat Now Div End -->... This next lines of code is to define and initialize a Div to open as model pop up on clicking help --><div id="appHelpDiv" style="display:none;"><div id="hlpDivId">
2024-02-20 15:13:25 UTC	7115	IN	Data Raw: 2d 2d 3e 0d 0a 09 09 09 09 20 20 3c 2f 6e 61 76 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 68 65 61 64 65 72 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 2d 62 6f 64 79 22 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 61 74 61 53 65 63 20 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 20 3c 21 2d 2d 20 63 6f 6e 74 61 69 6e 65 72 20 64 69 76 20 77 69 6c 6c 20 62 65 20 77 72 61 70 70 65 72 20 69 6e 20 74 68 65 6d 65 20 2d 2d 3e 0d 0a 0d 0a 09 09 09 09 3c 21 2d 2d 20 62 72 65 61 64 63 72 75 6d 62 20 2d 2d 3e 0d 0a 09 09 09 09 3c 6f 6c 20 63 6c 61 73 73 3d 22 62 72 65 61 64 63 72 75 6d 62 22 3e 0d 0a 09 09 09 09 09 0d 0a 09 09 09 09 09 09 09 3c 6c 69 3e 3c Data Ascii: --> </nav></div></div></div></header><div class="layout-body"><div class="dataSec container-fluid"> ... container div will be wrapper in theme -->... breadcrumb --><ol class="breadcrumb"><li><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49870	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:25 UTC	1708	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2578232784&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 6058 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442001.0.0.0; rxvt=1708443801509\|1708441968947; dtPC=-2$242000773_875h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:25 UTC	6058	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 72 70 74 70 25 32 46 70 6f 72 74 61 6c 25 32 46 68 6f 6d 65 25 32 46 21 75 74 25 32 46 70 25 32 46 7a 31 25 32 46 30 34 5f 53 6a 39 43 50 79 6b 73 73 79 30 78 50 4c 4d 6e 4d 7a 30 76 4d 41 66 49 6a 6f 38 7a 69 6a 53 30 4d 6e 4e 30 39 44 49 79 38 33 45 4f 44 6a 51 77 63 5f 52 31 44 54 63 49 63 76 59 41 73 45 5f 31 77 51 67 71 69 67 4e 49 47 4f 49 43 6a 41 56 42 5f 46 43 45 6c 42 62 6b 52 42 75 6d 4f 69 6f 6f 41 37 59 46 63 4c 51 21 21 25 32 46 64 7a 25 32 46 64 35 25 32 46 4c 32 64 42 49 53 45 76 5a 30 46 42 49 53 39 6e 51 53 45 68 25 32 46 24 74 76 74 3d 31 37 30 38 34 34 31 39 39 35 30 32 36 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 Data Ascii: $tvn=%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F$tvt=1708441995026$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$
2024-02-20 15:13:26 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:26 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:26 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49867	142.250.72.110	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:25 UTC	858	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:26 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:13:25 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:26 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-02-20 15:13:26 UTC	1252	IN	Data Raw: 66 62 2c 67 62 2c 68 62 2c 69 62 2c 77 2c 6a 62 2c 6d 62 2c 6f 62 2c 73 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b Data Ascii: fb,gb,hb,ib,w,jb,mb,ob,sb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;
2024-02-20 15:13:26 UTC	1252	IN	Data Raw: 28 30 29 2b 66 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b Data Ascii: (0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};
2024-02-20 15:13:26 UTC	1252	IN	Data Raw: 53 63 72 69 70 74 28 61 29 3a 61 3b 62 3d 6e 65 77 20 53 61 3b 62 2e 6e 67 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 61 29 72 65 74 75 72 6e 20 61 2e 6e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 41 22 29 3b 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 57 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 59 61 2e 61 70 70 6c 79 28 31 2c Data Ascii: Script(a):a;b=new Sa;b.ng=a;return b};_.Ua=function(a){if(a instanceof Sa)return a.ng;throw Error("A");};Va=function(){};Xa=function(a){return new _.Wa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.$a=function(a){var b=_.Ya.apply(1,
2024-02-20 15:13:26 UTC	1252	IN	Data Raw: 28 22 61 22 29 3b 7d 3b 69 62 3d 68 62 28 74 68 69 73 29 3b 0a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 69 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 67 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ("a");};ib=hb(this);w=function(a,b){if(b)a:{var c=ib;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&gb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){
2024-02-20 15:13:26 UTC	1252	IN	Data Raw: 61 29 29 3b 7d 3b 5f 2e 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 78 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6d 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: a));};_.lb=function(a){if(!(a instanceof Array)){a=_.x(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};mb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.nb=function(){functi
2024-02-20 15:13:26 UTC	1252	IN	Data Raw: 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b 7d 7d 29 3b 77 28 22 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f Data Ascii: )b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{}});w("Reflect.construct",function(){return _.nb});w("Reflect.setPrototypeOf",function(a){return a?a:sb?function(b,c){try{return sb(b,c),!0}catch(d){return!1}}:null});w("Promise",functio
2024-02-20 15:13:26 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 62 61 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 Data Ascii: function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}"function"==typeof h?this.ba(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`
2024-02-20 15:13:26 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 28 71 2c 70 29 7b 6d 3d 71 3b 6e 3d 70 7d 29 3b 74 68 69 73 2e 4c 63 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d Data Ascii: nction(q,p){m=q;n=p});this.Lc(l(g,m),l(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Lc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null=
2024-02-20 15:13:26 UTC	1252	IN	Data Raw: 3d 3d 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 75 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 67 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b Data Ascii: ===m}function d(l){if(!ub(l,f)){var m=new b;gb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49874	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:27 UTC	1276	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2578232784&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:27 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:27 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:27 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49876	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:28 UTC	1713	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23void&bp=3&app=717c68634dfb8989&crc=42096834&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 6752 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:28 UTC	6752	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 72 70 74 70 25 32 46 70 6f 72 74 61 6c 25 32 46 68 6f 6d 65 25 32 46 21 75 74 25 32 46 70 25 32 46 7a 31 25 32 46 30 34 5f 53 6a 39 43 50 79 6b 73 73 79 30 78 50 4c 4d 6e 4d 7a 30 76 4d 41 66 49 6a 6f 38 7a 69 6a 53 30 4d 6e 4e 30 39 44 49 79 38 33 45 4f 44 6a 51 77 63 5f 52 31 44 54 63 49 63 76 59 41 73 45 5f 31 77 51 67 71 69 67 4e 49 47 4f 49 43 6a 41 56 42 5f 46 43 45 6c 42 62 6b 52 42 75 6d 4f 69 6f 6f 41 37 59 46 63 4c 51 21 21 25 32 46 64 7a 25 32 46 64 35 25 32 46 4c 32 64 42 49 53 45 76 5a 30 46 42 49 53 39 6e 51 53 45 68 25 32 46 24 74 76 74 3d 31 37 30 38 34 34 31 39 39 39 39 36 37 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 Data Ascii: $tvn=%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F$tvt=1708441999967$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$
2024-02-20 15:13:29 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:29 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49877	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:29 UTC	1838	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fnew-user-signup%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2217819383&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 1823 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/new-user-signup/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:29 UTC	1823	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 32 30 30 33 39 37 33 25 37 43 31 37 30 38 34 34 32 30 30 36 32 35 38 25 37 43 64 6e 25 37 43 34 30 38 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 30 38 34 34 32 30 30 33 39 37 33 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 31 35 37 30 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 36 33 34 25 37 43 56 43 44 53 25 37 43 32 25 37 43 56 43 53 25 37 43 32 33 34 35 25 37 43 56 43 4f 25 37 43 33 38 35 38 25 37 43 56 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708442003973%7C1708442006258%7Cdn%7C408%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1708442003973%7C_vc_%7CV%7C1570%5Epc%7CVCD%7C1634%7CVCDS%7C2%7CVCS%7C2345%7CVCO%7C3858%7CVC
2024-02-20 15:13:29 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:29 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49879	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:29 UTC	666	OUT	GET /MDTaxConnect/index.php HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:29 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: PHP/8.3.3 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:42 GMT Content-Length: 69069 Connection: close
2024-02-20 15:13:29 UTC	3911	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 20 74 65 6d 70 6c 61 74 65 3d 22 2f 54 65 6d 70 6c 61 74 65 73 2f 63 6f 6e 74 65 6e 74 2d 74 65 6d 70 6c 61 74 65 2e 64 77 74 2e 70 68 70 22 20 63 6f 64 65 4f 75 74 73 69 64 65 48 54 4d 4c 49 73 4c 6f 63 6b 65 64 3d 22 66 61 6c 73 65 22 20 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 45 64 69 74 61 62 6c 65 20 6e 61 6d 65 3d 22 68 65 61 64 22 20 2d 2d 3e 0d 0a 09 3c 74 69 74 6c 65 3e 4d 61 72 79 6c 61 6e 64 20 54 61 78 20 43 6f 6e 6e 65 63 74 3c 2f 74 69 74 6c 65 3e 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 44 Data Ascii: <!DOCTYPE html> <html class="no-js" lang="en">... InstanceBegin template="/Templates/content-template.dwt.php" codeOutsideHTMLIsLocked="false" --><head>... InstanceBeginEditable name="head" --><title>Maryland Tax Connect</title><meta name="D
2024-02-20 15:13:29 UTC	7240	IN	Data Raw: 22 6c 2d 69 6e 6c 69 6e 65 2d 6c 69 73 74 20 6d 61 69 6e 2d 6e 61 76 20 6c 2d 67 72 6f 75 70 20 74 72 69 67 67 65 72 2d 68 6f 76 65 72 22 3e 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 74 79 6c 65 20 61 6c 69 67 6e 73 20 74 68 65 20 74 65 78 74 20 69 6e 20 63 65 6e 74 65 72 20 2d 2d 3e 20 0d 0a 09 09 09 09 09 09 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 74 61 74 69 63 22 3e 3c 61 20 68 72 65 66 3d 22 2f 63 6f 6e 74 61 63 74 2d 75 73 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 Data Ascii: "l-inline-list main-nav l-group trigger-hover"> ... style aligns the text in center --> <li class="static"><a href="/contact-us.php" class="menu-li
2024-02-20 15:13:29 UTC	7240	IN	Data Raw: 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 46 69 6c 65 20 66 6f 72 20 66 72 65 65 20 6f 6e 6c 69 6e 65 22 3e 46 69 6c 65 20 66 6f 72 20 66 72 65 65 20 6f 6e 6c 69 6e 65 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 69 6e 64 69 76 69 64 75 61 6c 2f 74 61 78 2d 61 73 73 69 73 74 61 6e 63 65 2f 66 72 65 65 2d 74 61 78 2d 70 72 65 70 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 46 69 6c 65 20 66 6f 72 20 66 72 65 65 20 69 Data Ascii: aria-label="File for free online">File for free online</a> <hr> <a href="/individual/tax-assistance/free-tax-prep.php" class="menu-link-text" title="File for free i
2024-02-20 15:13:29 UTC	7240	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 70 72 6f 73 2f 74 61 78 2d 70 72 6f 2d 66 61 71 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 46 41 51 22 3e 46 41 51 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <hr> <a href="/pros/tax-pro-faq.php" class="menu-link-text" title="FAQ">FAQ</a> </div>
2024-02-20 15:13:29 UTC	7240	IN	Data Raw: 41 45 20 2d 20 49 6e 63 6f 6d 65 20 41 26 61 6d 70 3b 45 20 44 69 73 74 72 69 63 74 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 30 32 43 52 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 30 32 43 52 20 2d 20 54 61 78 20 43 72 65 64 69 74 73 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 35 30 32 43 52 0d 0a 09 09 09 09 09 09 09 09 09 09 2d 20 54 61 78 0d 0a 09 09 09 09 09 09 09 09 09 09 43 72 65 64 69 74 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 30 32 49 4e 4a 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 30 32 49 4e 4a 20 2d 20 49 6e 6a 75 72 Data Ascii: AE - Income A&E District</option><option value="/forms/23_forms/502CR.pdf" label="502CR - Tax Credits">502CR- TaxCredits</option><option value="/forms/23_forms/502INJ.pdf" label="502INJ - Injur
2024-02-20 15:13:29 UTC	7240	IN	Data Raw: 67 68 74 20 63 6c 65 61 72 66 69 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 22 3e 50 4f 50 55 4c 41 52 3c 2f 70 3e 20 20 20 20 20 20 20 20 20 09 09 09 0d 0a 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 6e 65 77 2d 74 61 78 2d 79 65 61 72 2d 75 70 64 61 74 65 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 57 68 61 74 27 73 20 4e Data Ascii: ght clearfix"> <div class="widget-default clearfix pad-0-25-sm"><p style="font-size: 14px; font-weight: 700;">POPULAR</p> <a href="/new-tax-year-update.php" class="menu-link-text" title="What's N
2024-02-20 15:13:29 UTC	4344	IN	Data Raw: 09 09 09 0d 0a 09 09 09 09 09 09 09 09 09 09 09 0d 0a 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 74 65 72 61 63 74 69 76 65 32 2e 6d 61 72 79 6c 61 6e 64 74 61 78 65 73 2e 67 6f 76 2f 45 49 54 43 41 73 73 69 73 74 61 6e 74 2f 22 20 74 69 74 6c 65 3d 22 45 61 72 6e 65 64 20 49 6e 63 6f 6d 65 20 54 61 78 20 43 72 65 64 69 74 20 41 73 73 69 73 74 61 6e 74 22 3e 45 49 54 43 20 41 73 73 69 73 74 61 6e 74 3c 2f 61 3e 09 0d 0a 09 09 09 09 09 09 09 09 09 09 09 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <a href="https://interactive2.marylandtaxes.gov/EITCAssistant/" title="Earned Income Tax Credit Assistant">EITC Assistant</a> <br>
2024-02-20 15:13:29 UTC	2896	IN	Data Raw: 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 6e 6f 2d 70 61 64 64 69 6e 67 22 20 64 61 74 61 2d 61 64 6a 75 73 74 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 72 6f 77 2d 61 75 74 6f 68 65 69 67 68 74 20 6e 6f 2d 6d 61 72 67 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 36 20 63 6f 6c 2d 6d 64 2d 36 20 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 61 75 74 6f 68 65 69 67 68 74 20 63 6c 65 61 72 66 69 78 22 3e 0d 0a 20 20 20 20 20 Data Ascii: s="dropdown-menu no-border-radius no-padding" data-adjust="2"> <div class="row row-autoheight no-margin"> <div class="col-lg-6 col-md-6 col-sm-6 col-xs-12 col-autoheight clearfix">
2024-02-20 15:13:29 UTC	1448	IN	Data Raw: 73 2f 6f 72 6d 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 4f 66 66 69 63 65 20 6f 66 20 52 69 73 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 28 4f 52 4d 29 22 3e 20 4f 66 66 69 63 65 20 6f 66 20 52 69 73 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 28 4f 52 4d 29 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 6f 66 70 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 4f 66 66 69 63 65 20 6f 66 20 46 61 69 72 20 50 72 61 63 74 69 63 65 73 20 28 4f 46 50 29 22 3e 20 4f 66 66 69 63 65 Data Ascii: s/orm.php" class="menu-link-text" title="Office of Risk Management (ORM)"> Office of Risk Management (ORM) </a><hr> <a href="/divisions/ofp.php" class="menu-link-text" title="Office of Fair Practices (OFP)"> Office
2024-02-20 15:13:29 UTC	2896	IN	Data Raw: 74 3d 30 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 69 74 6c 65 3d 22 4a 6f 62 20 50 6f 73 74 69 6e 67 73 22 3e 4a 6f 62 20 50 6f 73 74 69 6e 67 73 3c 2f 61 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 2d 61 6c 74 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 20 33 70 78 3b 22 20 74 69 74 6c 65 3d 22 4f 70 65 6e 20 69 6e 20 6e 65 77 20 77 69 6e 64 6f 77 22 3e 3c 2f 69 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 3c 62 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 69 6e 64 69 76 69 64 75 61 6c 2f 74 61 78 2d 61 73 Data Ascii: t=0" target="_blank" title="Job Postings">Job Postings</a><i class="fa fa-external-link-alt" aria-hidden="true" style="padding: 3px;" title="Open in new window"></i><br> <a href="/individual/tax-as

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49881	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:29 UTC	1281	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy83EODjQwc_R1DTcIcvYAsE_1wQgqigNIGOICjAVB_FCElBbkRBumOiooA7YFcLQ!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F%23void&bp=3&app=717c68634dfb8989&crc=42096834&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:29 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:29 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:29 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49880	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:29 UTC	608	OUT	GET /assests/js/jquery-newsticker/ticker-style.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:29 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: PHP/8.3.3 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:42 GMT Content-Length: 56800 Connection: close
2024-02-20 15:13:29 UTC	6807	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 20 74 65 6d 70 6c 61 74 65 3d 22 2f 54 65 6d 70 6c 61 74 65 73 2f 4e 45 57 2d 74 65 6d 70 6c 61 74 65 2e 64 77 74 2e 70 68 70 22 20 63 6f 64 65 4f 75 74 73 69 64 65 48 54 4d 4c 49 73 4c 6f 63 6b 65 64 3d 22 66 61 6c 73 65 22 20 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 45 64 69 74 61 62 6c 65 20 6e 61 6d 65 3d 22 68 65 61 64 22 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 45 6e 64 45 64 69 74 61 62 6c 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 48 65 61 64 20 42 45 47 49 4e 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d Data Ascii: <!DOCTYPE html> <html class="no-js" lang="en">... InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" --><head>... InstanceBeginEditable name="head" -->... InstanceEndEditable -->... Head BEGIN --><!-
2024-02-20 15:13:29 UTC	8688	IN	Data Raw: 2d 78 73 2d 36 22 3e 0d 0a 09 09 09 09 09 09 09 20 20 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 36 70 78 3b 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 75 64 79 2d 6f 6c 64 2d 73 74 79 6c 65 2c 20 73 65 72 69 66 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 35 30 70 78 3b 22 3e 43 4f 4d 50 54 52 4f 4c 4c 45 52 26 6e 62 73 70 3b 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 75 64 79 2d 6f 6c 64 2d 73 74 79 6c 65 2c 20 73 65 72 69 66 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: -xs-6"> <p style="font-size: 36px; color: white; font-family: goudy-old-style, serif; font-weight: 400; justify-content: center; display: flex; padding-left: 250px;">COMPTROLLER  <span style="font-family: goudy-old-style, serif; font-weight
2024-02-20 15:13:29 UTC	7240	IN	Data Raw: 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 62 75 73 69 6e 65 73 73 2f 69 6e 63 6f 6d 65 2f 66 69 6c 69 6e 67 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 70 68 70 23 64 65 61 64 6c 69 6e 65 73 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 57 68 65 6e 20 74 6f 20 46 69 6c 65 22 3e 57 68 65 6e 20 74 6f 20 46 69 6c 65 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 62 75 73 69 6e 65 73 73 2f 62 75 73 69 6e 65 73 73 2d 66 61 71 73 2e 70 68 70 22 20 Data Ascii: <a href="/business/income/filing-information.php#deadlines" class="menu-link-text" title="When to File">When to File</a> <hr> <a href="/business/business-faqs.php"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49882	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:29 UTC	1342	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fnew-user-signup%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2217819383&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:30 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:29 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:30 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49885	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:30 UTC	589	OUT	GET /assests/css/solid-menu.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:30 UTC	503	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 01 May 2019 15:22:54 GMT Accept-Ranges: bytes ETag: "7ce28cbf310d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:43 GMT Content-Length: 168 Connection: close
2024-02-20 15:13:30 UTC	168	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 66 6f 6e 74 2d 69 63 6f 6e 73 2e 63 73 73 27 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 61 6e 69 6d 61 74 65 2e 63 73 73 27 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 73 6f 6c 69 64 2d 6d 65 6e 75 2d 63 6f 72 65 2e 63 73 73 27 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 73 6f 6c 69 64 2d 6d 65 6e 75 2d 6d 65 64 69 61 2e 63 73 73 27 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 73 6f 6c 69 64 2d 6d 65 6e 75 2d 74 68 65 6d 65 2e 63 73 73 27 29 3b Data Ascii: @import url('font-icons.css');@import url('animate.css');@import url('solid-menu-core.css');@import url('solid-menu-media.css');@import url('solid-menu-theme.css');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49883	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:30 UTC	585	OUT	GET /assests/css/styles.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:30 UTC	503	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Sat, 31 Aug 2019 04:22:11 GMT Accept-Ranges: bytes ETag: "2c1f7a8b35fd51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:43 GMT Content-Length: 173 Connection: close
2024-02-20 15:13:30 UTC	173	IN	Data Raw: 2f 2a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 27 29 3b 2a 2f 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 62 61 73 65 2e 63 73 73 27 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 6c 61 79 6f 75 74 2e 63 73 73 27 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 6d 6f 64 75 6c 65 2e 63 73 73 27 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 73 74 61 74 65 2e 63 73 73 27 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 74 68 65 6d 65 2e 63 73 73 27 29 3b Data Ascii: /@import url('bootstrap.min.css');/@import url('base.css');@import url('layout.css');@import url('module.css');@import url('state.css');@import url('theme.css');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49884	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:30 UTC	587	OUT	GET /assests/css/theme-01.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:30 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Mon, 30 Sep 2019 16:59:32 GMT Accept-Ranges: bytes ETag: "1be1896eb077d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:43 GMT Content-Length: 6130 Connection: close
2024-02-20 15:13:30 UTC	3858	IN	Data Raw: 2f 2a 20 2d 2d 2d 20 2a 2f 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 7b 0d 0a 20 20 2f 2a 20 6e 61 76 69 67 61 74 69 6f 6e 20 2a 2f 0d 0a 20 20 2f 2a 20 6d 61 69 6e 2d 6e 61 76 20 2a 2f 0d 0a 20 20 2f 2a 20 73 75 62 2d 6d 65 6e 75 2d 31 73 20 2a 2f 0d 0a 20 20 2f 2a 20 68 6f 6d 65 2d 6d 65 6e 75 20 2a 2f 0d 0a 20 20 2f 2a 20 62 75 74 74 6f 6e 73 20 2a 2f 0d 0a 20 20 2f 2a 20 74 61 62 73 20 2a 2f 0d 0a 20 20 2f 2a 20 62 6c 6f 67 20 2a 2f 0d 0a 20 20 2f 2a 20 66 6f 72 6d 73 20 2a 2f 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 64 69 76 23 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 39 39 66 66 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 64 69 76 23 6e 61 76 69 67 61 74 69 6f 6e 20 2e Data Ascii: /* --- /.solid-menus { / navigation / / main-nav / / sub-menu-1s / / home-menu / / buttons / / tabs / / blog / / forms */}.solid-menus div#navigation { background: #0099ff;}.solid-menus div#navigation .
2024-02-20 15:13:30 UTC	2272	IN	Data Raw: 69 6f 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 6c 69 64 65 55 70 2d 63 61 70 74 69 6f 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 6c 69 64 65 52 69 67 68 74 2d 63 61 70 74 69 6f 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 6c 69 64 65 4c 65 66 74 2d 63 61 70 74 69 6f 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 6c 69 64 65 44 69 61 67 6f 6e 61 6c 2d 54 4c 2d 63 61 70 74 69 6f 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 6c 69 64 65 44 69 61 67 6f 6e 61 6c 2d 54 52 2d 63 61 70 74 69 6f 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 6c 69 64 65 44 69 61 67 6f 6e 61 6c 2d 42 4c 2d 63 61 70 74 69 6f 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 6c 69 64 65 44 69 61 67 6f 6e Data Ascii: ion,.solid-menus .slideUp-caption,.solid-menus .slideRight-caption,.solid-menus .slideLeft-caption,.solid-menus .slideDiagonal-TL-caption,.solid-menus .slideDiagonal-TR-caption,.solid-menus .slideDiagonal-BL-caption,.solid-menus .slideDiagon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49887	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:30 UTC	606	OUT	GET /assests/css/font-awesome-5.10.2/css/all.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:30 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 12 Sep 2019 23:39:20 GMT Accept-Ranges: bytes ETag: "edf6a14cc369d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:43 GMT Content-Length: 70117 Connection: close
2024-02-20 15:13:30 UTC	5305	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 30 2e 32 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 0a 2e 66 61 73 2c 0a 2e 66 61 72 2c 0a 2e 66 61 6c 2c 0a 2e 66 61 64 2c 0a 2e 66 61 62 20 7b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 Data Ascii: /! Font Awesome Free 5.10.2 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fas,.far,.fal,.fad,.fab { -moz-osx-font-smoothing: graysc
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 33 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 30 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 31 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 32 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 37 22 3b 20 Data Ascii: angle-double-down:before { content: "\f103"; }.fa-angle-double-left:before { content: "\f100"; }.fa-angle-double-right:before { content: "\f101"; }.fa-angle-double-up:before { content: "\f102"; }.fa-angle-down:before { content: "\f107";
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 64 65 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 72 2d 62 61 74 74 65 72 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 64 66 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 72 2d 63 72 61 73 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 65 31 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 72 2d 73 69 64 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 65 34 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 72 65 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 64 37 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 72 65 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 Data Ascii: :before { content: "\f5de"; }.fa-car-battery:before { content: "\f5df"; }.fa-car-crash:before { content: "\f5e1"; }.fa-car-side:before { content: "\f5e4"; }.fa-caret-down:before { content: "\f0d7"; }.fa-caret-left:before { content: "
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 30 22 3b 20 7d 0a 0a 2e 66 61 2d 64 61 74 61 62 61 73 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 63 30 22 3b 20 7d 0a 0a 2e 66 61 2d 64 65 61 66 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 61 34 22 3b 20 7d 0a 0a 2e 66 61 2d 64 65 6c 69 63 69 6f 75 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 61 35 22 3b 20 7d 0a 0a 2e 66 61 2d 64 65 6d 6f 63 72 61 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 34 37 22 3b 20 7d 0a 0a 2e 66 61 2d 64 65 70 6c 6f 79 64 6f 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 38 65 22 3b 20 7d 0a 0a 2e 66 61 2d 64 65 73 6b 70 72 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f Data Ascii: 0"; }.fa-database:before { content: "\f1c0"; }.fa-deaf:before { content: "\f2a4"; }.fa-delicious:before { content: "\f1a5"; }.fa-democrat:before { content: "\f747"; }.fa-deploydog:before { content: "\f38e"; }.fa-deskpro:before { co
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 3a 20 22 5c 66 35 37 39 22 3b 20 7d 0a 0a 2e 66 61 2d 66 6c 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 31 37 22 3b 20 7d 0a 0a 2e 66 61 2d 66 6f 6c 64 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 62 22 3b 20 7d 0a 0a 2e 66 61 2d 66 6f 6c 64 65 72 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 35 64 22 3b 20 7d 0a 0a 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 63 22 3b 20 7d 0a 0a 2e 66 61 2d 66 6f 6c 64 65 72 2d 70 6c 75 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 35 65 22 3b 20 7d 0a 0a 2e 66 61 2d 66 6f 6e 74 3a 62 65 66 6f Data Ascii: : "\f579"; }.fa-fly:before { content: "\f417"; }.fa-folder:before { content: "\f07b"; }.fa-folder-minus:before { content: "\f65d"; }.fa-folder-open:before { content: "\f07c"; }.fa-folder-plus:before { content: "\f65e"; }.fa-font:befo
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 2d 68 6f 74 2d 74 75 62 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 39 33 22 3b 20 7d 0a 0a 2e 66 61 2d 68 6f 74 64 6f 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 38 30 66 22 3b 20 7d 0a 0a 2e 66 61 2d 68 6f 74 65 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 39 34 22 3b 20 7d 0a 0a 2e 66 61 2d 68 6f 74 6a 61 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 62 31 22 3b 20 7d 0a 0a 2e 66 61 2d 68 6f 75 72 67 6c 61 73 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 34 22 3b 20 7d 0a 0a 2e 66 61 2d 68 6f 75 72 67 6c 61 73 73 2d 65 6e 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c Data Ascii: -hot-tub:before { content: "\f593"; }.fa-hotdog:before { content: "\f80f"; }.fa-hotel:before { content: "\f594"; }.fa-hotjar:before { content: "\f3b1"; }.fa-hourglass:before { content: "\f254"; }.fa-hourglass-end:before { content: "\
2024-02-20 15:13:30 UTC	5792	IN	Data Raw: 74 65 6e 74 3a 20 22 5c 66 37 62 35 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 69 78 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 63 62 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 69 78 63 6c 6f 75 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 38 39 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 69 7a 75 6e 69 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 63 63 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 6f 62 69 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 62 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 6f 62 69 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 63 64 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 6f 64 78 3a 62 65 66 6f 72 65 20 7b 0a 20 Data Ascii: tent: "\f7b5"; }.fa-mix:before { content: "\f3cb"; }.fa-mixcloud:before { content: "\f289"; }.fa-mizuni:before { content: "\f3cc"; }.fa-mobile:before { content: "\f10b"; }.fa-mobile-alt:before { content: "\f3cd"; }.fa-modx:before {
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 65 6e 74 3a 20 22 5c 66 30 31 31 22 3b 20 7d 0a 0a 2e 66 61 2d 70 72 61 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 38 33 22 3b 20 7d 0a 0a 2e 66 61 2d 70 72 61 79 69 6e 67 2d 68 61 6e 64 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 38 34 22 3b 20 7d 0a 0a 2e 66 61 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 62 31 22 3b 20 7d 0a 0a 2e 66 61 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 2d 62 6f 74 74 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 38 35 22 3b 20 7d 0a 0a 2e 66 61 2d 70 72 65 73 63 72 69 70 74 69 6f 6e 2d 62 6f 74 74 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e Data Ascii: ent: "\f011"; }.fa-pray:before { content: "\f683"; }.fa-praying-hands:before { content: "\f684"; }.fa-prescription:before { content: "\f5b1"; }.fa-prescription-bottle:before { content: "\f485"; }.fa-prescription-bottle-alt:before { con
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 74 3a 20 22 5c 66 31 35 65 22 3b 20 7d 0a 0a 2e 66 61 2d 73 6f 72 74 2d 61 6c 70 68 61 2d 75 70 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 38 38 32 22 3b 20 7d 0a 0a 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 36 30 22 3b 20 7d 0a 0a 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 64 6f 77 6e 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 38 38 34 22 3b 20 7d 0a 0a 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 36 31 22 3b 20 7d 0a 0a 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 75 70 2d 61 6c 74 3a 62 65 Data Ascii: t: "\f15e"; }.fa-sort-alpha-up-alt:before { content: "\f882"; }.fa-sort-amount-down:before { content: "\f160"; }.fa-sort-amount-down-alt:before { content: "\f884"; }.fa-sort-amount-up:before { content: "\f161"; }.fa-sort-amount-up-alt:be
2024-02-20 15:13:30 UTC	2896	IN	Data Raw: 74 72 75 63 6b 2d 70 69 63 6b 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 33 63 22 3b 20 7d 0a 0a 2e 66 61 2d 74 73 68 69 72 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 33 22 3b 20 7d 0a 0a 2e 66 61 2d 74 74 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 65 34 22 3b 20 7d 0a 0a 2e 66 61 2d 74 75 6d 62 6c 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 37 33 22 3b 20 7d 0a 0a 2e 66 61 2d 74 75 6d 62 6c 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 37 34 22 3b 20 7d 0a 0a 2e 66 61 2d 74 76 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 36 63 22 Data Ascii: truck-pickup:before { content: "\f63c"; }.fa-tshirt:before { content: "\f553"; }.fa-tty:before { content: "\f1e4"; }.fa-tumblr:before { content: "\f173"; }.fa-tumblr-square:before { content: "\f174"; }.fa-tv:before { content: "\f26c"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49886	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:30 UTC	584	OUT	GET /assests/css/media.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:30 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Tue, 01 Oct 2019 13:18:58 GMT Accept-Ranges: bytes ETag: "99fb58c85a78d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:43 GMT Content-Length: 19617 Connection: close
2024-02-20 15:13:30 UTC	2409	IN	Data Raw: 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 35 36 70 78 29 20 7b 0d 0a 20 20 64 69 76 23 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 23 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6d 61 69 6e 2d 6e 61 76 20 3e 20 6c 69 20 3e 20 2e 6d 65 6e 75 2d 6c 69 6e 6b 73 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 23 6e 61 76 69 67 61 74 69 6f 6e 2d 74 6f 70 20 2e 6d 61 69 6e 2d 6e 61 76 20 3e 20 6c 69 20 3e 20 2e 6d 65 6e 75 2d 6c 69 6e 6b 73 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 30 70 78 20 21 69 6d 70 6f Data Ascii: @media (max-width: 1156px) { div#wrapper { width: 100%; } .solid-menus #navigation .main-nav > li > .menu-links { padding: 0 20px !important; } .solid-menus #navigation-top .main-nav > li > .menu-links { padding: 0 20px !impo
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 68 6f 76 65 72 20 2e 73 75 62 2d 6d 65 6e 75 2d 31 2c 0d 0a 20 20 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 0d 0a 20 20 20 20 23 6e 61 76 69 67 61 74 69 6f 6e 0d 0a 20 20 20 20 2e 6d 61 69 6e 2d 6e 61 76 2e 74 72 69 67 67 65 72 2d 63 6c 69 63 6b 0d 0a 20 20 20 20 3e 20 6c 69 2e 69 73 2d 63 6c 69 63 6b 2d 61 63 74 69 76 65 0d 0a 20 20 20 20 2e 73 75 62 2d 6d 65 6e 75 2d 31 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 34 30 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 35 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 6f 6c Data Ascii: hover .sub-menu-1, .solid-menus #navigation .main-nav.trigger-click > li.is-click-active .sub-menu-1 { position: absolute; top: 40px; left: 0; z-index: 15; box-shadow: none; display: block; } .sol
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 20 2e 6d 61 69 6e 2d 6e 61 76 20 2e 73 75 62 2d 6d 65 6e 75 2d 37 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 23 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6d 61 69 6e 2d 6e 61 76 20 2e 73 69 64 65 2d 6d 65 6e 75 20 61 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 2e 38 35 65 6d 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 23 6e 61 76 69 67 61 74 69 6f Data Ascii: .main-nav .sub-menu-7 { border-left: 1px solid #d2d2d2; border-right: 1px solid #d2d2d2; border-bottom: 1px solid #d2d2d2; } .solid-menus #navigation .main-nav .side-menu a { padding-left: 0.85em; } .solid-menus #navigatio
2024-02-20 15:13:30 UTC	2728	IN	Data Raw: 76 69 67 61 74 69 6f 6e 2d 74 6f 70 20 2e 6d 61 69 6e 2d 6e 61 76 20 2e 66 75 6c 6c 2d 77 69 64 74 68 20 3e 20 75 6c 20 3e 20 6c 69 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 35 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 23 6e 61 76 69 67 61 74 69 6f 6e 2d 74 6f 70 20 2e 6d 61 69 6e 2d 6e 61 76 20 2e 66 75 6c 6c 2d 77 69 64 74 68 20 75 6c 2e 6c 69 73 74 20 3e 20 6c 69 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0d 0a 20 20 20 Data Ascii: vigation-top .main-nav .full-width > ul > li { -webkit-border-radius: 0; border-radius: 0; padding: 0; font-size: 105%; } .solid-menus #navigation-top .main-nav .full-width ul.list > li:hover { -webkit-border-radius: 0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49893	104.17.24.14	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:30 UTC	557	OUT	GET /ajax/libs/jquery/3.6.1/jquery.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:30 UTC	960	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-14dc0" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 65902 Expires: Sun, 09 Feb 2025 15:13:30 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OnU1%2BHV149lg2C4np30OWcj1ckSL0SNtGn6vcKCEFETxYxltFwm5CtH%2Fd53cMfY8PmAZs7Ogy6EGlPuvWAlGfPgOCCXLNCAqp%2F8Otq82VPGCMuuKKza4B71dfoaJbIwcJMZ30rO%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8587b1a5fee019ef-EWR alt-svc: h3=":443"; ma=86400
2024-02-20 15:13:30 UTC	409	IN	Data Raw: 37 62 65 61 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 36 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 32 Data Ascii: 7bea/! jQuery JavaScript Library v3.6.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 202
2024-02-20 15:13:30 UTC	1369	IN	Data Raw: 6f 6d 6d 6f 6e 4a 53 20 61 6e 64 20 43 6f 6d 6d 6f 6e 4a 53 2d 6c 69 6b 65 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 65 72 65 20 61 20 70 72 6f 70 65 72 20 60 77 69 6e 64 6f 77 60 0a 09 09 2f 2f 20 69 73 20 70 72 65 73 65 6e 74 2c 20 65 78 65 63 75 74 65 20 74 68 65 20 66 61 63 74 6f 72 79 20 61 6e 64 20 67 65 74 20 6a 51 75 65 72 79 2e 0a 09 09 2f 2f 20 46 6f 72 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 61 20 60 77 69 6e 64 6f 77 60 20 77 69 74 68 20 61 20 60 64 6f 63 75 6d 65 6e 74 60 0a 09 09 2f 2f 20 28 73 75 63 68 20 61 73 20 4e 6f 64 65 2e 6a 73 29 2c 20 65 78 70 6f 73 65 20 61 20 66 61 63 74 6f 72 79 20 61 73 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 2e 0a 09 09 2f 2f 20 54 68 69 73 20 61 Data Ascii: ommonJS and CommonJS-like environments where a proper `window`// is present, execute the factory and get jQuery.// For environments that do not have a `window` with a `document`// (such as Node.js), expose a factory as module.exports.// This a
2024-02-20 15:13:30 UTC	1369	IN	Data Raw: 78 4f 66 20 3d 20 61 72 72 2e 69 6e 64 65 78 4f 66 3b 0a 0a 76 61 72 20 63 6c 61 73 73 32 74 79 70 65 20 3d 20 7b 7d 3b 0a 0a 76 61 72 20 74 6f 53 74 72 69 6e 67 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 0a 0a 76 61 72 20 68 61 73 4f 77 6e 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 0a 0a 76 61 72 20 66 6e 54 6f 53 74 72 69 6e 67 20 3d 20 68 61 73 4f 77 6e 2e 74 6f 53 74 72 69 6e 67 3b 0a 0a 76 61 72 20 4f 62 6a 65 63 74 46 75 6e 63 74 69 6f 6e 53 74 72 69 6e 67 20 3d 20 66 6e 54 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 20 4f 62 6a 65 63 74 20 29 3b 0a 0a 76 61 72 20 73 75 70 70 6f 72 74 20 3d 20 7b 7d 3b 0a 0a 76 61 72 20 69 73 46 75 6e 63 74 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: xOf = arr.indexOf;var class2type = {};var toString = class2type.toString;var hasOwn = class2type.hasOwnProperty;var fnToString = hasOwn.toString;var ObjectFunctionString = fnToString.call( Object );var support = {};var isFunction = function
2024-02-20 15:13:30 UTC	1369	IN	Data Raw: 75 70 70 6f 72 74 20 74 68 65 20 22 6e 6f 6e 63 65 22 20 70 72 6f 70 65 72 74 79 20 6f 6e 20 73 63 72 69 70 74 73 2e 0a 09 09 09 09 2f 2f 20 4f 6e 20 74 68 65 20 6f 74 68 65 72 20 68 61 6e 64 2c 20 6a 75 73 74 20 75 73 69 6e 67 20 60 67 65 74 41 74 74 72 69 62 75 74 65 60 20 69 73 20 6e 6f 74 20 65 6e 6f 75 67 68 20 61 73 0a 09 09 09 09 2f 2f 20 74 68 65 20 60 6e 6f 6e 63 65 60 20 61 74 74 72 69 62 75 74 65 20 69 73 20 72 65 73 65 74 20 74 6f 20 61 6e 20 65 6d 70 74 79 20 73 74 72 69 6e 67 20 77 68 65 6e 65 76 65 72 20 69 74 0a 09 09 09 09 2f 2f 20 62 65 63 6f 6d 65 73 20 62 72 6f 77 73 69 6e 67 2d 63 6f 6e 74 65 78 74 20 63 6f 6e 6e 65 63 74 65 64 2e 0a 09 09 09 09 2f 2f 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 77 68 61 74 Data Ascii: upport the "nonce" property on scripts.// On the other hand, just using `getAttribute` is not enough as// the `nonce` attribute is reset to an empty string whenever it// becomes browsing-context connected.// See https://github.com/what
2024-02-20 15:13:30 UTC	1369	IN	Data Raw: 6f 20 62 65 20 74 68 72 6f 77 6e 20 69 66 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 29 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 3b 0a 09 7d 3b 0a 0a 6a 51 75 65 72 79 2e 66 6e 20 3d 20 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 0a 09 2f 2f 20 54 68 65 20 63 75 72 72 65 6e 74 20 76 65 72 73 69 6f 6e 20 6f 66 20 6a 51 75 65 72 79 20 62 65 69 6e 67 20 75 73 65 64 0a 09 6a 71 75 65 72 79 3a 20 76 65 72 73 69 6f 6e 2c 0a 0a 09 63 6f 6e 73 74 72 75 63 74 6f 72 3a 20 6a 51 75 65 72 79 2c 0a 0a 09 2f 2f 20 54 68 65 20 64 65 66 61 75 6c 74 20 6c 65 6e 67 74 68 20 6f 66 20 61 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 30 0a 09 6c 65 Data Ascii: o be thrown if not included)return new jQuery.fn.init( selector, context );};jQuery.fn = jQuery.prototype = {// The current version of jQuery being usedjquery: version,constructor: jQuery,// The default length of a jQuery object is 0le
2024-02-20 15:13:30 UTC	1369	IN	Data Raw: 75 73 68 53 74 61 63 6b 28 20 73 6c 69 63 65 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 20 29 3b 0a 09 7d 2c 0a 0a 09 66 69 72 73 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 20 30 20 29 3b 0a 09 7d 2c 0a 0a 09 6c 61 73 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 20 2d 31 20 29 3b 0a 09 7d 2c 0a 0a 09 65 76 65 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 20 6a 51 75 65 72 79 2e 67 72 65 70 28 20 74 68 69 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 5f 65 6c 65 6d 2c 20 69 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 28 20 69 20 2b 20 31 20 29 20 25 Data Ascii: ushStack( slice.apply( this, arguments ) );},first: function() {return this.eq( 0 );},last: function() {return this.eq( -1 );},even: function() {return this.pushStack( jQuery.grep( this, function( _elem, i ) {return ( i + 1 ) %
2024-02-20 15:13:30 UTC	1369	IN	Data Raw: 69 2d 2d 3b 0a 09 7d 0a 0a 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 0a 09 09 2f 2f 20 4f 6e 6c 79 20 64 65 61 6c 20 77 69 74 68 20 6e 6f 6e 2d 6e 75 6c 6c 2f 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 69 66 20 28 20 28 20 6f 70 74 69 6f 6e 73 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 69 20 5d 20 29 20 21 3d 20 6e 75 6c 6c 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 45 78 74 65 6e 64 20 74 68 65 20 62 61 73 65 20 6f 62 6a 65 63 74 0a 09 09 09 66 6f 72 20 28 20 6e 61 6d 65 20 69 6e 20 6f 70 74 69 6f 6e 73 20 29 20 7b 0a 09 09 09 09 63 6f 70 79 20 3d 20 6f 70 74 69 6f 6e 73 5b 20 6e 61 6d 65 20 5d 3b 0a 0a 09 09 09 09 2f 2f 20 50 72 65 76 65 6e 74 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 20 70 6f Data Ascii: i--;}for ( ; i < length; i++ ) {// Only deal with non-null/undefined valuesif ( ( options = arguments[ i ] ) != null ) {// Extend the base objectfor ( name in options ) {copy = options[ name ];// Prevent Object.prototype po
2024-02-20 15:13:30 UTC	1369	IN	Data Raw: 67 20 29 3b 0a 09 7d 2c 0a 0a 09 6e 6f 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 7d 2c 0a 0a 09 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 20 29 20 7b 0a 09 09 76 61 72 20 70 72 6f 74 6f 2c 20 43 74 6f 72 3b 0a 0a 09 09 2f 2f 20 44 65 74 65 63 74 20 6f 62 76 69 6f 75 73 20 6e 65 67 61 74 69 76 65 73 0a 09 09 2f 2f 20 55 73 65 20 74 6f 53 74 72 69 6e 67 20 69 6e 73 74 65 61 64 20 6f 66 20 6a 51 75 65 72 79 2e 74 79 70 65 20 74 6f 20 63 61 74 63 68 20 68 6f 73 74 20 6f 62 6a 65 63 74 73 0a 09 09 69 66 20 28 20 21 6f 62 6a 20 7c 7c 20 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 20 6f 62 6a 20 29 20 21 3d 3d 20 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c Data Ascii: g );},noop: function() {},isPlainObject: function( obj ) {var proto, Ctor;// Detect obvious negatives// Use toString instead of jQuery.type to catch host objectsif ( !obj \|\| toString.call( obj ) !== "[object Object]" ) {return fal
2024-02-20 15:13:30 UTC	1369	IN	Data Raw: 65 72 6e 61 6c 20 75 73 61 67 65 20 6f 6e 6c 79 0a 09 6d 61 6b 65 41 72 72 61 79 3a 20 66 75 6e 63 74 69 6f 6e 28 20 61 72 72 2c 20 72 65 73 75 6c 74 73 20 29 20 7b 0a 09 09 76 61 72 20 72 65 74 20 3d 20 72 65 73 75 6c 74 73 20 7c 7c 20 5b 5d 3b 0a 0a 09 09 69 66 20 28 20 61 72 72 20 21 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 4f 62 6a 65 63 74 28 20 61 72 72 20 29 20 29 20 29 20 7b 0a 09 09 09 09 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 72 65 74 2c 0a 09 09 09 09 09 74 79 70 65 6f 66 20 61 72 72 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 20 3f 0a 09 09 09 09 09 09 5b 20 61 72 72 20 5d 20 3a 20 61 72 72 0a 09 09 09 09 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 70 75 73 68 2e 63 61 6c 6c 28 Data Ascii: ernal usage onlymakeArray: function( arr, results ) {var ret = results \|\| [];if ( arr != null ) {if ( isArrayLike( Object( arr ) ) ) {jQuery.merge( ret,typeof arr === "string" ?[ arr ] : arr);} else {push.call(
2024-02-20 15:13:30 UTC	1369	IN	Data Raw: 68 20 3d 20 65 6c 65 6d 73 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 2c 20 61 72 67 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 21 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 09 09 09 72 65 74 2e 70 75 73 68 28 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 65 76 65 72 79 20 6b 65 79 20 6f 6e 20 74 68 65 20 6f 62 6a 65 63 74 2c 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 66 6f 72 20 28 20 69 20 69 6e 20 65 6c 65 6d 73 20 29 20 7b 0a 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 28 20 Data Ascii: h = elems.length;for ( ; i < length; i++ ) {value = callback( elems[ i ], i, arg );if ( value != null ) {ret.push( value );}}// Go through every key on the object,} else {for ( i in elems ) {value = callback(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49892	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:30 UTC	588	OUT	GET /assests/css/bootstrap.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:30 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 15 Jan 2020 18:53:09 GMT Accept-Ranges: bytes ETag: "d6c09c7d5cbd51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:43 GMT Content-Length: 152848 Connection: close
2024-02-20 15:13:30 UTC	5305	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 0d 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0d 0a 68 74 6d Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */htm
2024-02-20 15:13:30 UTC	8688	IN	Data Raw: 63 6f 6e 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 32 31 32 22 3b 0d 0a 7d 0d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 36 30 31 22 3b 0d 0a 7d 0d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6e 76 65 6c 6f 70 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 37 30 39 22 3b 0d 0a 7d 0d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 37 30 66 22 3b 0d 0a 7d 0d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 30 31 22 3b 0d 0a 7d 0d 0a 2e 67 6c Data Ascii: con-minus:before { content: "\2212";}.glyphicon-cloud:before { content: "\2601";}.glyphicon-envelope:before { content: "\2709";}.glyphicon-pencil:before { content: "\270f";}.glyphicon-glass:before { content: "\e001";}.gl
2024-02-20 15:13:30 UTC	8688	IN	Data Raw: 6f 6e 2d 6c 6f 67 2d 6f 75 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 36 33 22 3b 0d 0a 7d 0d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6e 65 77 2d 77 69 6e 64 6f 77 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 36 34 22 3b 0d 0a 7d 0d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 63 6f 72 64 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 36 35 22 3b 0d 0a 7d 0d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 61 76 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 36 36 22 3b 0d 0a 7d 0d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 31 36 37 22 3b 0d 0a 7d 0d 0a 2e 67 Data Ascii: on-log-out:before { content: "\e163";}.glyphicon-new-window:before { content: "\e164";}.glyphicon-record:before { content: "\e165";}.glyphicon-save:before { content: "\e166";}.glyphicon-open:before { content: "\e167";}.g
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 6d 3a 20 32 30 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 20 20 2e 6c 65 61 64 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 73 6d 61 6c 6c 2c 0d 0a 2e 73 6d 61 6c 6c 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 35 25 3b 0d 0a 7d 0d 0a 6d 61 72 6b 2c 0d 0a 2e 6d 61 72 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 63 66 38 65 33 3b 0d 0a 7d 0d 0a 2e 74 65 Data Ascii: m: 20px; font-size: 16px; font-weight: 300; line-height: 1.4;}@media (min-width: 768px) { .lead { font-size: 21px; }}small,.small { font-size: 85%;}mark,.mark { padding: .2em; background-color: #fcf8e3;}.te
2024-02-20 15:13:30 UTC	1448	IN	Data Raw: 33 25 3b 0d 0a 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 33 20 7b 0d 0a 20 20 72 69 67 68 74 3a 20 32 35 25 3b 0d 0a 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 32 20 7b 0d 0a 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 0d 0a 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 20 7b 0d 0a 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 0d 0a 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 30 20 7b 0d 0a 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 32 20 7b 0d 0a 20 20 6c 65 66 74 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 31 20 7b 0d 0a 20 20 6c 65 66 74 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 3b 0d 0a 7d 0d 0a 2e 63 6f Data Ascii: 3%;}.col-xs-pull-3 { right: 25%;}.col-xs-pull-2 { right: 16.66666667%;}.col-xs-pull-1 { right: 8.33333333%;}.col-xs-pull-0 { right: auto;}.col-xs-push-12 { left: 100%;}.col-xs-push-11 { left: 91.66666667%;}.co
2024-02-20 15:13:30 UTC	5792	IN	Data Raw: 73 6d 2d 37 2c 20 2e 63 6f 6c 2d 73 6d 2d 38 2c 20 2e 63 6f 6c 2d 73 6d 2d 39 2c 20 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 20 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 20 2e 63 6f 6c 2d 73 6d 2d 31 32 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 32 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 31 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 30 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 38 33 2e 33 33 33 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 39 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0d 0a 20 Data Ascii: sm-7, .col-sm-8, .col-sm-9, .col-sm-10, .col-sm-11, .col-sm-12 { float: left; } .col-sm-12 { width: 100%; } .col-sm-11 { width: 91.66666667%; } .col-sm-10 { width: 83.33333333%; } .col-sm-9 { width: 75%;
2024-02-20 15:13:30 UTC	1448	IN	Data Raw: 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 33 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 32 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 31 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 31 32 20 7b 0d 0a 20 20 20 20 72 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 31 31 20 7b 0d 0a 20 20 20 20 72 69 67 68 74 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c Data Ascii: h: 33.33333333%; } .col-lg-3 { width: 25%; } .col-lg-2 { width: 16.66666667%; } .col-lg-1 { width: 8.33333333%; } .col-lg-pull-12 { right: 100%; } .col-lg-pull-11 { right: 91.66666667%; } .col-l
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 65 74 2d 31 31 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 30 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 33 2e 33 33 33 33 33 33 33 33 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 39 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 37 35 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 38 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 36 36 2e 36 36 36 36 36 36 36 37 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 37 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 Data Ascii: et-11 { margin-left: 91.66666667%; } .col-lg-offset-10 { margin-left: 83.33333333%; } .col-lg-offset-9 { margin-left: 75%; } .col-lg-offset-8 { margin-left: 66.66666667%; } .col-lg-offset-7 { margin-left: 5
2024-02-20 15:13:30 UTC	1448	IN	Data Raw: 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0d 0a 20 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 0d 0a 20 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 Data Ascii: onsive > .table-bordered > tbody > tr > td:first-child, .table-responsive > .table-bordered > tfoot > tr > td:first-child { border-left: 0; } .table-responsive > .table-bordered > thead > tr > th:last-child, .table-responsive > .table-bor
2024-02-20 15:13:30 UTC	7240	IN	Data Raw: 68 65 63 6b 62 6f 78 22 5d 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 34 70 78 20 30 20 30 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 70 78 20 5c 39 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 7d 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 66 69 6c 65 22 5d 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 6e 67 65 22 5d 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 73 65 6c 65 63 74 5b 6d 75 6c 74 69 70 6c 65 5d 2c 0d 0a 73 65 6c 65 63 74 5b 73 69 7a 65 5d 20 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 Data Ascii: heckbox"] { margin: 4px 0 0; margin-top: 1px \9; line-height: normal;}input[type="file"] { display: block;}input[type="range"] { display: block; width: 100%;}select[multiple],select[size] { height: auto;}input[type="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49894	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	584	OUT	GET /assests/css/style.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 13 Apr 2023 14:13:39 GMT Accept-Ranges: bytes ETag: "81494425126ed91:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 9299 Connection: close
2024-02-20 15:13:32 UTC	3858	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 2f 2a 61 72 74 69 63 6c 65 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 65 6d 3b 0d 0a 7d 2a 2f 0d 0a 0d 0a 2e 6f 6e 6f 66 66 73 77 69 74 63 68 33 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 6e 6f 66 66 73 77 69 74 63 68 33 2d 63 68 65 63 6b 62 6f 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d Data Ascii: @charset "utf-8";/* CSS Document //article {padding-bottom: 10em;}*/.onoffswitch3 { position: relative; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none;}.onoffswitch3-checkbox { display:none;
2024-02-20 15:13:32 UTC	5441	IN	Data Raw: 74 61 69 6e 65 72 2d 73 71 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 65 6d 20 30 3b 0d 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 34 63 62 66 66 3b 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 7b 0d 0a 20 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 71 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 30 30 70 78 29 7b 0d 0a 20 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 71 Data Ascii: tainer-sq{ padding: 1em 0; float: left; width: 50%; background-color: #34cbff;}@media screen and (max-width: 640px){ .container-sq{ display: block; width: 100%; }}@media screen and (min-width: 900px){ .container-sq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49895	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	593	OUT	GET /assests/css/gogg-translate.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	503	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 25 Sep 2019 03:14:04 GMT Accept-Ranges: bytes ETag: "af828494f73d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 771 Connection: close
2024-02-20 15:13:32 UTC	771	IN	Data Raw: 23 67 6f 6f 67 6c 65 2d 74 72 61 6e 73 6c 61 74 65 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 30 70 78 20 30 70 78 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 6f 6f 67 2d 74 65 2d 63 6f 6d 62 6f 2c 0d 0a 2e 67 6f 6f 67 2d 74 65 2d 62 61 6e 6e 65 72 20 2a 2c 0d 0a 2e 67 6f 6f 67 2d 74 65 2d 66 74 61 62 20 2a 2c 0d 0a 2e 67 6f 6f 67 2d 74 65 2d 6d 65 6e 75 20 2a 2c 0d 0a 2e 67 6f 6f 67 2d 74 65 2d 6d 65 6e 75 32 20 2a 2c 0d 0a 2e 67 6f 6f 67 2d 74 65 2d 62 61 6c 6c 6f 6f 6e 20 2a 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 2f 2a 62 61 63 6b 67 72 Data Ascii: #google-translate-container { float: right; padding: 2px 0px 0px 5px;}.goog-te-combo,.goog-te-banner ,.goog-te-ftab ,.goog-te-menu ,.goog-te-menu2 ,.goog-te-balloon * { font-family: 'Open Sans'; font-size: 14px; /*backgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49896	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	585	OUT	GET /assests/css/search.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	503	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Tue, 03 Dec 2019 20:50:08 GMT Accept-Ranges: bytes ETag: "ee6dc43f1baad51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 75 Connection: close
2024-02-20 15:13:32 UTC	75	IN	Data Raw: 2f 2a 20 53 77 69 74 79 70 65 20 53 65 61 72 63 68 20 2a 2f 0d 0a 0d 0a 23 73 74 2d 6f 76 65 72 6c 61 79 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a Data Ascii: /* Switype Search */#st-overlay-search-input { display: none;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49897	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	596	OUT	GET /assests/css/news_ticker_style.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 27 Jan 2022 17:11:44 GMT Accept-Ranges: bytes ETag: "e28d9f5a013d81:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 4579 Connection: close
2024-02-20 15:13:32 UTC	4579	IN	Data Raw: 0d 0a 2e 74 69 63 6b 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 3b 0d 0a 09 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 30 76 77 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 61 75 74 6f 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 2e 54 69 63 6b 65 72 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 32 35 64 65 67 2c 20 23 66 66 66 2c 20 23 66 66 66 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 32 35 64 65 67 2c 20 23 66 66 66 2c 20 23 66 66 66 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: .ticker-container{ max-width: 1280px;max-height: 20vw; margin: 5px auto; overflow: hidden;}.Ticker { background: -webkit-linear-gradient(225deg, #fff, #fff); background: -moz-linear-gradient(225deg, #fff, #fff); background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49898	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	583	OUT	GET /assests/css/base.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 09 Oct 2019 02:18:15 GMT Accept-Ranges: bytes ETag: "2d54aace477ed51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 5423 Connection: close
2024-02-20 15:13:32 UTC	2410	IN	Data Raw: 68 74 6d 6c 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0d 0a 20 20 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0d 0a 7d 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0d Data Ascii: html { font-size: 100%; font-family: 'Open Sans', sans-serif; -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%; -webkit-font-smoothing: antialiased; font-smoothing: antialiased;}body { margin: 0; background: #ffffff;
2024-02-20 15:13:32 UTC	3013	IN	Data Raw: 20 62 75 74 74 6f 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 69 6e 70 75 74 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 6f 70 74 67 72 6f 75 70 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 73 65 6c 65 63 74 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 62 75 74 74 6f 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 73 65 6c 65 63 74 20 7b 0d 0a 20 20 74 65 78 74 Data Ascii: button,.solid-menus input,.solid-menus optgroup,.solid-menus select,.solid-menus textarea { color: inherit; font: inherit; margin: 0;}.solid-menus button { overflow: visible;}.solid-menus button,.solid-menus select { text

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49899	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	585	OUT	GET /assests/css/layout.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Tue, 08 Feb 2022 17:23:40 GMT Accept-Ranges: bytes ETag: "bceb2e9d101dd81:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 3524 Connection: close
2024-02-20 15:13:32 UTC	3524	IN	Data Raw: 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 7b 0d 0a 20 20 2f 2a 20 48 65 6c 70 65 72 20 43 6c 61 73 73 20 2a 2f 0d 0a 20 20 2f 2a 20 66 6c 65 78 20 2a 2f 0d 0a 20 20 2f 2a 20 66 6c 6f 61 74 73 20 2a 2f 0d 0a 20 20 2f 2a 20 47 65 6e 65 72 61 6c 20 4c 61 79 6f 75 74 20 2a 2f 0d 0a 20 20 2f 2a 20 53 70 65 63 69 61 6c 20 43 6f 6c 75 6d 6e 73 20 2a 2f 0d 0a 20 20 2f 2a 20 6c 61 79 6f 75 74 20 74 61 62 6c 65 20 63 65 6c 6c 20 2a 2f 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6c 2d 67 72 6f 75 70 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 30 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 20 20 76 69 73 69 62 69 6c 69 74 79 Data Ascii: .solid-menus { /* Helper Class / / flex / / floats / / General Layout / / Special Columns / / layout table cell */}.solid-menus .l-group:after { content: ""; height: 0; display: table; clear: both; visibility

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49902	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	585	OUT	GET /assests/css/module.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 02 Oct 2019 03:17:10 GMT Accept-Ranges: bytes ETag: "fd12dde0cf78d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 77435 Connection: close
2024-02-20 15:13:32 UTC	2409	IN	Data Raw: 23 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 20 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 2f 2a 68 65 69 67 68 74 3a 20 31 30 30 25 3b 2a 2f 0d 0a 20 2f 2a 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 31 30 70 78 3b 2a 2f 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 2f 2a 20 62 61 63 6b 67 72 6f 75 6e 64 20 2a 2f 0d 0a 20 20 2f 2a 20 65 6c 65 6d 65 6e 74 20 77 69 64 74 68 73 20 2a 2f 0d 0a 20 20 2f 2a 20 Data Ascii: #wrapper { margin: 0 auto ; min-width: 100%; min-height: 100%; /height: 100%;/ /* min-height: 100%; margin-bottom: -10px;/}.solid-menus { position: relative; max-width: 100%; / background / / element widths / /
2024-02-20 15:13:32 UTC	7240	IN	Data Raw: 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 76 65 72 79 2d 62 69 67 2d 66 6f 6e 74 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 62 67 2d 67 72 61 79 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 36 65 36 65 36 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 77 2d 35 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 35 25 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 77 2d 31 30 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 25 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 77 2d 31 36 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 37 25 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 77 2d 32 30 20 7b 0d 0a 20 20 Data Ascii: .solid-menus .very-big-font { font-size: 2em;}.solid-menus .bg-gray { background: #e6e6e6;}.solid-menus .w-5 { width: 5%;}.solid-menus .w-10 { width: 10%;}.solid-menus .w-16 { width: 16.6666667%;}.solid-menus .w-20 {
2024-02-20 15:13:32 UTC	10136	IN	Data Raw: 2d 6d 65 6e 75 2d 33 20 3e 20 75 6c 20 3e 20 6c 69 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 64 72 6f 70 2d 64 6f 77 6e 2e 73 69 64 65 2d 6d 65 6e 75 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 2e 35 65 6d 20 30 3b 0d 0a 20 20 6c 65 66 74 3a 20 31 30 30 25 3b 0d 0a 20 20 2f 2a 20 61 64 6a 75 73 74 20 74 68 69 73 20 76 61 6c 75 65 20 74 6f 20 66 69 74 20 79 6f 75 72 20 6e 65 65 64 73 2c 20 6d 75 6c 74 69 2d 64 72 6f 70 64 6f 77 6e 20 73 69 64 65 2d 6d 65 6e 75 20 2a 2f 0d 0a 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 Data Ascii: -menu-3 > ul > li { position: relative; white-space: nowrap;}.solid-menus .drop-down.side-menu { position: absolute; padding: 0 0 0.5em 0; left: 100%; /* adjust this value to fit your needs, multi-dropdown side-menu */ top: 0;
2024-02-20 15:13:32 UTC	7240	IN	Data Raw: 2d 62 67 2d 61 74 74 65 6e 74 69 6f 6e 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 43 37 35 33 30 46 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 62 74 6e 2e 62 74 6e 2d 62 67 2d 67 6f 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 67 72 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 69 64 65 2d 6d 65 6e 75 2d 77 69 64 65 20 65 6d 20 61 2e 62 74 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 67 61 6c 6c 65 72 79 20 65 6d 20 61 2e 62 74 6e 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 62 6c 6f 67 20 65 6d 20 61 2e 62 74 6e 2c 0d 0a 2e 73 Data Ascii: -bg-attention { background: #C7530F;}.solid-menus .btn.btn-bg-go { background: green;}.solid-menus .btn:hover { cursor: pointer;}.solid-menus .side-menu-wide em a.btn,.solid-menus .gallery em a.btn,.solid-menus .blog em a.btn,.s
2024-02-20 15:13:32 UTC	7240	IN	Data Raw: 29 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 35 30 30 70 78 29 20 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 35 30 30 70 78 29 20 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 25 20 30 25 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 25 20 30 25 3b 0d 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 25 20 30 25 3b 0d 0a 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 25 20 30 25 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 Data Ascii: ); -moz-transform: perspective(500px) rotateX(90deg); transform: perspective(500px) rotateX(90deg); -webkit-transform-origin: 0% 0%; -moz-transform-origin: 0% 0%; -ms-transform-origin: 0% 0%; -o-transform-origin: 0% 0%; transform-orig
2024-02-20 15:13:32 UTC	7240	IN	Data Raw: 63 69 74 79 20 30 2e 34 73 3b 0d 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 35 73 2c 20 6f 70 61 63 69 74 79 20 30 2e 34 73 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 66 6c 69 70 52 69 67 68 74 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 20 31 30 30 25 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 20 31 30 30 25 3b 0d 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 20 31 30 30 25 3b 0d 0a 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 20 31 30 30 25 3b 0d 0a 20 20 74 72 61 6e 73 66 6f Data Ascii: city 0.4s; transition: transform 0.5s, opacity 0.4s; opacity: 0;}.solid-menus .flipRight-caption { -webkit-transform-origin: 0 100%; -moz-transform-origin: 0 100%; -ms-transform-origin: 0 100%; -o-transform-origin: 0 100%; transfo
2024-02-20 15:13:32 UTC	5792	IN	Data Raw: 61 6e 67 6c 65 2d 34 20 75 6c 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 77 65 65 70 54 72 69 61 6e 67 6c 65 2d 35 20 75 6c 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 77 65 65 70 54 72 69 61 6e 67 6c 65 2d 36 20 75 6c 20 7b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 77 65 65 70 54 6f 70 43 65 6e 74 65 72 2d 63 61 70 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 35 30 25 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 Data Ascii: angle-4 ul,.solid-menus .sweepTriangle-5 ul,.solid-menus .sweepTriangle-6 ul { opacity: 0;}.solid-menus .sweepTopCenter-caption:before { content: ""; position: absolute; width: 100%; height: 50%; left: 0; top: 0; opacity: 0
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 69 6f 6e 3a 20 61 6c 6c 20 30 2e 34 73 20 65 61 73 65 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 34 73 20 65 61 73 65 3b 0d 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 34 73 20 65 61 73 65 3b 0d 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 34 73 20 65 61 73 65 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 31 30 30 25 20 31 30 30 25 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 31 30 30 25 20 31 30 30 25 3b 0d 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 31 30 30 25 20 31 30 30 25 3b 0d 0a 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 Data Ascii: ion: all 0.4s ease; -moz-transition: all 0.4s ease; -o-transition: all 0.4s ease; transition: all 0.4s ease; -webkit-transform-origin: 100% 100%; -moz-transform-origin: 100% 100%; -ms-transform-origin: 100% 100%; -o-transform-origin:
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 59 28 30 29 3b 0d 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 59 28 30 29 3b 0d 0a 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 59 28 30 29 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 59 28 30 29 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 77 65 65 70 54 72 69 61 6e 67 6c 65 2d 33 2d 63 61 70 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 77 65 65 70 54 72 69 61 6e 67 6c 65 2d 33 2d 63 61 70 74 69 6f 6e 3a 61 66 74 65 72 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 77 65 65 70 54 72 69 61 6e 67 6c 65 2d 34 2d 63 61 70 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 77 65 65 70 54 72 69 61 Data Ascii: Y(0); -ms-transform: scaleY(0); -o-transform: scaleY(0); transform: scaleY(0);}.solid-menus .sweepTriangle-3-caption:before,.solid-menus .sweepTriangle-3-caption:after,.solid-menus .sweepTriangle-4-caption:before,.solid-menus .sweepTria
2024-02-20 15:13:33 UTC	2896	IN	Data Raw: 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 33 73 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 58 28 2d 31 38 30 64 65 67 29 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 58 28 2d 31 38 30 64 65 67 29 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 58 28 2d 31 38 30 64 65 67 29 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6f 76 65 72 6c 61 79 2d 62 6c 6f 63 6b 73 2d 62 6c 69 6e 64 73 2d 62 6f 74 74 6f 6d 20 6c 69 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 31 30 30 25 20 31 30 30 25 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f Data Ascii: ansition-delay: 0.3s; -webkit-transform: rotateX(-180deg); -moz-transform: rotateX(-180deg); transform: rotateX(-180deg);}.solid-menus .overlay-blocks-blinds-bottom li:nth-child(2) { -webkit-transform-origin: 100% 100%; -moz-transform-o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49903	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	584	OUT	GET /assests/css/state.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Tue, 15 Oct 2019 17:48:19 GMT Accept-Ranges: bytes ETag: "e78b5bbb8083d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 34268 Connection: close
2024-02-20 15:13:32 UTC	6753	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 61 6e 69 6d 61 74 69 6f 6e 2e 63 73 73 27 29 3b 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 7b 0d 0a 20 20 2f 2a 20 6d 61 69 6e 20 6e 61 76 69 67 61 74 69 6f 6e 20 2a 2f 0d 0a 20 20 2f 2a 20 74 72 69 67 67 65 72 2d 68 6f 76 65 72 20 2a 2f 0d 0a 20 20 2f 2a 20 74 72 69 67 67 65 72 2d 63 6c 69 63 6b 20 2a 2f 0d 0a 20 20 2f 2a 20 68 6f 6d 65 20 6d 65 6e 75 20 2a 2f 0d 0a 20 20 2f 2a 20 73 69 64 65 2d 6d 65 6e 75 2d 77 69 64 65 20 2a 2f 0d 0a 20 20 2f 2a 20 66 75 6c 6c 20 77 69 64 74 68 20 2a 2f 0d 0a 20 20 2f 2a 20 74 61 62 20 6d 61 72 6b 65 72 73 20 2a 2f 0d 0a 20 20 2f 2a 20 64 72 6f 70 64 6f 77 6e 20 2a 2f 0d 0a 20 20 2f 2a 20 6d 75 6c 74 69 2d 64 72 6f 70 20 2a 2f 0d 0a 20 20 2f 2a 20 73 6f 63 69 61 6c 20 20 2a 2f Data Ascii: @import url('animation.css');.solid-menus { /* main navigation / / trigger-hover / / trigger-click / / home menu / / side-menu-wide / / full width / / tab markers / / dropdown / / multi-drop / / social */
2024-02-20 15:13:32 UTC	10136	IN	Data Raw: 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 64 69 76 5b 63 6c 61 73 73 2a 3d 27 6f 76 65 72 6c 61 79 2d 73 6f 63 69 61 6c 27 5d 3a 68 6f 76 65 72 20 2e 66 61 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 30 64 65 67 29 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 30 64 65 67 29 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 30 64 Data Ascii: webkit-transform: rotateY(0deg); -moz-transform: rotateY(0deg); transform: rotateY(0deg);}.solid-menus div[class*='overlay-social']:hover .fa { -webkit-transform: rotateZ(720deg); -moz-transform: rotateZ(720deg); transform: rotateZ(720d
2024-02-20 15:13:32 UTC	7240	IN	Data Raw: 33 70 78 20 31 70 78 20 23 63 33 63 33 63 33 3b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 31 70 78 20 33 70 78 20 31 70 78 20 23 63 33 63 33 63 33 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 73 6c 69 64 65 55 70 3a 68 6f 76 65 72 20 2e 73 6c 69 64 65 55 70 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 38 25 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 31 70 78 20 33 70 78 20 31 70 78 20 23 63 33 63 33 63 33 3b 0d 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 31 70 78 20 33 70 78 20 31 70 78 20 23 63 33 63 33 63 33 3b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f Data Ascii: 3px 1px #c3c3c3; box-shadow: 1px 1px 3px 1px #c3c3c3;}.solid-menus .slideUp:hover .slideUp-caption { bottom: 8%; left: 0; opacity: 1; -webkit-box-shadow: 1px 1px 3px 1px #c3c3c3; -moz-box-shadow: 1px 1px 3px 1px #c3c3c3; box-shado
2024-02-20 15:13:32 UTC	8688	IN	Data Raw: 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 36 73 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 36 73 3b 0d 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 36 73 3b 0d 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 36 73 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d Data Ascii: li:last-child { -webkit-transform: rotateY(0deg); -moz-transform: rotateY(0deg); transform: rotateY(0deg); -webkit-transition-delay: 0.6s; -moz-transition-delay: 0.6s; -o-transition-delay: 0.6s; transition-delay: 0.6s; opacity: 1;
2024-02-20 15:13:32 UTC	1451	IN	Data Raw: 76 65 72 20 2e 6f 76 65 72 6c 61 79 2d 73 6f 66 74 77 61 72 65 2d 35 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 20 74 72 61 6e 73 6c 61 74 65 33 44 28 30 2c 20 30 2c 20 30 29 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 20 74 72 61 6e 73 6c 61 74 65 33 44 28 30 2c 20 30 2c 20 30 29 3b 0d 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 59 28 30 64 65 67 29 20 74 72 61 6e 73 6c 61 74 65 33 44 28 30 2c 20 30 2c 20 30 29 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6f 76 65 72 6c 61 79 2d 73 6f 66 74 77 61 72 65 3a 68 6f 76 65 72 20 2e 6f 76 65 72 6c 61 79 2d 73 6f Data Ascii: ver .overlay-software-5 li:last-child { -webkit-transform: rotateY(0deg) translate3D(0, 0, 0); -moz-transform: rotateY(0deg) translate3D(0, 0, 0); transform: rotateY(0deg) translate3D(0, 0, 0);}.solid-menus .overlay-software:hover .overlay-so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49904	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	584	OUT	GET /assests/css/theme.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	503	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 01 May 2019 15:22:17 GMT Accept-Ranges: bytes ETag: "7c21aaa9310d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 360 Connection: close
2024-02-20 15:13:32 UTC	360	IN	Data Raw: 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 74 68 65 6d 65 2d 6d 61 72 67 69 6e 2d 74 6f 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 65 6d 3b 0a 7d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 74 68 65 6d 65 2d 6d 61 72 67 69 6e 2d 72 69 67 68 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 65 6d 3b 0a 7d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 74 68 65 6d 65 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 74 68 65 6d 65 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 2d 32 78 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a Data Ascii: .solid-menus .theme-margin-top { margin-top: 1em;}.solid-menus .theme-margin-right { margin-right: 1em;}.solid-menus .theme-margin-bottom { margin-bottom: 1em !important;}.solid-menus .theme-margin-bottom-2x { margin-bottom: 2em !important;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49905	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	593	OUT	GET /assests/css/font-icons.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/solid-menu.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 01 May 2019 15:22:53 GMT Accept-Ranges: bytes ETag: "b63d40bf310d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 49296 Connection: close
2024-02-20 15:13:32 UTC	2410	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 66 6f 6e 74 2d 69 63 6f 6e 73 27 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6f 6e 74 2d 69 63 6f 6e 73 2e 65 6f 74 27 29 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6f 6e 74 2d 69 63 6f 6e 73 2e 65 6f 74 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6f 6e 74 2d 69 63 6f 6e 73 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6f 6e 74 2d 69 63 6f 6e 73 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6f 6e 74 2d 69 63 6f Data Ascii: @font-face {font-family: 'font-icons';src:url('fonts/font-icons.eot');src:url('fonts/font-icons.eot') format('embedded-opentype'),url('fonts/font-icons.woff') format('woff'),url('fonts/font-icons.ttf') format('truetype'),url('fonts/font-ico
2024-02-20 15:13:32 UTC	10136	IN	Data Raw: 78 20 30 3b 20 7d 0a 0a 2e 69 63 6f 6e 6c 69 73 74 2e 69 63 6f 6e 6c 69 73 74 2d 6c 61 72 67 65 20 3e 20 6c 69 20 5b 63 6c 61 73 73 5e 3d 22 69 63 6f 6e 2d 22 5d 2c 20 2e 69 63 6f 6e 6c 69 73 74 2e 69 63 6f 6e 6c 69 73 74 2d 6c 61 72 67 65 20 3e 20 6c 69 20 5b 63 6c 61 73 73 2a 3d 22 20 69 63 6f 6e 2d 22 5d 20 7b 0a 09 77 69 64 74 68 3a 20 31 36 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 3b 0a 7d 0a 0a 2e 69 63 6f 6e 6c 69 73 74 2d 63 6f 6c 6f 72 20 6c 69 20 69 20 7b 20 63 6f 6c 6f 72 3a 20 23 31 41 42 43 39 43 3b 20 7d 0a 0a 2e 69 63 6f 6e 2d 62 6f 72 64 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 32 35 65 6d 20 2e 31 35 65 6d 3b 0a 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 30 2e 30 38 65 6d 20 23 65 65 Data Ascii: x 0; }.iconlist.iconlist-large > li [class^="icon-"], .iconlist.iconlist-large > li [class*=" icon-"] {width: 16px;margin-right: 5px;}.iconlist-color li i { color: #1ABC9C; }.icon-border { padding: .2em .25em .15em; border: solid 0.08em #ee
2024-02-20 15:13:32 UTC	8688	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 61 31 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 6f 63 6b 32 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 61 32 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 62 75 6c 62 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 61 33 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 61 34 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 65 79 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 61 35 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 62 75 62 62 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 61 36 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 73 74 61 63 6b 32 3a 62 65 66 6f 72 65 20 7b 0a 09 63 Data Ascii: content: "\e6a1";}.icon-lock2:before {content: "\e6a2";}.icon-bulb:before {content: "\e6a3";}.icon-location:before {content: "\e6a4";}.icon-eye:before {content: "\e6a5";}.icon-bubble:before {content: "\e6a6";}.icon-stack2:before {c
2024-02-20 15:13:32 UTC	8688	IN	Data Raw: 30 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 30 31 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 30 32 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 70 6c 61 79 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 30 33 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 30 34 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 73 74 6f 70 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 30 35 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e Data Ascii: 0";}.icon-fast-backward:before {content: "\e701";}.icon-backward:before {content: "\e702";}.icon-play:before {content: "\e703";}.icon-pause:before {content: "\e704";}.icon-stop:before {content: "\e705";}.icon-forward:before {conten
2024-02-20 15:13:32 UTC	8688	IN	Data Raw: 2d 74 65 72 6d 69 6e 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 62 65 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 63 6f 64 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 62 66 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 72 65 70 6c 79 2d 61 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 63 30 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 73 74 61 72 2d 68 61 6c 66 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 63 31 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 37 63 32 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 63 72 6f 70 32 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 Data Ascii: -terminal:before {content: "\e7be";}.icon-code:before {content: "\e7bf";}.icon-reply-all:before {content: "\e7c0";}.icon-star-half-full:before {content: "\e7c1";}.icon-location-arrow:before {content: "\e7c2";}.icon-crop2:before {cont
2024-02-20 15:13:32 UTC	7240	IN	Data Raw: 61 64 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 38 30 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 2d 73 68 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 38 31 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 2d 6d 61 72 71 75 65 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 38 32 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 2d 6d 61 72 71 75 65 65 2d 70 6c 75 73 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 38 33 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 2d 6d 61 72 71 75 65 65 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 38 34 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 2d 74 61 67 3a 62 65 Data Ascii: ad:before {content: "\e080";}.icon-line-share:before {content: "\e081";}.icon-line-marquee:before {content: "\e082";}.icon-line-marquee-plus:before {content: "\e083";}.icon-line-marquee-minus:before {content: "\e084";}.icon-line-tag:be
2024-02-20 15:13:32 UTC	3446	IN	Data Raw: 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 32 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 35 66 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 32 2d 6e 6f 74 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 36 30 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 32 2d 6d 75 73 69 63 2d 74 6f 6e 65 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 36 31 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 32 2d 6d 75 73 69 63 2d 74 6f 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 36 32 22 3b 0a 7d 0a 2e 69 63 6f 6e 2d 6c 69 6e 65 32 2d 6d 69 63 72 6f 70 68 6f 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 Data Ascii: ;}.icon-line2-pencil:before {content: "\e05f";}.icon-line2-note:before {content: "\e060";}.icon-line2-music-tone-alt:before {content: "\e061";}.icon-line2-music-tone:before {content: "\e062";}.icon-line2-microphone:before {content: "\e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49906	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	590	OUT	GET /assests/css/animate.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/solid-menu.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 01 May 2019 15:22:53 GMT Accept-Ranges: bytes ETag: "7cc82abf310d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 136886 Connection: close
2024-02-20 15:13:32 UTC	6753	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 2f 2a 21 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 33 2e 35 2e 31 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 20 2a 0a 20 2a 20 0a 20 2a 20 0a 20 2a 2f 0a 0a 2e 61 6e 69 6d 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 6d 6f 7a 2d 61 6e Data Ascii: @charset "UTF-8";/! animate.css -http://daneden.me/animate * Version - 3.5.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2016 Daniel Eden * * * */.animated{-webkit-animation-duration:1s;-moz-an
2024-02-20 15:13:32 UTC	10136	IN	Data Raw: 2e 31 35 2c 2e 38 35 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 2e 38 35 2c 31 29 7d 36 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 35 2c 31 2e 30 35 2c 31 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 35 2c 31 2e 30 35 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 35 2c 31 2e 30 35 2c 31 29 7d 37 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 2e 39 35 2c 31 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 2e 39 35 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 2e 39 35 2c 31 29 7d Data Ascii: .15,.85,1);transform:scale3d(1.15,.85,1)}65%{-webkit-transform:scale3d(.95,1.05,1);-moz-transform:scale3d(.95,1.05,1);transform:scale3d(.95,1.05,1)}75%{-webkit-transform:scale3d(1.05,.95,1);-moz-transform:scale3d(1.05,.95,1);transform:scale3d(1.05,.95,1)}
2024-02-20 15:13:32 UTC	8688	IN	Data Raw: 33 64 65 67 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 7d 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 20 72 6f 74 61 74 65 28 2d 33 64 Data Ascii: 3deg);-moz-transform:scale3d(1.1,1.1,1.1) rotate(3deg);transform:scale3d(1.1,1.1,1.1) rotate(3deg)}40%,60%,80%{-webkit-transform:scale3d(1.1,1.1,1.1) rotate(-3deg);-moz-transform:scale3d(1.1,1.1,1.1) rotate(-3deg);transform:scale3d(1.1,1.1,1.1) rotate(-3d
2024-02-20 15:13:32 UTC	8688	IN	Data Raw: 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 33 2c 2e 33 2c 2e 33 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 33 2c 2e 33 2c 2e 33 29 7d 32 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 2c 31 2e 31 2c 31 2e 31 29 7d 34 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 2c 2e 39 2c 2e 39 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 2c 2e 39 2c 2e 39 29 7d 36 30 25 7b 6f 70 61 63 69 74 Data Ascii: c-bezier(.215,.61,.355,1)}0%{opacity:0;-webkit-transform:scale3d(.3,.3,.3);transform:scale3d(.3,.3,.3)}20%{-webkit-transform:scale3d(1.1,1.1,1.1);transform:scale3d(1.1,1.1,1.1)}40%{-webkit-transform:scale3d(.9,.9,.9);transform:scale3d(.9,.9,.9)}60%{opacit
2024-02-20 15:13:32 UTC	8688	IN	Data Raw: 6e 73 6c 61 74 65 33 64 28 35 70 78 2c 30 2c 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 62 6f 75 6e 63 65 49 6e 4c 65 66 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 4c 65 66 74 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 4c 65 66 74 3b 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 4c 65 66 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 4c 65 66 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 Data Ascii: nslate3d(5px,0,0)}to{-webkit-transform:none;-moz-transform:none;-o-transform:none;transform:none}}.bounceInLeft{-webkit-animation-name:bounceInLeft;-moz-animation-name:bounceInLeft;-o-animation-name:bounceInLeft;animation-name:bounceInLeft}@-webkit-keyfra
2024-02-20 15:13:32 UTC	7240	IN	Data Raw: 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 32 30 70 78 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 30 30 30 70 78 2c 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 30 30 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 30 30 30 70 78 2c 30 29 7d 7d 2e 62 6f 75 6e 63 65 4f 75 74 44 6f 77 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 4f 75 74 44 6f 77 6e 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 4f 75 74 44 6f 77 6e 3b 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d Data Ascii: orm:translate3d(0,-20px,0)}to{opacity:0;-webkit-transform:translate3d(0,2000px,0);-moz-transform:translate3d(0,2000px,0);transform:translate3d(0,2000px,0)}}.bounceOutDown{-webkit-animation-name:bounceOutDown;-moz-animation-name:bounceOutDown;-o-animation-
2024-02-20 15:13:32 UTC	1448	IN	Data Raw: 6e 4c 65 66 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 4c 65 66 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 4c 65 66 74 42 69 67 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 30 30 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 30 30 30 70 78 2c 30 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 4c 65 66 74 42 69 67 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 Data Ascii: nLeft;animation-name:fadeInLeft}@-webkit-keyframes fadeInLeftBig{0%{opacity:0;-webkit-transform:translate3d(-2000px,0,0);transform:translate3d(-2000px,0,0)}to{opacity:1;-webkit-transform:none;transform:none}}@-moz-keyframes fadeInLeftBig{0%{opacity:0;-web
2024-02-20 15:13:32 UTC	2896	IN	Data Raw: 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 69 67 68 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 2c 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 Data Ascii: y:0;-webkit-transform:translate3d(100%,0,0);transform:translate3d(100%,0,0)}to{opacity:1;-webkit-transform:none;-o-transform:none;transform:none}}@keyframes fadeInRight{0%{opacity:0;-webkit-transform:translate3d(100%,0,0);-moz-transform:translate3d(100%,0
2024-02-20 15:13:32 UTC	5792	IN	Data Raw: 30 30 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 30 30 30 70 78 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 55 70 42 69 67 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 30 30 30 70 78 2c 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 30 30 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 32 Data Ascii: 000px,0);transform:translate3d(0,2000px,0)}to{opacity:1;-webkit-transform:none;-o-transform:none;transform:none}}@keyframes fadeInUpBig{0%{opacity:0;-webkit-transform:translate3d(0,2000px,0);-moz-transform:translate3d(0,2000px,0);transform:translate3d(0,2
2024-02-20 15:13:32 UTC	8688	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 7d 7d 2e 66 61 64 65 4f 75 74 55 70 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 4f 75 74 55 70 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 4f 75 74 55 70 3b 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 4f 75 74 55 70 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 4f 75 74 55 70 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 4f 75 74 55 70 42 69 67 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b Data Ascii: ansform:translate3d(0,-100%,0);transform:translate3d(0,-100%,0)}}.fadeOutUp{-webkit-animation-name:fadeOutUp;-moz-animation-name:fadeOutUp;-o-animation-name:fadeOutUp;animation-name:fadeOutUp}@-webkit-keyframes fadeOutUpBig{0%{opacity:1}to{opacity:0;-webk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49908	142.251.16.156	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	801	OUT	POST /g/collect?v=2&tid=G-LSF75XJL4E&cid=2101562765.1708442011&gtm=45je42e0v9108954470za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.marylandtaxes.gov X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.marylandtaxes.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:32 UTC	455	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.marylandtaxes.gov Date: Tue, 20 Feb 2024 15:13:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49907	142.251.40.142	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	1394	OUT	POST /g/collect?v=2&tid=G-LSF75XJL4E&gtm=45je42e0v9108954470za200&_p=1708442008723&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=2101562765.1708442011&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1708442011&sct=1&seg=0&dl=https%3A%2F%2Fwww.marylandtaxes.gov%2FMDTaxConnect%2Findex.php&dt=Maryland%20Tax%20Connect&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3416 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.marylandtaxes.gov X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.marylandtaxes.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:33 UTC	455	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.marylandtaxes.gov Date: Tue, 20 Feb 2024 15:13:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49910	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:32 UTC	598	OUT	GET /assests/css/solid-menu-core.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/solid-menu.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:33 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Sat, 19 Oct 2019 05:05:57 GMT Accept-Ranges: bytes ETag: "32ce5ce43a86d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:45 GMT Content-Length: 56648 Connection: close
2024-02-20 15:13:33 UTC	961	IN	Data Raw: 2f 2a 20 43 4f 4c 4f 52 53 2c 20 42 41 43 4b 47 52 4f 55 4e 44 2d 43 4f 4c 4f 52 53 20 2a 2f 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 23 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 2e 6e 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 73 20 6c 69 6e 65 61 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 Data Ascii: /* COLORS, BACKGROUND-COLORS */body { position: relative;}#wrapper { background: #fff; padding-top: 20px; padding-bottom: 20px; position: relative;}.no-transition { -webkit-transition: all 0s linear !important; -moz-trans
2024-02-20 15:13:33 UTC	5792	IN	Data Raw: 68 74 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0d 0a 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0d 0a 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0d 0a 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0d 0a 7d 0d 0a 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 63 6c 6f 73 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b Data Ascii: ht { -webkit-transform: translateX(0); -moz-transform: translateX(0); -ms-transform: translateX(0); -o-transform: translateX(0); transform: translateX(0);}.off-canvas-close { font-size: 14px; line-height: 19px;
2024-02-20 15:13:33 UTC	1448	IN	Data Raw: 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 63 6c 69 63 6b 20 2e 64 72 6f 70 64 6f 77 6e 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 68 6f 76 65 72 20 2e 64 72 6f 70 64 6f 77 6e 2e 6f 70 65 6e 20 2e 6d 2d 6d 61 72 6b 65 72 2e 6d 2d 6d 61 72 6b 65 72 2d 72 6f 74 61 74 65 2c 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 68 6f 76 65 72 20 2e 64 72 6f 70 64 6f 77 6e Data Ascii: .solid-menus .navbar-click .dropdown.open .dropdown-menu-container > .dropdown-menu { margin-top: 0 !important; display: block !important;}.solid-menus .navbar-hover .dropdown.open .m-marker.m-marker-rotate,.solid-menus .navbar-hover .dropdown
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 78 2d 73 65 61 72 63 68 2d 63 6c 6f 73 65 20 7b 0d 0a 20 20 74 6f 70 3a 20 30 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 Data Ascii: isplay: block;}.solid-menus .x-search-close { top: 0;}.solid-menus .navbar-nav .dropdown-menu-container { float: left;}.solid-menus .navbar-nav .dropdown-menu-container > .dropdown-menu { display: none; left: auto; padding: 15px
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 68 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0d 0a 20 20 20 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 65 6d 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 Data Ascii: h-block { display: block; position: relative; width: 100%; height: 100%; padding: 10px; text-align: center; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; margin-bottom: 1em; color: #ff
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 65 72 20 2e 74 69 6c 65 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 41 45 41 45 41 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 61 65 61 65 61 3b 0d 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 63 65 6c 6c 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 32 35 70 78 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 74 69 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 69 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 74 69 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 Data Ascii: er .tile { border-right: 1px solid #EAEAEA; border-bottom: 1px solid #eaeaea; list-style: none; display: table-cell; padding: 5px 25px;}.solid-menus .tile-container .tile:last-child { border-right: 0;}.solid-menus .tile-container
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 6e 2d 62 78 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 63 6e 2d 62 78 2d 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 20 2e 69 63 6e 2d 62 78 20 69 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 70 78 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 69 63 6e 2d 62 78 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 63 6e 2d 62 78 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 35 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 69 63 6e 2d 62 78 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 63 6e 2d 62 78 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 20 2e 69 63 6e 2d 62 78 20 7b 0d 0a 20 20 74 6f 70 3a 20 2d 35 70 Data Ascii: n-bx-container.icn-bx-container-lg .icn-bx i { font-size: 100px;}.solid-menus .icn-bx-container.icn-bx-container-sm { padding: 0px 0px 0px 50px; margin-bottom: 20px;}.solid-menus .icn-bx-container.icn-bx-container-sm .icn-bx { top: -5p
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 0d 0a 20 20 77 69 64 74 68 3a 20 37 30 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 34 34 34 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 70 2e 6f 72 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 31 65 6d 20 30 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 70 2e 6f 72 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 2d Data Ascii: argin-top: 30px; width: 70px; border-top: 2px solid #444;}.solid-menus p.or { position: relative; display: block; padding: 0 5px; margin: 1em 0;}.solid-menus p.or:after { content: ""; width: 100%; height: 1px; border-
2024-02-20 15:13:33 UTC	5792	IN	Data Raw: 69 6e 61 2d 72 69 70 2d 6d 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 3b 0d 0a 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 3b 0d 0a 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 30 29 3b 0d 0a 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 30 29 3b 0d Data Ascii: ina-rip-m:hover:before { -webkit-transition: all 0.5s ease-in; -moz-transition: all 0.5s ease-in; -o-transition: all 0.5s ease-in; transition: all 0.5s ease-in; -webkit-transform: scale(10); -moz-transform: scale(10);
2024-02-20 15:13:33 UTC	6455	IN	Data Raw: 64 2d 6d 65 6e 75 73 20 2e 62 74 6e 2d 6d 69 6e 61 2e 62 74 6e 2d 6d 69 6e 61 2d 72 65 76 2d 6c 3a 68 6f 76 65 72 20 3e 20 73 70 61 6e 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 0d 0a 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 0d 0a 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 0d 0a 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 0d 0a 20 20 6f 70 61 63 Data Ascii: d-menus .btn-mina.btn-mina-rev-l:hover > span { -webkit-transform: translateX(100%); -moz-transform: translateX(100%); -ms-transform: translateX(100%); -o-transform: translateX(100%); transform: translateX(100%); opac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49912	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	599	OUT	GET /assests/css/solid-menu-media.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/solid-menu.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:33 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Sun, 07 Jul 2019 03:20:23 GMT Accept-Ranges: bytes ETag: "322538ea7234d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 14748 Connection: close
2024-02-20 15:13:33 UTC	961	IN	Data Raw: 2e 63 6f 6c 2d 78 73 2d 32 2d 34 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 63 6f 6c 2d 78 2d 73 2d 32 2d 34 20 7b 0a 20 20 77 69 64 74 68 3a 20 32 30 25 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2f 2a 20 35 20 43 6f 6c 75 6d 6e 73 20 2a 2f 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 32 2d 34 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 32 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 31 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 38 33 2e 33 Data Ascii: .col-xs-2-4 { float: left;}.col-x-s-2-4 { width: 20%;}@media (min-width: 768px) { /* 5 Columns */ .col-sm-2-4 { float: left; } .col-sm-12 { width: 100%; } .col-sm-11 { width: 91.66666667%; } .col-sm-10 { width: 83.3
2024-02-20 15:13:33 UTC	8688	IN	Data Raw: 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 35 38 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 35 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 34 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 33 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 32 2d 34 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 32 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 Data Ascii: { width: 58.33333333%; } .col-md-6 { width: 50%; } .col-md-5 { width: 41.66666667%; } .col-md-4 { width: 33.33333333%; } .col-md-3 { width: 25%; } .col-md-2-4 { width: 20%; } .col-md-2 { width: 16.66666
2024-02-20 15:13:33 UTC	5099	IN	Data Raw: 76 61 73 20 2e 74 61 62 73 2e 73 69 64 65 2d 74 61 62 73 20 2e 74 61 62 2d 6e 61 76 20 3e 20 6c 69 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 20 20 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 69 2d 6c 69 73 74 2e 69 2d 6c 69 73 74 2d 69 2d 62 6c 6f 63 6b 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 20 20 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 69 2d 6c 69 73 74 2e 69 2d 6c 69 73 74 2d 69 2d 62 6c 6f 63 6b 20 3e 20 6c 69 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 20 20 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 69 2d 6c 69 73 74 2e 69 2d 6c 69 73 74 2d 69 2d 62 6c 6f Data Ascii: vas .tabs.side-tabs .tab-nav > li { width: 100% !important; } .solid-menus .i-list.i-list-i-block { float: none !important; } .solid-menus .i-list.i-list-i-block > li { display: block !important; } .solid-menus .i-list.i-list-i-blo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49913	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	599	OUT	GET /assests/css/solid-menu-theme.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/solid-menu.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:33 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 16 Oct 2019 17:07:19 GMT Accept-Ranges: bytes ETag: "cf97ef2a4484d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 23478 Connection: close
2024-02-20 15:13:33 UTC	3857	IN	Data Raw: 2f 2a 20 43 4f 4c 4f 52 53 2c 20 42 41 43 4b 47 52 4f 55 4e 44 2d 43 4f 4c 4f 52 53 20 2a 2f 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 39 39 66 66 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 3b 20 20 2f 2a 31 70 78 20 73 6f 6c 69 64 20 23 31 35 31 35 31 35 2a 2f 0d 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 3b 20 2f 2a 31 70 78 20 73 6f 6c 69 64 20 23 31 35 31 35 31 35 2a 2f 0d 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 Data Ascii: /* COLORS, BACKGROUND-COLORS /.solid-menus .navbar-default.navbar-dark { background: #0099ff; border-left: 0; /1px solid #151515/ border-right: 0; /1px solid #151515*/ border-bottom: 0; border-top: 0;}.solid-menus .navbar-default
2024-02-20 15:13:33 UTC	8688	IN	Data Raw: 63 6b 2d 6d 64 2e 69 2d 6c 69 73 74 2d 69 2d 62 6c 6f 63 6b 2d 62 67 2d 68 6f 76 0d 0a 20 20 3e 20 6c 69 0d 0a 20 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 2f 2a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 64 33 31 39 32 3b 2a 2f 0d 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 0d 0a 20 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 2e 6e 61 76 62 61 72 2d 64 61 72 6b 0d 0a 20 20 2e 69 2d 6c 69 73 74 2d 69 2d 62 6c 6f 63 6b 2e 69 2d 6c 69 73 74 2d 69 2d 62 6c 6f 63 6b 2d 6d 64 2e 69 2d 6c 69 73 74 2d 69 2d 62 6c 6f 63 6b 2d 6e 6f 2d 62 67 2d 68 6f 76 65 72 0d 0a 20 20 3e 20 6c 69 0d 0a 20 20 61 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: ck-md.i-list-i-block-bg-hov > li a:hover { /background-color: #2d3192;/ color: white;}.solid-menus .navbar-default.navbar-dark .i-list-i-block.i-list-i-block-md.i-list-i-block-no-bg-hover > li a { display: block !important
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 23 33 33 63 63 66 66 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 2e 6e 61 76 62 61 72 2d 62 6c 75 65 20 2e 74 69 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 69 6c 65 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 33 63 63 66 66 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 2e 6e 61 76 62 61 72 2d 62 6c 75 65 20 2e 74 69 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 69 6c 65 3a 68 6f 76 65 72 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e Data Ascii: #33ccff;}.solid-menus .navbar-default.navbar-blue .tile-container .tile:hover { background: #33ccff; color: white !important;}.solid-menus .navbar-default.navbar-blue .tile-container .tile:hover a { color: white !important;}.solid-men
2024-02-20 15:13:33 UTC	3693	IN	Data Raw: 6f 6c 69 64 2d 6d 65 6e 75 73 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 2e 6e 61 76 62 61 72 2d 6f 72 61 6e 67 65 2e 6e 61 76 62 61 72 2d 68 6f 76 65 72 20 2e 64 72 6f 70 64 6f 77 6e 3a 68 6f 76 65 72 20 3e 20 61 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 39 32 33 36 30 65 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 7d 0d 0a 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 0d 0a 20 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 2e 6e 61 76 62 61 72 2d 6f 72 61 6e 67 65 2e 6e 61 76 62 61 72 2d 68 6f 76 65 72 0d 0a 20 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 0d 0a 20 20 3e 20 6c 69 0d 0a 20 20 3e 20 61 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 33 33 33 3b 0d 0a 20 20 62 61 63 6b 67 72 Data Ascii: olid-menus .navbar-default.navbar-orange.navbar-hover .dropdown:hover > a { background-color: #92360e; color: white;}.solid-menus .navbar-default.navbar-orange.navbar-hover .dropdown-menu > li > a:focus { color: #333333; backgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49914	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	683	OUT	GET /assests/css/animation.css HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/assests/css/state.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.1.2101562765.1708442011
2024-02-20 15:13:33 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Tue, 01 Dec 2020 16:56:35 GMT Accept-Ranges: bytes ETag: "b6b566ed2c8d61:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 75154 Connection: close
2024-02-20 15:13:33 UTC	5306	IN	Data Raw: 2f 2a 20 43 53 53 33 20 41 6e 69 6d 61 74 69 6f 6e 73 20 2a 2f 0d 0a 0d 0a 2f 2a 20 66 61 64 65 49 6e 20 2a 2f 0d 0a 0d 0a 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 20 7b 0d 0a 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 32 3b 0d 0a 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 34 30 25 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 34 3b 0d 0a 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 36 30 25 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 0d 0a 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 38 30 25 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0d 0a 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 0d 0a 20 20 20 20 31 Data Ascii: /* CSS3 Animations // fadeIn */@-o-keyframes fadeIn { 0% { opacity: 0.2; } 40% { opacity: 0.4; } 60% { opacity: 0.6; } 80% { opacity: 0.8; } 1
2024-02-20 15:13:33 UTC	8688	IN	Data Raw: 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 58 28 32 35 64 65 67 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 58 28 32 35 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0d 0a 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 36 30 25 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 58 28 2d 32 35 64 65 67 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 58 28 2d 32 35 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 39 3b 0d 0a 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 38 30 25 20 Data Ascii: -webkit-transform: rotateX(25deg); transform: rotateX(25deg); opacity: 0.8; } 60% { -webkit-transform: rotateX(-25deg); transform: rotateX(-25deg); opacity: 0.9; } 80%
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 65 33 64 28 30 2c 20 32 35 25 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 32 35 3b 0d 0a 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 39 30 25 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 35 25 2c 20 30 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 35 25 2c 20 30 29 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 35 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 0d 0a 20 20 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 30 29 3b 0d Data Ascii: e3d(0, 25%, 0); opacity: 0.25; } 90% { -webkit-transform: translate3d(0, -5%, 0); transform: translate3d(0, -5%, 0); opacity: 0.75; } 100% { -webkit-transform: translate3d(0, 0, 0);
2024-02-20 15:13:33 UTC	5792	IN	Data Raw: 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 33 2c 20 2e 33 2c 20 2e 33 29 3b 0d 0a 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 32 3b 0d 0a 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 33 30 25 20 7b 0d 0a 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 34 3b 0d 0a 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 36 30 25 20 7b 0d 0a 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 3b 0d 0a 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 0d 0a 20 20 7d 0d 0a 0d 0a 7d 0d 0a 0d 0a Data Ascii: form: scale3d(.3, .3, .3); opacity: 0.2; } 30% { opacity: 0.4; } 60% { opacity: 0.7; } 100% { -moz-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); opacity: 1; }}
2024-02-20 15:13:33 UTC	4344	IN	Data Raw: 30 25 20 31 30 30 25 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 33 30 30 3b 0d 0a 0d 0a 20 20 7d 20 0d 0a 0d 0a 20 20 34 30 25 2c 20 34 33 25 20 7b 0d 0a 20 20 20 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0d 0a 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 Data Ascii: 0% 100%; z-index: 300; } 40%, 43% { -webkit-animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: trans
2024-02-20 15:13:33 UTC	1448	IN	Data Raw: 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 30 70 78 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 30 70 78 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 30 70 78 2c 20 30 29 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 30 25 20 31 Data Ascii: animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -10px, 0); -moz-transform: translate3d(0, -10px, 0); transform: translate3d(0, -10px, 0); -webkit-transform-origin: 0% 1
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 0a 20 20 30 25 2c 20 35 33 25 2c 20 31 30 30 25 20 7b 0d 0a 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 20 72 6f 74 61 74 65 5a 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 0%, 53%, 100% { -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); -webkit-transform: translate3d(0,0,0) rotateZ(0deg);
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 30 70 78 2c 20 30 29 20 72 6f 74 61 74 65 5a 28 35 64 65 67 29 3b 0d 0a 0d 0a 20 20 20 20 20 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 30 70 78 2c 20 30 29 20 72 6f 74 61 74 65 5a 28 35 64 65 67 29 3b 0d 0a 0d 0a 20 20 20 20 20 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 30 70 78 2c 20 30 29 20 72 6f 74 61 74 65 5a 28 35 64 65 67 29 3b 0d 0a 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a Data Ascii: m: translate3d(0, -10px, 0) rotateZ(5deg); -moz-transform: translate3d(0, -10px, 0) rotateZ(5deg); transform: translate3d(0, -10px, 0) rotateZ(5deg); -webkit-transform-origin:
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 Data Ascii: -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); -moz-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); -o-animation-timing-function: cubic-bezier(0
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 6b 65 77 58 28 30 2e 33 39 30 36 32 35 64 65 67 29 20 73 6b 65 77 59 28 30 2e 33 39 30 36 32 35 64 65 67 29 3b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 6b 65 77 58 28 30 2e 33 39 30 36 32 35 64 65 67 29 20 73 6b 65 77 59 28 30 2e 33 39 30 36 32 35 64 65 67 29 0d 0a 20 20 7d 0d 0a 20 20 38 38 2e 38 25 20 7b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 6b 65 77 58 28 2d 30 2e 31 39 35 33 31 32 35 64 65 67 29 20 73 6b 65 77 59 28 2d 30 2e 31 39 35 33 31 32 35 64 65 67 29 3b 0d 0a 20 Data Ascii: ); -o-transform: skewX(0.390625deg) skewY(0.390625deg); transform: skewX(0.390625deg) skewY(0.390625deg) } 88.8% { -webkit-transform: skewX(-0.1953125deg) skewY(-0.1953125deg);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49915	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	737	OUT	GET /assests/img/Comptroller_Logo.svg HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.1.2101562765.1708442011
2024-02-20 15:13:33 UTC	510	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Mon, 25 Nov 2019 16:48:15 GMT Accept-Ranges: bytes ETag: "7d8e921b0a3d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 13337 Connection: close
2024-02-20 15:13:33 UTC	957	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-02-20 15:13:33 UTC	8688	IN	Data Raw: 6c 4a 79 6b 69 4d 7a 49 4e 48 68 59 6f 4b 69 46 55 44 77 73 6b 4e 54 63 79 52 51 59 44 54 43 30 75 4a 55 4e 52 49 41 41 67 45 44 0d 0a 41 67 49 46 42 77 6f 45 42 67 4d 41 41 41 41 41 41 51 49 52 41 43 45 53 4d 51 4e 42 49 6c 46 68 63 59 45 79 6b 61 47 78 30 57 49 54 42 43 44 42 51 6c 4a 79 67 69 4d 7a 46 41 55 51 73 74 49 30 4d 45 42 51 6b 73 4b 54 38 4f 46 54 0d 0a 2f 39 6f 41 44 41 4d 42 41 41 49 52 41 78 45 41 41 41 43 49 65 6b 38 75 41 63 64 78 49 54 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 44 4c 31 4e 44 6b 36 76 6e 64 72 7a 72 79 2f 6f 6f 38 6e 4e 76 38 41 0d 0a 30 2b 48 36 72 34 2f 37 37 38 76 35 74 76 30 62 53 6c 75 39 45 59 2b 50 39 5a 38 76 6c 31 66 4f 52 7a 73 2f 70 2b 33 61 74 72 37 76 6b 2b 72 56 6a 4d 36 65 43 31 Data Ascii: lJykiMzINHhYoKiFUDwskNTcyRQYDTC0uJUNRIAAgEDAgIFBwoEBgMAAAAAAQIRACESMQNBIlFhcYEykaGx0WITBCDBQlJygiMzFAUQstI0MEBQksKT8OFT/9oADAMBAAIRAxEAAACIek8uAcdxITAAAAAAAAAAAAAAAAAAAAAAADL1NDk6vndrzry/oo8nNv8A0+H6r4/778v5tv0bSlu9EY+P9Z8vl1fORzs/p+3atr7vk+rVjM6eC1
2024-02-20 15:13:33 UTC	3692	IN	Data Raw: 79 47 37 48 4d 32 41 76 36 50 49 49 47 0d 0a 6b 76 45 4d 6b 73 4c 44 73 77 6f 45 5a 6a 45 55 46 6d 6b 4c 68 66 44 63 44 44 73 6f 6d 43 52 6f 39 51 73 31 6a 67 65 30 56 7a 51 32 6d 51 5a 4d 76 64 50 38 74 71 75 30 74 32 47 54 6c 56 4c 66 65 30 33 6f 76 49 78 5a 7a 6d 78 4e 0d 0a 79 61 30 51 53 6d 4e 54 69 51 74 73 65 32 6a 46 4a 4b 54 47 31 74 53 32 41 76 62 4c 49 43 75 58 44 4b 55 54 36 6f 74 62 7a 34 56 79 70 5a 43 30 64 37 36 62 41 43 34 37 41 4b 45 63 63 78 57 4d 5a 49 41 4c 65 69 31 4b 4a 35 43 34 0d 0a 53 2b 6b 57 41 41 76 6e 6c 51 67 35 6e 34 49 79 53 77 74 37 4b 45 6b 54 46 48 58 4a 6c 4e 6a 57 71 5a 74 62 66 57 73 4c 6e 74 49 2b 53 4f 75 39 68 62 41 55 49 35 59 56 6b 6a 4f 4a 56 78 71 46 2f 50 55 65 35 32 2b 33 45 4c 34 69 0d 0a 38 5a 49 47 50 56 Data Ascii: yG7HM2Av6PIIGkvEMksLDswoEZjEUFmkLhfDcDDsomCRo9Qs1jge0VzQ2mQZMvdP8tqu0t2GTlVLfe03ovIxZzmxNya0QSmNTiQtse2jFJKTG1tS2AvbLICuXDKUT6otbz4VypZC0d76bAC47AKEccxWMZIALei1KJ5C4S+kWAAvnlQg5n4IySwt7KEkTFHXJlNjWqZtbfWsLntI+SOu9hbAUI5YVkjOJVxqF/PUe52+3EL4i8ZIGPV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49916	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	757	OUT	GET /mdtaxconnect/img/Logo_Final-Tory-Blue-background.png HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.1.2101562765.1708442011
2024-02-20 15:13:33 UTC	507	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 08 Nov 2023 15:53:15 GMT Accept-Ranges: bytes ETag: "4f312eaf5b12da1:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 17281 Connection: close
2024-02-20 15:13:33 UTC	960	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 36 00 00 01 2c 08 06 00 00 00 f9 28 ec d6 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ed dd bf 6e 24 57 b6 2f e8 c8 83 36 c6 ab 6c 80 7e 71 70 1f a0 d8 4f 50 ec 27 10 1b b4 64 15 e5 0b 10 f5 04 c5 f2 c6 13 0b 90 2f d2 92 45 34 e9 dd b1 ba f8 04 4d 3e c0 a0 8b c6 00 73 01 02 a7 e8 5f 20 07 a1 b3 42 27 c5 2e 66 ec d8 f1 3f f3 fb 00 42 52 77 55 32 32 32 22 32 e2 b7 d7 5e 7b b1 5a ad 0a 00 00 00 00 80 39 f9 0f 9f 16 00 00 00 00 30 37 82 4d 00 00 00 00 60 76 04 9b 00 00 00 00 c0 ec 08 36 01 00 00 00 80 d9 11 6c 02 00 00 00 00 b3 23 d8 04 00 00 00 00 66 47 b0 09 00 00 00 00 cc 8e 60 13 00 00 00 00 98 1d c1 26 00 00 00 00 30 3b 82 4d 00 00 00 00 60 76 04 9b Data Ascii: PNGIHDR6,(pHYs.#.#x?v IDATxn$W/6l~qpOP'd/E4M>s_ B'.f?BRwU222"2^{Z907M`v6l#fG`&0;M`v
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 3b 08 36 01 00 d8 25 df c4 aa d4 00 00 cc 9c 60 13 00 80 5d 73 61 21 21 00 80 f9 fb 93 cf 10 00 80 01 dc 0d b4 93 53 56 9d 2e 17 12 ba 8e fe 87 00 00 cc 94 60 13 00 80 de ed 1d af 06 59 91 fc f1 6a 71 52 14 c5 2f 09 7f f4 ed e3 d5 e2 6c ef 78 75 36 c0 66 01 00 d0 03 53 d1 01 00 d8 1a 7b c7 ab 8b a2 28 fe 5a 14 c5 53 c2 7b 7a af df 26 00 c0 7c 09 36 01 00 d8 2a 7b c7 ab 4f 31 cd 3c 25 dc 2c fb 6d 1e 38 02 00 00 e6 47 b0 09 00 c0 d6 d9 3b 5e dd 25 86 9b 65 bf cd 4f 16 13 02 00 98 1f c1 26 00 00 5b 29 c2 cd fd a2 28 ee 6b de 9f 70 13 00 60 86 04 9b 00 00 6c ad bd e3 d5 97 a8 dc ac 0b 37 df 08 37 01 00 e6 45 b0 09 00 c0 56 13 6e 02 00 6c 27 c1 26 00 00 5b 4f b8 09 00 b0 7d 04 9b 00 00 ec 04 e1 26 00 c0 76 11 6c 02 00 b0 33 22 dc 3c 4a 58 2d 5d b8 09 00 30 71 Data Ascii: ;6%`]sa!!SV.`YjqR/lxu6fS{(ZS{z&\|6*{O1<%,m8G;^%eO&[)(kp`l77EVnl'&[O}&vl3"<JX-]0q
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 8e 06 9b 85 73 91 89 28 1f 26 bf 9b c9 b1 f8 10 d5 ce 82 4d fe 20 42 11 e1 26 b9 ca 63 e7 87 9e f7 5e ca 6c 85 93 08 59 e7 b8 78 da 4d 6c 7f 4e 9f ee 83 9c f3 f7 2a 17 4d 37 00 00 20 00 49 44 41 54 f1 6a b1 6c b9 a0 e2 c7 dc 40 b5 a9 8e a6 a4 1f 0e b1 ad 00 5d b3 2a 3a 7d b8 88 8a bb 39 7b c8 7c 0f 6e 08 ba 71 1d 81 64 17 ae 5b ac 48 3a 77 ce 45 a6 a2 3c 16 3f ce e0 d3 38 d9 e1 eb 05 8c 6d 6b db 88 44 7f c5 ae ee 6b 5e 52 db 5f 3a 2a f2 e6 f6 fd 58 ee b7 1f f7 8e 57 47 51 f9 98 53 55 98 fb 9e cf 5b 0c 96 de b7 5c 6c a8 b1 96 ab a4 bf 8d 29 f7 00 b3 23 d8 a4 2f 27 03 dc c0 f5 e5 26 77 64 d7 a2 25 9d f9 d2 61 95 65 9b 91 f6 6d e0 5c 64 2a 4e 63 01 a0 a9 fa a0 22 0f 46 b5 ed b3 2b fa ee 61 98 f4 bd 17 ab a7 7f d7 f3 b6 74 a5 1c d8 3c 78 d6 ff 71 d3 ea ef 2f Data Ascii: s(&M B&c^lYxMlNM7 IDATjl@]:}9{\|nqd[H:wE<?8mkDk^R_:XWGQSU[\l)#/'&wd%aem\dNc"F+at<xq/
2024-02-20 15:13:33 UTC	1841	IN	Data Raw: ae 3e cb a1 aa 60 ab 15 bc bf eb 68 df de 47 5f d0 bf c4 79 79 5e b3 4f be 24 2c 2c f3 b6 c7 d5 f6 4f 62 1f fc 23 31 d4 7c 8a a9 f4 75 a1 66 dd 71 33 f4 35 b9 ba 46 fe bd e6 ba 54 d7 4f 33 57 57 41 ee 32 de c7 4b a1 e6 e4 56 5e 17 6c 02 00 00 bc 2c 35 44 19 73 01 8e 3a eb fd ec 9a 4e 3d ff 98 d9 ff 2d 25 04 cd 5d 3d fa 24 de 4b ea 54 d6 be 7b 53 f6 e5 b2 c7 b0 69 93 21 a6 99 de b6 a8 58 eb 22 58 f9 38 42 6b 82 8b b8 4e fc 25 7e ff 6d 42 af d9 db 68 a3 f0 21 c2 be 45 9c 8f 67 0d f7 43 ca 7b 7d d7 e1 f1 b6 1f db f8 39 a6 e2 a7 56 69 de af 0d 5a d4 a9 eb 1f 7a 32 50 d5 66 93 7e b2 55 7f e2 3e 16 36 ea a2 0a 7e 99 d0 13 74 52 d3 d0 0b c1 26 00 00 40 ad db 84 3f 33 d5 8a cd 6a 01 91 d4 e9 c5 95 32 70 f9 5b 8b aa b6 94 20 f4 bc 61 f0 b0 1f 21 65 6a cf c2 fb 19 Data Ascii: >`hG_yy^O$,,Ob#1\|ufq35FTO3WWA2KV^l,5Ds:N=-%]=$KT{Si!X"X8BkN%~mBh!EgC{}9ViZz2Pf~U>6~tR&@?3j2p[ a!ej

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49917	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	663	OUT	GET /assests/js/main.js HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.1.2101562765.1708442011
2024-02-20 15:13:33 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Sat, 19 Oct 2019 05:12:39 GMT Accept-Ranges: bytes ETag: "a1f827d43b86d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 11414 Connection: close
2024-02-20 15:13:33 UTC	5291	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 2f 2f 69 66 20 74 68 65 20 44 4f 4d 20 69 73 20 72 65 61 64 79 0d 0a 0d 0a 20 20 76 61 72 20 73 6f 6c 69 64 4d 65 6e 75 73 20 3d 20 7b 0d 0a 20 20 20 20 64 65 66 61 75 6c 74 5f 6d 65 6e 75 3a 20 27 69 6e 64 65 78 2e 68 74 6d 6c 27 20 2f 2a 2a 2f 2c 0d 0a 20 20 20 20 64 65 66 61 75 6c 74 5f 61 6e 69 6d 61 74 69 6f 6e 3a 20 27 61 6e 69 6d 61 74 69 6f 6e 2d 66 61 64 65 49 6e 44 6f 77 6e 27 2c 0d 0a 20 20 20 20 73 77 69 76 65 6c 5f 61 6e 69 6d 61 74 69 6f 6e 3a 20 27 61 6e 69 6d 61 74 69 6f 6e 2d 66 61 64 65 49 6e 44 6f 77 6e 27 2c 20 2f 2f 66 6f 72 20 6d 65 67 61 2d 6d 65 6e 75 2d 36 20 6f 6e 6c 79 0d 0a 20 20 20 20 77 69 6e 64 6f 77 5f 77 69 64 74 68 3a 20 Data Ascii: $(document).ready(function() { //if the DOM is ready var solidMenus = { default_menu: 'index.html' /**/, default_animation: 'animation-fadeInDown', swivel_animation: 'animation-fadeInDown', //for mega-menu-6 only window_width:
2024-02-20 15:13:33 UTC	6123	IN	Data Raw: 20 20 20 20 2e 70 61 72 65 6e 74 73 28 27 2e 68 6f 6d 65 2d 6d 65 6e 75 27 29 0d 0a 20 20 20 20 20 20 20 20 2e 73 69 62 6c 69 6e 67 73 28 27 2e 73 69 64 65 2d 6d 65 6e 75 2d 77 69 64 65 27 29 0d 0a 20 20 20 20 20 20 20 20 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 73 2d 61 63 74 69 76 65 27 29 3b 0d 0a 20 20 20 20 20 20 5f 74 68 69 73 0d 0a 20 20 20 20 20 20 20 20 2e 70 61 72 65 6e 74 73 28 27 2e 68 6f 6d 65 2d 6d 65 6e 75 27 29 0d 0a 20 20 20 20 20 20 20 20 2e 73 69 62 6c 69 6e 67 73 28 27 2e 73 69 64 65 2d 6d 65 6e 75 2d 77 69 64 65 27 20 2b 20 27 2e 27 20 2b 20 64 61 74 61 5f 61 74 74 72 69 62 75 74 65 29 0d 0a 20 20 20 20 20 20 20 20 2e 61 64 64 43 6c 61 73 73 28 27 69 73 2d 61 63 74 69 76 65 27 29 3b 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 66 69 Data Ascii: .parents('.home-menu') .siblings('.side-menu-wide') .removeClass('is-active'); _this .parents('.home-menu') .siblings('.side-menu-wide' + '.' + data_attribute) .addClass('is-active'); }, fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49919	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	729	OUT	GET /assests/js/bootstrap.min.js HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:33 UTC	519	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Wed, 01 May 2019 15:22:57 GMT Accept-Ranges: bytes ETag: "cb681dc1310d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 37045 Connection: close
2024-02-20 15:13:33 UTC	5292	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e 2e 6a 71 75 65 72 Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquer
2024-02-20 15:13:33 UTC	8688	IN	Data Raw: 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 70 61 75 73 65 64 26 26 28 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 6e 65 78 74 2c 74 68 69 73 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 6e 74 65 72 76 61 6c 29 29 2c 74 68 69 73 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 69 74 65 6d 73 3d 61 2e 70 61 72 65 6e 74 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 2e 69 74 65 6d 22 29 2c 74 68 69 73 2e 24 69 74 65 6d 73 2e 69 6e 64 65 78 28 61 7c 7c 74 68 69 73 2e 24 61 63 74 69 76 65 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 49 74 65 6d 46 6f 72 44 69 72 65 63 74 69 6f Data Ascii: nterval&&!this.paused&&(this.interval=setInterval(a.proxy(this.next,this),this.options.interval)),this},c.prototype.getItemIndex=function(a){return this.$items=a.parent().children(".item"),this.$items.index(a\|\|this.$active)},c.prototype.getItemForDirectio
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 7b 7d 2c 63 2e 44 45 46 41 55 4c 54 53 2c 65 2e 64 61 74 61 28 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 29 3b 66 7c 7c 65 2e 64 61 74 61 28 22 62 73 2e 6d 6f 64 61 6c 22 2c 66 3d 6e 65 77 20 63 28 74 68 69 73 2c 67 29 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 3f 66 5b 62 5d 28 64 29 3a 67 2e 73 68 6f 77 26 26 66 2e 73 68 6f 77 28 64 29 7d 29 7d 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 24 62 6f 64 79 3d 61 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2c 74 68 69 73 2e 24 64 69 61 6c 6f 67 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 6d 6f 64 61 6c 2d 64 69 Data Ascii: {},c.DEFAULTS,e.data(),"object"==typeof b&&b);f\|\|e.data("bs.modal",f=new c(this,g)),"string"==typeof b?f[b](d):g.show&&f.show(d)})}var c=function(b,c){this.options=c,this.$body=a(document.body),this.$element=a(b),this.$dialog=this.$element.find(".modal-di
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 73 2e 74 79 70 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 65 6c 65 63 74 6f 72 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 74 6f 67 67 6c 65 2c 74 68 69 73 29 29 3b 65 6c 73 65 20 69 66 28 22 6d 61 6e 75 61 6c 22 21 3d 67 29 7b 76 61 72 20 68 3d 22 68 6f 76 65 72 22 3d 3d 67 3f 22 6d 6f 75 73 65 65 6e 74 65 72 22 3a 22 66 6f 63 75 73 69 6e 22 2c 69 3d 22 68 6f 76 65 72 22 3d 3d 67 3f 22 6d 6f 75 73 65 6c 65 61 76 65 22 3a 22 66 6f 63 75 73 6f 75 74 22 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 68 2b 22 2e 22 2b 74 68 69 73 2e 74 79 70 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 65 6c 65 63 74 6f 72 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 65 6e 74 65 72 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 69 2b 22 Data Ascii: s.type,this.options.selector,a.proxy(this.toggle,this));else if("manual"!=g){var h="hover"==g?"mouseenter":"focusin",i="hover"==g?"mouseleave":"focusout";this.$element.on(h+"."+this.type,this.options.selector,a.proxy(this.enter,this)),this.$element.on(i+"
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 29 2c 74 68 69 73 2e 68 69 64 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 22 2e 22 2b 61 2e 74 79 70 65 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 62 73 2e 22 2b 61 2e 74 79 70 65 29 2c 61 2e 24 74 69 70 26 26 61 2e 24 74 69 70 2e 64 65 74 61 63 68 28 29 2c 61 2e 24 74 69 70 3d 6e 75 6c 6c 2c 61 2e 24 61 72 72 6f 77 3d 6e 75 6c 6c 2c 61 2e 24 76 69 65 77 70 6f 72 74 3d 6e 75 6c 6c 2c 61 2e 24 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 29 7d 3b 76 61 72 20 64 3d 61 2e 66 6e 2e 74 6f 6f 6c 74 69 70 3b 61 2e 66 6e 2e 74 6f 6f 6c 74 69 70 3d 62 2c 61 2e 66 6e 2e Data Ascii: destroy=function(){var a=this;clearTimeout(this.timeout),this.hide(function(){a.$element.off("."+a.type).removeData("bs."+a.type),a.$tip&&a.$tip.detach(),a.$tip=null,a.$arrow=null,a.$viewport=null,a.$element=null})};var d=a.fn.tooltip;a.fn.tooltip=b,a.fn.
2024-02-20 15:13:33 UTC	1345	IN	Data Raw: 66 73 65 74 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 2e 52 45 53 45 54 29 2e 61 64 64 43 6c 61 73 73 28 22 61 66 66 69 78 22 29 3b 76 61 72 20 61 3d 74 68 69 73 2e 24 74 61 72 67 65 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 62 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 28 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 69 6e 6e 65 64 4f 66 66 73 65 74 3d 62 2e 74 6f 70 2d 61 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 50 6f 73 69 74 69 6f 6e 57 69 74 68 45 76 65 6e 74 4c 6f 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 63 68 65 63 6b 50 6f 73 69 74 69 6f 6e 2c 74 68 69 73 29 2c 31 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 Data Ascii: fset;this.$element.removeClass(c.RESET).addClass("affix");var a=this.$target.scrollTop(),b=this.$element.offset();return this.pinnedOffset=b.top-a},c.prototype.checkPositionWithEventLoop=function(){setTimeout(a.proxy(this.checkPosition,this),1)},c.prototy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49920	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	726	OUT	GET /assests/js/solid-menu.js HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:33 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Sun, 07 Jul 2019 01:51:34 GMT Accept-Ranges: bytes ETag: "944d99816634d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 25005 Connection: close
2024-02-20 15:13:33 UTC	947	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 0d 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 20 2f 2f 69 6d 70 6c 65 6d 65 6e 74 20 73 74 72 69 63 74 20 4a 61 76 61 53 63 72 69 70 74 20 43 6f 64 69 6e 67 2c 20 72 65 71 75 69 72 65 64 20 69 6e 20 4a 61 76 61 53 63 72 69 70 74 20 43 61 74 65 67 6f 72 79 20 69 6e 20 43 6f 64 65 43 61 6e 79 6f 6e 0d 0a 0d 0a 09 76 61 72 20 62 6f 6f 74 4d 65 6e 75 20 3d 20 7b 0d 0a 0d 0a 09 09 61 64 61 70 74 61 74 69 6f 6e 57 69 64 74 68 3a 20 37 36 37 2c 0d 0a 09 09 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 2f 2f 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 73 0d 0a 0d 0a 09 09 09 74 68 69 73 2e 63 61 63 68 65 44 6f 6d 28 29 3b 0d 0a 09 Data Ascii: $(document).ready(function() {'use strict'; //implement strict JavaScript Coding, required in JavaScript Category in CodeCanyonvar bootMenu = {adaptationWidth: 767,init: function() { //initialization functionsthis.cacheDom();
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 27 29 3b 0d 0a 09 09 09 74 68 69 73 2e 24 73 6f 6c 69 64 5f 6d 65 6e 75 73 20 3d 20 24 28 27 2e 73 6f 6c 69 64 2d 6d 65 6e 75 73 27 29 3b 0d 0a 09 09 09 74 68 69 73 2e 24 6e 61 76 62 61 72 20 3d 20 74 68 69 73 2e 24 62 6f 64 79 2e 66 69 6e 64 28 27 2e 6e 61 76 62 61 72 27 29 3b 0d 0a 09 09 09 74 68 69 73 2e 24 6e 61 76 62 61 72 5f 6e 61 76 5f 6c 69 5f 61 20 3d 20 74 68 69 73 2e 24 62 6f 64 79 2e 66 69 6e 64 28 27 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 6c 69 20 3e 20 61 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 27 29 3b 0d 0a 09 09 09 74 68 69 73 2e 24 6e 61 76 62 61 72 5f 70 75 73 68 20 3d 20 74 68 69 73 2e 24 62 6f 64 79 2e 66 69 6e 64 28 27 2e 6e 61 76 62 61 72 2d 70 75 73 68 27 29 3b 0d 0a 09 09 09 74 68 69 73 2e 24 6e 61 76 62 61 72 5f 6f 66 Data Ascii: ');this.$solid_menus = $('.solid-menus');this.$navbar = this.$body.find('.navbar');this.$navbar_nav_li_a = this.$body.find('.navbar-nav > li > a.dropdown-toggle');this.$navbar_push = this.$body.find('.navbar-push');this.$navbar_of
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 72 65 6e 74 73 28 27 2e 74 61 62 2d 6e 61 76 27 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 74 61 62 2d 63 6f 6e 74 61 69 6e 65 72 27 29 0d 0a 09 09 09 76 61 72 20 74 61 72 67 65 74 5f 74 61 62 5f 63 6f 6e 74 65 6e 74 20 3d 20 74 61 62 5f 63 6f 6e 74 61 69 6e 65 72 2e 63 68 69 6c 64 72 65 6e 28 27 64 69 76 23 27 20 2b 20 74 61 62 5f 76 61 6c 75 65 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 65 76 65 6e 74 2e 74 79 70 65 20 3d 3d 20 27 6d 6f 75 73 65 65 6e 74 65 72 27 20 26 26 20 5f 74 68 69 73 2e 70 61 72 65 6e 74 73 28 27 2e 74 61 62 2d 6e 61 76 27 29 2e 68 61 73 43 6c 61 73 73 28 27 74 61 62 2d 6e 61 76 2d 68 6f 76 65 72 27 29 29 20 7b 0d 0a 0d 0a 09 09 09 09 70 61 72 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 27 75 69 2d 74 61 62 73 2d 61 63 74 69 76 65 27 29 3b 0d Data Ascii: rents('.tab-nav').siblings('.tab-container')var target_tab_content = tab_container.children('div#' + tab_value);if (event.type == 'mouseenter' && _this.parents('.tab-nav').hasClass('tab-nav-hover')) {parent.addClass('ui-tabs-active');
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 61 79 70 6f 69 6e 74 28 7b 20 2f 2f 77 61 79 70 6f 69 6e 74 20 6a 71 75 65 72 79 20 70 6c 75 67 69 6e 0d 0a 09 09 09 09 0d 0a 09 09 09 09 09 68 61 6e 64 6c 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 64 69 72 65 63 74 69 6f 6e 29 20 7b 0d 0a 0d 0a 09 09 09 09 09 09 69 66 20 28 64 69 72 65 63 74 69 6f 6e 20 3d 3d 20 27 64 6f 77 6e 27 29 20 7b 0d 0a 0d 0a 09 09 09 09 09 09 09 74 68 61 74 2e 24 73 74 69 63 6b 79 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 6e 61 76 62 61 72 2d 73 74 61 74 69 63 2d 74 6f 70 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 74 6f 70 27 29 3b 0d 0a 0d 0a 09 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 64 69 72 65 63 74 69 6f 6e 20 3d 3d 20 27 75 70 27 29 20 7b 0d 0a 0d 0a 09 09 09 09 09 09 09 74 68 61 74 Data Ascii: aypoint({ //waypoint jquery pluginhandler: function(direction) {if (direction == 'down') {that.$sticky.removeClass('navbar-static-top').addClass('navbar-fixed-top');} else if (direction == 'up') {that
2024-02-20 15:13:33 UTC	2338	IN	Data Raw: 69 6e 65 72 27 29 3b 0d 0a 0d 0a 09 09 09 62 72 65 61 6b 3b 0d 0a 0d 0a 09 09 09 63 61 73 65 20 27 73 74 61 74 69 63 2d 74 6f 70 27 3a 0d 0a 0d 0a 09 09 09 09 77 72 61 70 70 65 72 2e 63 73 73 28 27 70 61 64 64 69 6e 67 2d 74 6f 70 27 2c 27 30 27 29 3b 0d 0a 09 09 09 09 6f 75 74 65 72 5f 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 27 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 27 29 2e 63 73 73 28 7b 27 70 61 64 64 69 6e 67 2d 6c 65 66 74 27 3a 20 30 2c 20 27 70 61 64 64 69 6e 67 2d 72 69 67 68 74 27 3a 20 30 7d 29 3b 0d 0a 09 09 09 09 6e 61 76 62 61 72 5f 69 6e 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 27 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 27 29 3b 0d 0a 09 09 09 09 6e 61 76 62 61 72 2e 61 64 64 43 6c 61 73 73 28 27 6e 61 76 62 61 72 Data Ascii: iner');break;case 'static-top':wrapper.css('padding-top','0');outer_container.addClass('container-fluid').css({'padding-left': 0, 'padding-right': 0});navbar_inner.addClass('container-fluid');navbar.addClass('navbar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49921	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	738	OUT	GET /assests/js/jquery.easy-ticker.min.js HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:33 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: PHP/8.3.3 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 56800 Connection: close
2024-02-20 15:13:33 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 20 74 65 6d 70 6c 61 74 65 3d 22 2f 54 65 6d 70 6c 61 74 65 73 2f 4e 45 57 2d 74 65 6d 70 6c 61 74 65 2e 64 77 74 2e 70 68 70 22 20 63 6f 64 65 4f 75 74 73 69 64 65 48 54 4d 4c 49 73 4c 6f 63 6b 65 64 3d 22 66 61 6c 73 65 22 20 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 45 64 69 74 61 62 6c 65 20 6e 61 6d 65 3d 22 68 65 61 64 22 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 45 6e 64 45 64 69 74 61 62 6c 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 48 65 61 64 20 42 45 47 49 4e 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d Data Ascii: <!DOCTYPE html> <html class="no-js" lang="en">... InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" --><head>... InstanceBeginEditable name="head" -->... InstanceEndEditable -->... Head BEGIN --><!-
2024-02-20 15:13:33 UTC	8688	IN	Data Raw: 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 3c 74 69 74 6c 65 3e 20 4d 61 72 79 6c 61 6e 64 74 61 78 65 73 2e 67 6f 76 20 7c 20 57 65 6c 63 6f 6d 65 20 74 6f 20 74 68 65 20 4f 66 66 69 63 65 20 6f 66 20 74 68 65 20 43 6f 6d 70 74 72 6f 6c 6c 65 72 20 3c 2f 74 69 74 6c 65 3e 2d 2d 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e Data Ascii: ta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> ...<title> Marylandtaxes.gov \| Welcome to the Office of the Comptroller </title>--> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta n
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 77 6e 2d 72 69 67 68 74 20 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 69 6e 64 69 76 69 64 75 61 6c 2f 69 6e 64 65 78 2e 70 68 70 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 20 70 61 64 64 69 6e 67 3a 20 6e 6f 6e 65 3b 22 20 74 69 74 6c 65 3d 22 49 6e 64 69 76 69 64 75 61 6c 73 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 49 6e 64 69 76 69 64 75 61 6c 73 22 3e 49 6e 64 69 76 69 64 75 61 6c 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 Data Ascii: wn-right widget-default clearfix pad-0-25-sm"> <a href="/individual/index.php" style="font-size: 14px; font-weight: 700; color: #222; padding: none;" title="Individuals" aria-label="Individuals">Individuals</a>
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 64 72 6f 70 64 6f 77 6e 2d 72 69 67 68 74 20 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 70 72 6f 73 2f 69 6e 64 65 78 2e 70 68 70 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6a 75 73 74 69 66 79 3b 22 20 74 69 74 6c 65 3d 22 54 61 78 20 Data Ascii: <li class="dropdown dropdown-right widget-default clearfix pad-0-25-sm"> <a href="/pros/index.php" style="font-size: 14px; font-weight: 700; color: #222; text-align: justify;" title="Tax
2024-02-20 15:13:33 UTC	5792	IN	Data Raw: 20 54 61 78 20 46 6f 72 6d 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 0d 0a 09 09 09 09 09 09 09 09 09 09 76 61 6c 75 65 3d 22 2f 69 6e 64 69 76 69 64 75 61 6c 2f 69 6e 63 6f 6d 65 2f 66 6f 72 6d 73 2f 32 30 32 33 5f 49 6e 63 6f 6d 65 5f 54 61 78 5f 46 6f 72 6d 73 2e 70 68 70 22 0d 0a 09 09 09 09 09 09 09 09 09 09 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 20 6c 61 62 65 6c 3d 22 32 30 32 33 20 49 6e 63 6f 6d 65 20 54 61 78 20 46 6f 72 6d 73 22 3e 32 30 32 32 20 49 6e 63 6f 6d 65 20 54 61 78 20 46 6f 72 6d 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 0d 0a 09 09 09 09 09 09 09 09 09 09 76 61 6c 75 65 3d 22 2f 69 6e 73 74 72 75 63 74 69 6f 6e 2d Data Ascii: Tax Forms</option><optionvalue="/individual/income/forms/2023_Income_Tax_Forms.php"style="font-weight:bold;" label="2023 Income Tax Forms">2022 Income Tax Forms</option><optionvalue="/instruction-
2024-02-20 15:13:33 UTC	1448	IN	Data Raw: 6e 20 76 61 6c 75 65 3d 22 2f 69 6e 73 74 72 75 63 74 69 6f 6e 2d 62 6f 6f 6b 6c 65 74 73 32 30 32 33 2e 70 68 70 2f 23 62 75 73 69 6e 73 74 72 75 63 22 20 6c 61 62 65 6c 3d 22 32 30 32 33 20 49 6e 73 74 72 75 63 74 69 6f 6e 20 42 6f 6f 6b 6c 65 74 73 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 32 30 32 33 20 49 6e 73 74 72 75 63 74 69 6f 6e 20 42 6f 6f 6b 6c 65 74 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 63 75 72 72 65 6e 74 5f 66 6f 72 6d 73 2f 43 52 41 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 43 52 41 22 3e 43 52 41 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 Data Ascii: n value="/instruction-booklets2023.php/#businstruc" label="2023 Instruction Booklets">2023 Instruction Booklets</option><option value="/forms/current_forms/CRA.pdf" label="CRA">CRA</option><opti
2024-02-20 15:13:33 UTC	5792	IN	Data Raw: 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 31 30 5f 35 31 31 44 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 31 30 2f 35 31 31 44 0d 0a 09 09 09 09 09 09 09 09 09 09 09 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 09 32 30 32 33 22 3e 35 31 30 2f 35 31 31 44 0d 0a 09 09 09 09 09 09 09 09 09 09 09 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 09 32 30 32 33 3c 2f 6f 70 74 69 6f 6e 3e 20 2d 2d 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 21 2d 2d 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 31 30 5f 35 31 31 45 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 31 30 2f 35 31 31 45 22 3e 35 31 30 2f 35 31 31 45 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 6f 70 74 69 6f 6e 3e 2d 2d 3e 0d 0a 0d 0a 09 09 09 09 Data Ascii: value="/forms/23_forms/510_511D.pdf" label="510/511D-2023">510/511D-2023</option> -->...<option value="/forms/23_forms/510_511E.pdf" label="510/511E">510/511E</option>-->
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 6e 20 6d 65 6e 75 22 3e 20 4e 65 77 73 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 6e 6f 2d 70 61 64 64 69 6e 67 22 20 64 61 74 61 2d 61 64 6a 75 73 74 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 72 6f 77 2d 61 75 74 6f 68 65 69 67 68 74 20 6e 6f 2d 6d 61 72 67 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 36 20 63 Data Ascii: n menu"> News </a> <div class="dropdown-menu no-border-radius no-padding" data-adjust="2"> <div class="row row-autoheight no-margin"> <div class="col-lg-6 c
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 63 6f 6d 70 2f 63 6f 6d 70 74 72 6f 6c 6c 65 72 2d 6f 66 2d 6d 61 72 79 6c 61 6e 64 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 43 6f 6d 70 74 72 6f 6c 6c 65 72 20 42 72 6f 6f 6b 65 20 4c 69 65 72 6d 61 6e 22 3e 43 6f 6d 70 74 72 6f 6c 6c 65 72 20 42 72 6f 6f 6b 65 20 4c 69 65 72 6d 61 6e 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="widget-default clearfix pad-0-25-sm"><a href="/divisions/comp/comptroller-of-maryland.php" class="menu-link-text" title="Comptroller Brooke Lierman">Comptroller Brooke Lierman </a><hr>
2024-02-20 15:13:33 UTC	5105	IN	Data Raw: 20 20 20 3c 70 3e 57 65 27 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 74 68 65 20 70 61 67 65 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 6f 72 20 6e 6f 20 6c 6f 6e 67 65 72 20 65 78 69 73 74 73 2e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 3c 70 3e 50 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 6c 69 6e 6b 73 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 70 61 67 65 20 74 6f 20 66 69 6e 64 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 79 6f 75 20 6e 65 65 64 2e 3c 2f 70 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 3c 70 3e 54 68 61 6e 6b 20 79 6f 75 21 3c 2f 70 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 Data Ascii: <p>We're sorry, but the page you're looking for has been moved or no longer exists.</p> <p>Please use the links at the top of the page to find the information you need.</p> <p>Thank you!</p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49923	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	530	OUT	GET /assests/img/Comptroller_Logo.svg HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:33 UTC	510	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Mon, 25 Nov 2019 16:48:15 GMT Accept-Ranges: bytes ETag: "7d8e921b0a3d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 13337 Connection: close
2024-02-20 15:13:33 UTC	957	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-02-20 15:13:33 UTC	8688	IN	Data Raw: 6c 4a 79 6b 69 4d 7a 49 4e 48 68 59 6f 4b 69 46 55 44 77 73 6b 4e 54 63 79 52 51 59 44 54 43 30 75 4a 55 4e 52 49 41 41 67 45 44 0d 0a 41 67 49 46 42 77 6f 45 42 67 4d 41 41 41 41 41 41 51 49 52 41 43 45 53 4d 51 4e 42 49 6c 46 68 63 59 45 79 6b 61 47 78 30 57 49 54 42 43 44 42 51 6c 4a 79 67 69 4d 7a 46 41 55 51 73 74 49 30 4d 45 42 51 6b 73 4b 54 38 4f 46 54 0d 0a 2f 39 6f 41 44 41 4d 42 41 41 49 52 41 78 45 41 41 41 43 49 65 6b 38 75 41 63 64 78 49 54 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 44 4c 31 4e 44 6b 36 76 6e 64 72 7a 72 79 2f 6f 6f 38 6e 4e 76 38 41 0d 0a 30 2b 48 36 72 34 2f 37 37 38 76 35 74 76 30 62 53 6c 75 39 45 59 2b 50 39 5a 38 76 6c 31 66 4f 52 7a 73 2f 70 2b 33 61 74 72 37 76 6b 2b 72 56 6a 4d 36 65 43 31 Data Ascii: lJykiMzINHhYoKiFUDwskNTcyRQYDTC0uJUNRIAAgEDAgIFBwoEBgMAAAAAAQIRACESMQNBIlFhcYEykaGx0WITBCDBQlJygiMzFAUQstI0MEBQksKT8OFT/9oADAMBAAIRAxEAAACIek8uAcdxITAAAAAAAAAAAAAAAAAAAAAAADL1NDk6vndrzry/oo8nNv8A0+H6r4/778v5tv0bSlu9EY+P9Z8vl1fORzs/p+3atr7vk+rVjM6eC1
2024-02-20 15:13:33 UTC	3692	IN	Data Raw: 79 47 37 48 4d 32 41 76 36 50 49 49 47 0d 0a 6b 76 45 4d 6b 73 4c 44 73 77 6f 45 5a 6a 45 55 46 6d 6b 4c 68 66 44 63 44 44 73 6f 6d 43 52 6f 39 51 73 31 6a 67 65 30 56 7a 51 32 6d 51 5a 4d 76 64 50 38 74 71 75 30 74 32 47 54 6c 56 4c 66 65 30 33 6f 76 49 78 5a 7a 6d 78 4e 0d 0a 79 61 30 51 53 6d 4e 54 69 51 74 73 65 32 6a 46 4a 4b 54 47 31 74 53 32 41 76 62 4c 49 43 75 58 44 4b 55 54 36 6f 74 62 7a 34 56 79 70 5a 43 30 64 37 36 62 41 43 34 37 41 4b 45 63 63 78 57 4d 5a 49 41 4c 65 69 31 4b 4a 35 43 34 0d 0a 53 2b 6b 57 41 41 76 6e 6c 51 67 35 6e 34 49 79 53 77 74 37 4b 45 6b 54 46 48 58 4a 6c 4e 6a 57 71 5a 74 62 66 57 73 4c 6e 74 49 2b 53 4f 75 39 68 62 41 55 49 35 59 56 6b 6a 4f 4a 56 78 71 46 2f 50 55 65 35 32 2b 33 45 4c 34 69 0d 0a 38 5a 49 47 50 56 Data Ascii: yG7HM2Av6PIIGkvEMksLDswoEZjEUFmkLhfDcDDsomCRo9Qs1jge0VzQ2mQZMvdP8tqu0t2GTlVLfe03ovIxZzmxNya0QSmNTiQtse2jFJKTG1tS2AvbLICuXDKUT6otbz4VypZC0d76bAC47AKEccxWMZIALei1KJ5C4S+kWAAvnlQg5n4IySwt7KEkTFHXJlNjWqZtbfWsLntI+SOu9hbAUI5YVkjOJVxqF/PUe52+3EL4i8ZIGPV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49922	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	817	OUT	GET /assests/css/font-awesome-5.10.2/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.marylandtaxes.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.marylandtaxes.gov/assests/css/font-awesome-5.10.2/css/all.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:33 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Last-Modified: Thu, 12 Sep 2019 23:39:55 GMT Accept-Ranges: bytes ETag: "54c79861c369d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 74524 Connection: close
2024-02-20 15:13:33 UTC	6739	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 23 1c 00 0d 00 00 00 01 f9 04 00 01 22 c0 01 4a 3d f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 8b 0a 11 08 0a 87 9b 3c 85 d2 7c 01 36 02 24 03 8d 3c 0b 86 60 00 04 20 05 8b 05 07 a8 19 5b 7b 90 71 c3 68 b7 fb 42 50 77 55 14 ff 3f f8 fe 30 33 13 21 6c 1c b0 31 34 ef 28 3a 13 ba 1d 40 a2 a8 5b 23 fb ff ff cf 4f f0 45 8c fb 9d 29 6f ef ba 0a 7d 7e 00 a0 33 81 cb 92 5a a4 d6 52 88 cc 20 85 18 5a 16 82 8a 1b 27 99 6d 8b ed 6e dc 2f 2d f9 33 08 06 c1 20 18 e2 d0 f6 31 50 3b 1c bb d4 12 75 f9 97 d5 20 18 04 83 60 90 e1 78 6a e7 a1 cb c5 1d b6 ab 20 70 bd 45 3b eb 1d 3d c9 90 72 92 4c 5d 24 23 b7 26 1f be 5c 03 87 a5 fb 8e fe 2e 7e bd ba 6b ba 21 90 46 3c 03 b7 06 af 7a 33 45 27 c5 Data Ascii: wOF2#"J=?FFTM`<\|6$<` [{qhBPwU?03!l14(:@[#OE)o}~3ZR Z'mn/-3 1P;u `xj pE;=rL]$#&\.~k!F<z3E'
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 36 9c c6 2e 5a 47 b6 f6 b2 e7 c9 62 ca 25 44 63 6d 13 62 e5 e4 84 82 22 7a 54 2a 61 00 7e 7f cd f4 ca be e4 d2 5e 60 06 ce 47 0f 98 53 a3 93 fa ad 78 1c 42 9f 9b 82 85 92 05 e2 9c 41 cc f6 a8 90 c5 8e 2f fb f6 5d 9c 80 c0 55 46 ea 96 db f1 a1 7f 2c 0c a8 28 bd b9 94 21 d5 8b fd 6f 58 2e b0 64 4d 1e eb ad e9 63 e1 59 fe a3 30 6c 69 01 38 c7 a8 41 fb ff a0 6c f0 fc 89 e8 43 91 f0 4a da 0f fe 7b c7 ae 2b 65 b7 f2 f0 16 ca da 22 84 3f e8 86 4c 83 71 fb 11 e4 91 8f 55 7d a7 9f f9 63 b1 78 d9 51 20 99 df 50 31 90 01 c4 cb fe 41 71 e9 4d 90 a7 9a 51 6d 1e 48 13 1b 01 dc 35 f7 84 73 fc c6 aa 8d 43 93 28 ee 15 4f f2 4b 0e 6b 73 f0 c1 7c ab c8 fe b3 f7 30 7a 90 3c 8a 6f ee 9b 07 2c 71 db 19 6d da 9e ea 8f cb e3 57 02 95 6c c3 c4 a3 89 ee 07 bf f0 f1 18 69 65 cf cd Data Ascii: 6.ZGb%Dcmb"zT*a~^`GSxBA/]UF,(!oX.dMcY0li8AlCJ{+e"?LqU}cxQ P1AqMQmH5sC(OKks\|0z<o,qmWlie
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: c1 b7 c6 b8 eb 19 74 8e fc 25 b8 3e a0 36 69 a1 68 85 eb e7 fb 7d 33 e0 36 0e 84 6d 74 fe dd c2 8e fe bc 78 70 f2 97 5e ff 30 30 19 c2 a2 b6 de eb b3 b5 0d 43 aa fb 0a 97 8c 1e 0b 01 92 4b 15 35 f7 48 2e 98 84 fc c4 dd 03 dd 10 6b e0 6b 0b 53 1b 65 49 11 cf 9e 7a b8 e5 38 96 4b e5 19 9d 53 b5 1b 27 bd b4 a3 76 5e db 1e 56 9d c1 b4 1b 9e 82 ea 25 a8 f2 4c 05 a7 36 bb 52 8d f0 53 32 cc 3c 9e 38 7b 03 5b d5 9f 1d 58 ca c8 1d c4 0d 63 f4 7d 8b 40 c6 f7 17 6e 5b 28 0c 09 f2 df 73 b0 0c 42 5e e0 00 af 10 12 9a 13 92 e2 bd 78 9a e5 14 7c f4 e2 0b fc be 57 86 b1 c3 91 9d de ef 7b 74 6b b4 5a bb cf ce 41 0e 83 5a 06 07 56 39 f3 ce e0 e0 82 5d 65 00 4d 44 4c bf 7e 57 72 bf 9f e5 be e5 b7 a0 3a d6 b5 25 5c 7e fa d6 57 c4 c6 f3 70 f2 5f 9c 73 3f 01 4c 27 f6 2a 6f dc Data Ascii: t%>6ih}36mtxp^00CK5H.kkSeIz8KS'v^V%L6RS2<8{[Xc}@n[(sB^x\|W{tkZAZV9]eMDL~Wr:%\~Wp_s?L'*o
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: 08 81 e4 7e ee 81 02 23 63 c3 fe 7b cc 69 19 7b 17 f4 f2 73 61 d3 88 bc 01 4f b1 e4 6b bf c1 ba 95 8c 13 cb 59 02 f9 06 d5 6b 6a 61 71 ce bf 59 52 69 d9 26 c8 d2 20 b0 7e 88 20 7b eb 98 77 77 df 14 62 69 fc cb 57 2e da 40 1f 00 ea a1 43 e4 eb 70 66 d2 ff c3 12 be ee b2 4e a4 2b c4 c9 39 b4 f2 38 af 09 87 c8 99 4f 12 39 0c e1 e6 0c 3f 89 8a 1c bf 13 b2 e7 b9 2a 93 c8 7d 8a d7 85 4e 6a 6a 98 34 26 f3 1c 5a 3a d7 08 a8 c0 12 76 4e 0e 49 e3 98 56 7e 5d d1 52 4d 02 78 33 b7 48 13 6e 5b 24 d6 18 be 6c 10 db 83 66 f0 00 26 1e 8b f2 ef 4c 02 68 d0 e1 29 10 72 da 7f 17 79 a2 13 d4 7b 7d 61 e3 25 3e 17 d1 e5 ad 81 cf 6f eb ad fe c5 d9 21 3b 28 c3 99 0d ee 80 9b c8 27 7b 7e 94 7a d4 5f 16 a5 e6 83 8b 97 7a 92 ae 39 cd a5 3c 5f 84 cd cd 79 8e 2f b0 6a 6d 27 ca 51 f0 Data Ascii: ~#c{i{saOkYkjaqYRi& ~ {wwbiW.@CpfN+98O9?*}Njj4&Z:vNIV~]RMx3Hn[$lf&Lh)ry{}a%>o!;('{~z_z9<_y/jm'Q
2024-02-20 15:13:33 UTC	5792	IN	Data Raw: 9a 89 7b 02 c8 f6 39 cc 99 74 b7 20 8b 4a ce 66 a8 be 44 25 b2 ac b3 e5 10 2b 0f 69 2b 75 e2 39 4b 18 fd f4 a6 7b 33 a9 56 17 19 51 6a 59 3b ed e0 e8 ad 67 49 82 76 95 2f 9b 1f 43 1c 2c 76 23 bd 10 58 af 4f bd d7 0f 1c ee a3 57 f1 2b 3a a2 c0 08 f4 8b 8b e8 35 e9 21 e9 a6 fd ab ba 97 82 1e cd 97 0c a7 17 07 e0 cd 18 a8 73 e0 bc 2b 21 70 48 de 64 de 40 fb 72 b5 1b a2 8b 5d c4 f6 52 63 12 b4 7c 48 2b f0 a8 55 b9 93 fe 9a d6 79 b4 4d a1 15 55 ed b8 ab 2f 47 89 a5 9e 9f a1 3a 47 6a be 5b 28 c7 16 99 6c 68 bd d0 38 fc a1 00 a6 bd 13 f2 41 24 9d f1 3d b7 13 81 a6 55 ef 70 b7 91 ee b7 43 40 ba 2a 9a d1 fa ba 25 6c fc 35 70 db c1 d1 15 b0 e9 61 bc 5d bc c0 dd 36 34 f7 96 62 4f 09 ab 9c a4 80 6b 3a a9 f8 0e 63 ef f7 75 1a ee ec f0 8d 7e 2b ca 92 2a 33 9b d9 26 d6 Data Ascii: {9t JfD%+i+u9K{3VQjY;gIv/C,v#XOW+:5!s+!pHd@r]Rc\|H+UyMU/G:Gj[(lh8A$=UpC@%l5pa]64bOk:cu~+3&
2024-02-20 15:13:33 UTC	7240	IN	Data Raw: bd ae 58 cd 4a c4 28 b9 8f ed 62 77 e1 c9 be 63 cf a9 4f f1 05 73 31 4d 62 e7 2b 78 49 72 8e 7a 0e 4f 26 e5 72 8d b2 25 05 62 b4 d7 ab d2 43 90 e8 a0 dc 75 fa c4 75 68 39 69 d3 85 7c 25 fd 31 9b 64 34 29 64 74 f5 c5 67 40 22 ff 20 2b 87 08 cb 61 3c 6d ba ed 72 a9 18 76 12 22 92 22 82 f3 00 44 d3 d3 86 db 58 60 74 8c be ce fc e7 8e ce ba 50 36 69 dc 06 16 b3 3b b7 5a a2 88 5f 50 22 02 e1 5e 94 73 64 66 7a fc 68 e9 fe 2f 22 35 e0 48 36 6f 2f af eb 31 59 f2 f2 2c 71 13 0a ad f0 b3 8a ab 8f ca 6c 26 ff f8 78 7f c5 35 2e 26 4d ee bb 04 f6 2b c1 15 86 85 c5 b8 83 9d 0e d6 fd 87 b7 e8 e4 bc 79 5d 75 2f b8 13 e5 af c6 c9 64 55 3f d2 3e fb 2c 9b c7 03 8c f2 f1 d3 5b 8a c4 48 db 9c 91 52 b1 15 31 cd db 92 60 b3 35 23 a6 eb ac a5 23 d5 a0 9b 63 c9 49 d3 33 ed fd 38 Data Ascii: XJ(bwcOs1Mb+xIrzO&r%bCuuh9i\|%1d4)dtg@" +a<mrv""DX`tP6i;Z_P"^sdfzh/"5H6o/1Y,ql&x5.&M+y]u/dU?>,[HR1`5##cI38
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: 4d 5b 0c cf c0 51 89 ed 68 c6 d4 2f a6 c7 21 60 ee 98 f9 90 8e 5d 74 05 27 0c cc 14 cf 9c 1c 67 67 c2 f8 ab e3 f0 6b 45 d2 79 8f 9f ff 4c 4e 78 9a 7c b9 da 91 d5 ce d4 70 68 d9 29 c9 a0 10 b8 c0 0b 61 0a 67 42 13 f4 d3 50 21 be f9 8d 46 29 57 88 9e 3a 82 f8 bb b9 a6 fa 1b 76 d6 3b 51 d9 ae af 09 92 90 e7 79 35 ee 18 57 dc 31 47 f1 8e 60 9c 5a 85 6e 4e 2a 73 b9 88 3f 45 3b 80 d7 91 61 85 05 28 f6 34 5e 4a 65 ac 47 b3 3a fa 86 b4 b7 71 f6 65 1a 10 36 e2 43 b0 e0 06 00 5f 41 69 cf 39 ff ff 77 6f 24 61 69 a5 11 bc d4 2b 21 9e f2 24 41 1b 0d 9e 35 4b 3c 25 f4 fa 74 c3 b4 d6 7f 14 b9 c4 d5 4a 4f 57 0f 86 4b 6f 02 e6 be a1 b0 5e 7a ba 9a e8 dd fa 54 36 ee 94 8c e8 d7 e6 16 e6 3c 83 0f 1f 34 1f 80 c5 17 c4 8e 6a 20 f2 d6 44 44 14 b7 53 78 65 32 b9 8c 97 cb e1 1d Data Ascii: M[Qh/!`]t'ggkEyLNx\|ph)agBP!F)W:v;Qy5W1G`ZnN*s?E;a(4^JeG:qe6C_Ai9wo$ai+!$A5K<%tJOWKo^zT6<4j DDSxe2
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: da 7f a6 21 77 13 ba a1 66 25 d2 a6 47 41 b0 54 4c b7 5e 6f 5e b7 e4 0b e2 bd 5d ee e8 66 ba bc 98 6a 69 c6 29 fc a0 54 ef f5 a6 66 74 ef 5a 93 dd 53 e3 76 c0 ed 0b 54 b4 2c d2 a6 6a d4 29 65 a1 77 51 6b ad a9 19 61 3e 0e 16 05 9a fe 30 cd cf a3 04 48 3a 36 23 7b 96 59 34 90 03 85 49 d1 6b d2 9a 64 5c 42 16 a8 54 02 28 7d c1 a9 a4 a3 7f 45 15 34 af 43 2c 5b 66 0e 03 ff 61 99 fc 42 ec 67 4a a4 a0 b0 57 4e e3 40 e0 73 36 66 70 7c e2 6a 80 80 a0 22 d7 df 1d c5 34 24 4a e6 dd dd 82 50 44 4c 84 66 4b 7a ae 8f 4e 2a 02 06 06 44 d0 1a 22 f8 3f 97 ee 85 82 55 19 a6 55 67 63 8b b1 0f 0b 29 a3 57 7c 9c a1 05 3f 24 46 41 8b 32 d1 a7 c8 40 b6 af b8 94 db b1 c7 bb 4b c5 c2 80 9d 40 35 6d 8a 54 5a d4 40 87 5c 06 84 a1 21 eb 91 26 70 88 8d b4 93 38 1c c5 70 a9 8d 74 ea Data Ascii: !wf%GATL^o^]fji)TftZSvT,j)ewQka>0H:6#{Y4Ikd\BT(}E4C,[faBgJWN@s6fp\|j"4$JPDLfKzN*D"?UUgc)W\|?$FA2@K@5mTZ@\!&p8pt
2024-02-20 15:13:34 UTC	5792	IN	Data Raw: 87 c8 d7 a2 4a 40 51 65 53 04 64 64 a0 61 bf ce 63 d4 2f a4 56 13 7e a9 1e bd 2c 3f 62 03 04 3e fa 9a e3 56 51 77 17 d9 ab 29 47 7c 72 2b 09 99 ba 52 ff 63 19 c1 1e 9d 53 73 f8 8f 22 f5 f9 3e 9f 1e 8d da 8b 76 8f df 2d ab 8d ea 93 31 c0 3f fc 8d 91 60 e4 f1 13 b9 84 bd 6a a5 63 35 f2 00 d0 3a 86 d2 08 40 32 b7 a7 dd d6 17 e8 80 c4 28 09 25 be b2 32 15 45 c8 7a f7 7f be 1c a4 53 c4 2e da 9a 9c 60 e2 a5 cd f2 a1 f2 22 78 ad c4 b5 1c 89 46 03 b1 fe 51 02 c4 c9 f9 3b eb 73 f5 a9 48 e2 0f 28 ef 93 cb 08 cf df de 60 a5 01 67 54 68 13 25 ed 2a a4 7c ea a3 51 d6 e6 86 f6 ef 58 80 18 f2 5a 34 33 af ba 81 30 ac 40 54 12 44 37 8e 30 fb 71 21 0f 4a fd 3a 17 1d 19 e2 c9 62 d2 a0 d3 40 36 47 d5 41 a8 06 6a a6 18 bd 4e 2a 29 8b c3 db 26 67 45 fa 40 70 26 55 3c 7b e3 7f Data Ascii: J@QeSddac/V~,?b>VQw)G\|r+RcSs">v-1?`jc5:@2(%2EzS.`"xFQ;sH(`gTh%\|QXZ430@TD70q!J:b@6GAjN)&gE@p&U<{
2024-02-20 15:13:34 UTC	2896	IN	Data Raw: fb eb 8d 53 c1 e4 6d c4 8e 44 bf be 55 12 1c ab 8b 71 81 48 a0 80 1a 41 d6 39 1d d7 bb 46 ac 71 42 47 86 c1 e8 ce 1e 9c f3 bc 18 46 e6 b7 11 28 9f b5 90 49 fb 8c 6e 36 42 16 82 a0 5f a6 01 7a e3 25 3a ae 50 41 af 49 ea c7 69 cc 58 f3 bd 30 24 80 40 31 30 15 4b 8c 63 dc 7a 14 ed 80 4a 24 83 9a 27 20 02 2b 42 69 3e 35 15 be f3 a5 0c 6f 1a 66 1b 49 d1 7b c9 fd 84 19 dc 0f 79 c4 ed 70 41 61 71 ce 37 f7 88 6b 9a 1c e0 5d f7 c0 fe f5 e0 c4 b6 0f 8e 8e f4 a6 4e 0d 24 a0 3f fa 64 df 03 12 fd 59 50 42 ee d6 2c 77 da 5d 50 23 b2 5f 2e bc 7b 7a 4f 77 01 0c b3 ac df 26 ec ca 55 59 fe 67 7c 70 0c 5d 0e 4f 6f 22 7c 56 16 49 f9 14 02 30 bb 89 ca 0c 3c 78 32 75 47 9e 0c 6d af 95 d7 c2 1d 04 11 e0 56 ab d1 48 a0 da bf 61 a8 1e a3 9c d2 bd b0 43 e2 c4 0b 90 8c 40 b2 1f 16 Data Ascii: SmDUqHA9FqBGF(In6B_z%:PAIiX0$@10KczJ$' +Bi>5ofI{ypAaq7k]N$?dYPB,w]P#_.{zOw&UYg\|p]Oo"\|VI0<x2uGmVHaC@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49924	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	816	OUT	GET /assests/css/font-awesome-5.10.2/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.marylandtaxes.gov sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.marylandtaxes.gov/assests/css/font-awesome-5.10.2/css/all.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:34 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Last-Modified: Thu, 12 Sep 2019 23:39:55 GMT Accept-Ranges: bytes ETag: "6c97b861c369d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 75408 Connection: close
2024-02-20 15:13:34 UTC	3843	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 26 90 00 0d 00 00 00 02 ed 58 00 01 26 34 01 4a 3d f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 96 72 11 08 0a 8a 9c 0c 88 85 63 01 36 02 24 03 9d 7c 0b 9e 00 00 04 20 05 8a 2b 07 dd 34 5b 4b 52 92 80 c2 ee 23 54 54 74 de b6 15 c9 0b 2c a5 34 e1 c6 d0 eb bc a9 4a e1 02 9b 4e 15 ec 98 11 6e 07 08 a4 5c 8d 66 ff ff ff ff 6f 4a 16 32 b6 ff 63 dc d8 b6 3d 22 60 20 18 54 6a 6a 95 a2 50 48 62 4f dd 04 f1 4d f4 92 14 9b 5c 4a 10 63 2c 92 5b 89 41 92 34 ca 1f 54 a7 28 47 18 a4 1f c6 21 25 15 00 15 01 15 01 15 01 e5 94 ba b7 71 4a 33 e8 c5 1f e1 59 2d 66 c3 b0 aa 0b c8 8a 80 8a 80 8a 80 f2 be c5 9c fb e2 24 18 c3 34 ab 11 ec 8a 80 8a 80 8a 80 ea 23 b5 53 3e 8c 30 eb 4f 34 9f 7b 33 b3 Data Ascii: wOF2&X&4J=?FFTM`rc6$\| +4[KR#TTt,4JNn\foJ2c="` TjjPHbOM\Jc,[A4T(G!%qJ3Y-f$4#S>0O4{3
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: 80 42 a4 8e 6d 9a 3c 67 ee 54 2a f4 00 0a 90 80 85 97 85 d5 e3 e5 c5 bb a8 1a d6 f0 47 6d d3 95 26 95 a8 63 b7 52 62 46 72 68 28 20 b1 9f 58 19 06 d1 28 42 69 4a 78 0f 98 73 14 b5 e0 f5 8a 2b a2 93 a0 9c 12 a7 98 ef 4f 43 87 1a 10 f7 5e 2c 0a 0f 40 bc 3d e0 e5 91 d6 d8 35 bb 97 f7 db ed 6e f9 00 14 ef eb 37 50 e9 cd 1e 25 a4 98 14 d0 94 b0 58 34 38 05 32 ac b0 8a b4 12 24 00 4e 20 0e 2f 00 67 f0 28 e0 e0 ea 53 b8 08 48 b2 14 8f 66 8e 18 c9 b2 f1 08 2f 00 8b ad 39 8b b3 30 3b 6f c2 8b 11 4c ca d6 b6 f1 76 98 45 6b 9c 43 7b 24 4d 30 1a 28 f4 14 72 5e 43 66 a0 29 42 72 86 af 89 dc e2 3b d4 16 22 db e7 20 d7 ea 8d b2 8c ad ec 33 6b 8b f2 9e 55 5c 48 ab 74 4f 0f eb d5 f4 ee 59 81 84 91 49 5e 88 c4 bb 80 98 26 74 89 97 5d e1 65 8a 0a 4a 81 1e a7 e9 f1 8a 24 80 Data Ascii: Bm<gT*Gm&cRbFrh( X(BiJxs+OC^,@=5n7P%X482$N /g(SHf/90;oLvEkC{$M0(r^Cf)Br;" 3kU\HtOYI^&t]eJ$
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: ae 4b 0a e7 24 ba 3c b5 9d 59 33 02 64 f7 8b cf 1b d7 66 86 6c 02 70 da 66 34 88 61 ad 32 b3 bc 1c 65 1e 4d d3 9d 67 41 6d 6b 55 47 bb 5d cf 23 b3 d2 02 94 e3 8a a0 1a 23 87 8d 09 3b 29 8a 7f e6 ff 51 ef 90 88 8e d5 c3 f4 b4 aa bc 60 30 96 ba be eb 4b 99 b3 df 84 06 ff bc 0a 74 62 fb 70 d9 ab 86 e4 45 82 58 1f 76 2d 03 ef 3b 0a 44 68 89 0f e8 34 18 18 da 5f 47 d9 28 1e 68 3d 32 2f 3f ee 02 52 5d 76 fe 1e 8c 93 a4 2f eb ae b4 8f df a2 94 28 62 f2 44 72 69 89 b8 1b d1 86 23 17 d5 af ac 1b 47 5b 66 eb 7a ad ae 34 82 8d 10 61 48 7f 04 06 21 1e 5b f2 61 70 43 31 ca 4b 52 ad 94 c7 cb a5 9a fe 16 7e 55 9f 03 51 2a 4e 54 2b ac 5c 9a aa 94 79 b5 32 59 2a a6 ac 3e 23 3f f8 68 d3 76 61 25 0f 16 08 b9 2f 58 3f ee 70 3a a8 54 c0 63 1e c0 f4 28 c6 40 8c 7d b9 0b b3 7d Data Ascii: K$<Y3dflpf4a2eMgAmkUG]##;)Q`0KtbpEXv-;Dh4_G(h=2/?R]v/(bDri#G[fz4aH![apC1KR~UQNT+\y2Y>#?hva%/X?p:Tc(@}}
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: 12 20 43 16 74 96 22 a1 e4 87 2c 68 dc 98 5e 02 a7 66 d0 a3 7b 7d d1 e4 75 ea 1a e7 02 d1 14 53 41 35 8e e7 4c fd 0d b5 2f 98 2f 60 70 5b 2c 98 19 b7 98 0c 1b 85 b9 e4 eb f8 9e a8 7d 26 49 65 9b 80 91 32 f2 d0 1c f0 32 db 1a a0 c4 20 b0 ff 27 13 a3 06 14 80 df 51 e0 8b ec da 56 4c e0 b9 71 23 45 7a 45 3f 36 12 35 0a 2a 47 36 cb 51 54 1d 12 fc 8d ee 27 fb c7 85 61 c3 56 62 af a9 12 aa bf 25 b5 b0 3c 59 bc b9 e0 1d cd 8d c8 d6 04 c5 17 c8 11 3f e5 69 46 75 da 59 db 58 fe 7e 7d 0d 0b b5 ee 9f f9 62 3d 28 a4 41 e3 22 3d 62 4d 92 28 b0 f4 25 ca 97 d2 17 be 20 54 13 53 69 c0 df d1 dc 48 d0 f9 25 a7 bb f3 a0 77 77 84 bd 0d 23 7c c0 08 d3 f2 db ed 48 ab b5 6b df c3 0d 73 9a a4 69 8d 42 50 a1 25 a5 0f ab ac 64 63 26 86 c6 2a d4 9a 00 2c aa 5a b9 3b e4 5c cb 6d 16 Data Ascii: Ct",h^f{}uSA5L//`p[,}&Ie22 'QVLq#EzE?65G6QT'aVb%<Y?iFuYX~}b=(A"=bM(% TSiH%ww#\|HksiBP%dc&,Z;\m
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: 29 81 95 69 8a 93 f7 b7 67 87 11 32 de 76 21 33 c8 1e 8c 11 1c 12 dc db ea ba c2 72 56 06 74 57 24 df 6a 8b 4b ca 7b 99 99 91 7f 19 9f e3 93 53 e7 aa 24 79 be 71 b7 32 6d 1c 23 2b 4d 3a af 79 44 24 e9 73 3c 20 33 81 7b 3f 44 13 94 82 dd a4 fc 99 10 15 5a 78 e2 ae 07 67 0b 6b 02 26 b5 bf 83 5d f0 bf 2b 35 76 6d b4 10 52 b3 46 f5 6c 40 41 bb 39 f7 b8 81 0b d3 3a 80 e6 3d 05 1d c7 cc b2 d7 68 16 69 e2 b9 16 90 ba b7 2e a8 06 97 e4 ba 77 e8 18 f4 da 7d bb db 94 ec 0c bd 17 0c 61 45 93 a7 ca 44 0b 44 2c 2d e1 02 f1 b3 c3 dd 66 67 79 a6 ed f8 b5 88 53 af dc 90 8f ef fb 94 c0 76 0f 29 38 4f 7a 01 d4 72 16 b8 3c f4 22 02 5f f2 05 02 bb d7 35 d8 93 80 f1 02 89 d3 26 23 86 8c 63 7c ff a4 64 5f bf 3f f1 44 32 5e 87 2a 89 83 7c 98 e8 3b 05 59 24 3f 94 0c af 45 3d 41 Data Ascii: )ig2v!3rVtW$jK{S$yq2m#+M:yD$s< 3{?DZxgk&]+5vmRFl@A9:=hi.w}aEDD,-fgySv)8Ozr<"_5&#c\|d_?D2^*\|;Y$?E=A
2024-02-20 15:13:34 UTC	5792	IN	Data Raw: a8 00 45 45 f9 26 fa 32 6b 4f 13 0e 8a 4e ff aa 0f ae 3f ed 29 38 b5 29 6d f5 06 e6 81 5e c6 d8 95 4a 02 bb f0 e4 b5 52 77 a3 f0 0d ab d3 36 9d 12 78 9e ae d7 07 ff 7a 5a 74 90 70 ba 96 99 e8 eb 1b 50 61 79 59 d6 bd a3 6b bd 89 e3 e5 cc 03 0c 66 6f 65 6d 0c 81 dd e3 56 00 ce 62 ca d8 bc 1c 51 7d cf 3d d2 16 4a a3 e4 13 cc 5e eb 83 9b b1 1e bf c1 d5 6f 83 f5 fe 57 5f 3a 30 f7 e8 95 cf 6d 33 a3 f7 d6 93 c2 0d 07 fa 6e b8 72 74 ee c0 ed ae fa 07 eb bf bd 2a 5f 85 7c d6 07 4a b7 8f 92 2e 4c f3 78 de 67 d8 fc b9 6d 66 6d bd f5 96 47 56 96 11 06 eb 7f 08 3a c7 1f bf db cc c7 27 99 bf d8 97 2e fb 00 28 11 2e 1f b6 d7 84 7a f0 66 70 3f 3e 4d c2 26 29 d9 97 2d fd 80 52 02 4c 38 6c 29 cc 04 86 88 ba b0 ec 38 fa 1d 3c 8f 84 9d 0a 83 8a 9a de 6a 6a 91 8f 31 2b 95 53 Data Ascii: EE&2kON?)8)m^JRw6xzZtpPayYkfoemVbQ}=J^oW_:0m3nrt*_\|J.LxgmfmGV:'.(.zfp?>M&)-RL8l)8<jj1+S
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: 58 2c c9 33 68 fe b9 59 5d ff ab f2 de 5b b5 cd cd ad 76 47 b3 d2 ad 00 39 7d b6 75 3d b7 27 33 7e 5c 0d 91 c2 84 61 24 68 75 d3 b7 bb 6d a9 14 6f 32 e2 14 a9 3f 1e f8 ce 88 97 31 8c 5c 0f 22 57 2c 1d 9c 69 4b 82 c4 83 bb dc f0 4b 83 d2 33 1f d3 f7 54 1a 5e 42 9b db e6 9c 50 c5 2b fb 5f 6b 58 c9 ce ca 9c d5 b3 2f 6f d5 40 e6 40 7f 4f e3 fe 8b 59 ea ed 31 13 7f 54 da bd bc 30 79 2b ef 26 6f c9 2e 6b 38 a4 e6 82 cc 4e f0 3d 8c d3 51 a9 fe bd 6a 30 85 6c b4 a1 a1 91 14 d4 15 da 00 fb 7d 1b 7b 1a 17 82 90 0a f2 c8 7e 0f df b2 2a c4 ad 38 be b4 8f d8 9d 32 82 cd 12 cb 08 83 f7 f0 63 bb de 0d 91 36 f4 c1 4e b1 a2 3b 5d b1 ff 93 86 aa df 98 89 6f aa 75 5f 23 00 2c 23 7b 1d 36 b1 2b 97 e5 ea 34 75 75 5a 9d a3 b3 03 64 f5 a9 5c 6e 62 ef 0c 21 33 98 ec de b4 12 f6 Data Ascii: X,3hY][vG9}u='3~\a$humo2?1\"W,iKK3T^BP+_kX/o@@OY1T0y+&o.k8N=Qj0l}{~*82c6N;]ou_#,#{6+4uuZd\nb!3
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: d6 ad e6 b7 87 df be e5 b9 7e 73 5b 98 5e 07 96 5d 55 e6 db 73 19 16 bd 85 51 61 cf 97 8c c3 26 cd 94 5d dd 31 be 3d 82 57 95 e3 96 9a 1f de 52 97 d0 13 ad 75 3a 91 c6 37 73 a2 b8 b4 9d 6a 4a ec d0 4b 43 bf 1b af f8 1b 17 b5 38 f1 3f 69 b8 72 e5 d2 9c 34 ff 2c 60 c9 1d ba 6f 60 af f5 78 f8 dd 4f 99 b9 73 cc 2b 59 57 a6 f9 c8 bc 52 d9 ed db bf 5e f3 3e 55 17 50 1c 79 75 72 ee 33 21 80 c7 e9 65 4b c0 02 93 40 42 19 e2 ea 9a 8b 25 fe 0f 13 b1 f6 b7 ab 84 ed 4e b5 d8 13 ab 86 13 e9 dd 56 9e 64 ca 5d 4f 04 89 04 e7 2a da c9 6e 43 a3 dc 2e 4f 96 1a 9b 18 d0 ba 25 db 10 9b ca ab 27 29 3b a6 0d 15 a9 11 10 11 fb aa 3c 2d 51 cc 8a e6 ac 59 86 e5 80 7f 78 e0 f2 6e 6c 0d 89 f7 24 e0 a1 78 ec 1d 1e 34 5f 9a b9 98 5e fa 14 7c 2c 6a 88 a1 c0 d0 58 8a 0a c1 89 4c b6 3f Data Ascii: ~s[^]UsQa&]1=WRu:7sjJKC8?ir4,`o`xOs+YWR^>UPyur3!eK@B%NVd]O*nC.O%');<-QYxnl$x4_^\|,jXL?
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: e2 76 97 4e 7c 42 f0 4f f4 e8 5b ab 58 5b 9e 27 b3 e4 29 ff 8e 48 1e 7a c4 b1 b6 70 f2 c0 91 12 d0 5d 8b af 99 5b 1c e0 89 df 12 39 20 33 2e 29 35 65 26 00 f2 b4 bf 40 1c 52 d8 e4 1f eb 05 f5 1f a3 a0 62 6a 4d 7c 41 9e 66 45 9c 07 7f 16 7c 3c e2 36 e6 6a 0a ce ae eb aa e3 ac 37 ec 37 04 dc d2 0a 39 8e 08 ba fe e0 ab 94 45 bf 96 02 4b 46 f9 f0 35 7e 67 3e d1 c5 74 17 48 8b 1d 86 24 90 2b 0a 48 1d 17 b2 ef ee 92 ab 70 ea 59 6f d6 02 4f 09 7c 75 09 55 25 6f b5 1c 2b 78 50 c9 63 a4 e0 5a 26 f9 19 3f c4 08 d6 c3 7c 90 6f de cf 81 dc 78 0f 38 71 be 9f e9 d6 61 32 96 e1 5f 88 d7 5b f4 78 22 a9 85 bc f3 9d 39 eb ee 31 0a 8a f9 f3 6e ab 90 ca 9b e4 79 58 5d 90 17 ab 76 11 83 36 ff fc e0 63 25 36 12 c3 94 fb e2 48 5f bf a8 30 9c 78 3e 32 b3 44 4c c7 60 23 82 24 38 Data Ascii: vN\|BO[X[')Hzp][9 3.)5e&@RbjM\|AfE\|<6j779EKF5~g>tH$+HpYoO\|uU%o+xPcZ&?\|ox8qa2_[x"91nyX]v6c%6H_0x>2DL`#$8
2024-02-20 15:13:34 UTC	4344	IN	Data Raw: 1c 5e 15 6f 0e e8 33 e4 f9 36 06 7b fa fd 62 14 91 e2 6b ce 8d 7e 72 e1 a9 4b 0c c1 2a 14 67 dc 96 99 aa 54 2a 24 1b 8b 31 e2 30 a9 4b 62 e1 ed 1b 3d c9 a6 da 1a 23 83 69 f2 d4 fa ca 0d 01 89 d5 85 a0 53 ee d7 0a 91 15 4d 87 40 59 a4 16 85 c1 a0 c4 72 79 25 d9 13 7f 31 fd a8 0f 85 f9 82 f3 2e e9 ed 92 34 fe 92 71 b9 67 5e 96 bc 91 d9 98 d5 2f 20 1f 5f 92 e7 29 cf 4a 62 26 09 33 c0 0e f4 ca 47 5d 5c fa 18 08 91 fb 7a 3e e3 0b c2 83 56 6e dc 05 e9 8e 5c be 30 1b 0c af 9e 79 e6 3a 07 1b cd ca 43 9b 31 3b 31 e1 f4 f4 10 e4 47 1f 0e e6 2a 47 8b 2d 0f af cb 37 29 e8 58 c6 c6 12 ad 5b 95 d0 3d ab 78 9f 7f 98 9c 0b 3c e9 e1 ee 56 d2 8c 4e 9b fb b7 b1 9d c5 2d f1 d9 58 c2 c0 d2 51 81 18 8e cf b9 5c 3a d6 87 85 d6 36 3e 99 b1 85 15 8d bd ce e1 5f 28 2f 1b c4 c7 01 Data Ascii: ^o36{bk~rKgT$10Kb=#iSM@Yry%1.4qg^/ _)Jb&3G]\z>Vn\0y:C1;1G*G-7)X[=x<VN-XQ\:6>_(/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49925	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	733	OUT	GET /assests/js/vendor/holder.min.js HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:34 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Sat, 27 Jul 2019 15:54:13 GMT Accept-Ranges: bytes ETag: "5dc056899344d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:47 GMT Content-Length: 21934 Connection: close
2024-02-20 15:13:34 UTC	5291	IN	Data Raw: 2f 2a 21 0a 0a 48 6f 6c 64 65 72 20 2d 20 63 6c 69 65 6e 74 20 73 69 64 65 20 69 6d 61 67 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 73 0a 56 65 72 73 69 6f 6e 20 32 2e 36 2e 30 2b 35 31 65 62 70 0a c2 a9 20 32 30 31 35 20 49 76 61 6e 20 4d 61 6c 6f 70 69 6e 73 6b 79 20 2d 20 68 74 74 70 3a 2f 2f 69 6d 73 6b 79 2e 63 6f 0a 0a 53 69 74 65 3a 20 20 20 20 20 68 74 74 70 3a 2f 2f 68 6f 6c 64 65 72 6a 73 2e 63 6f 6d 0a 49 73 73 75 65 73 3a 20 20 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 6d 73 6b 79 2f 68 6f 6c 64 65 72 2f 69 73 73 75 65 73 0a 4c 69 63 65 6e 73 65 3a 20 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a Data Ascii: /!Holder - client side image placeholdersVersion 2.6.0+51ebp 2015 Ivan Malopinsky - http://imsky.coSite: http://holderjs.comIssues: https://github.com/imsky/holder/issuesLicense: http://opensource.org/licenses/MIT/!function(a,b){"obj
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: 73 69 6f 6e 73 2e 68 65 69 67 68 74 3b 62 72 65 61 6b 3b 63 61 73 65 22 65 78 61 63 74 22 3a 69 66 28 21 61 2e 66 6c 61 67 73 2e 65 78 61 63 74 44 69 6d 65 6e 73 69 6f 6e 73 29 62 72 65 61 6b 3b 61 2e 74 65 78 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 66 6c 61 67 73 2e 65 78 61 63 74 44 69 6d 65 6e 73 69 6f 6e 73 2e 77 69 64 74 68 29 2b 22 78 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 66 6c 61 67 73 2e 65 78 61 63 74 44 69 6d 65 6e 73 69 6f 6e 73 2e 68 65 69 67 68 74 29 7d 76 61 72 20 64 3d 6e 65 77 20 77 28 7b 77 69 64 74 68 3a 61 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 61 2e 68 65 69 67 68 74 7d 29 2c 65 3d 64 2e 53 68 61 70 65 2c 66 3d 6e 65 77 20 65 2e 52 65 63 74 28 22 68 6f 6c 64 65 72 42 67 22 2c 7b 66 69 6c 6c 3a 61 2e 74 68 65 6d 65 2e 62 Data Ascii: sions.height;break;case"exact":if(!a.flags.exactDimensions)break;a.text=Math.floor(a.flags.exactDimensions.width)+"x"+Math.floor(a.flags.exactDimensions.height)}var d=new w({width:a.width,height:a.height}),e=d.Shape,f=new e.Rect("holderBg",{fill:a.theme.b
2024-02-20 15:13:34 UTC	7240	IN	Data Raw: 68 65 6d 65 73 3a 7b 67 72 61 79 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 23 45 45 45 45 45 45 22 2c 66 6f 72 65 67 72 6f 75 6e 64 3a 22 23 41 41 41 41 41 41 22 7d 2c 73 6f 63 69 61 6c 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 23 33 61 35 61 39 37 22 2c 66 6f 72 65 67 72 6f 75 6e 64 3a 22 23 46 46 46 46 46 46 22 7d 2c 69 6e 64 75 73 74 72 69 61 6c 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 23 34 33 34 41 35 32 22 2c 66 6f 72 65 67 72 6f 75 6e 64 3a 22 23 43 32 46 32 30 30 22 7d 2c 73 6b 79 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 23 30 44 38 46 44 42 22 2c 66 6f 72 65 67 72 6f 75 6e 64 3a 22 23 46 46 46 46 46 46 22 7d 2c 76 69 6e 65 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 23 33 39 44 42 41 43 22 2c 66 6f 72 65 67 72 6f 75 6e 64 3a 22 23 31 45 32 39 32 Data Ascii: hemes:{gray:{background:"#EEEEEE",foreground:"#AAAAAA"},social:{background:"#3a5a97",foreground:"#FFFFFF"},industrial:{background:"#434A52",foreground:"#C2F200"},sky:{background:"#0D8FDB",foreground:"#FFFFFF"},vine:{background:"#39DBAC",foreground:"#1E292
2024-02-20 15:13:34 UTC	2163	IN	Data Raw: 6c 72 65 61 64 79 20 65 78 69 73 74 73 3a 20 22 2b 62 3b 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 5b 62 5d 3d 61 2c 61 2e 70 61 72 65 6e 74 3d 74 68 69 73 7d 7d 29 2c 66 3d 64 28 65 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 63 61 6c 6c 28 74 68 69 73 2c 22 72 6f 6f 74 22 29 2c 74 68 69 73 2e 70 72 6f 70 65 72 74 69 65 73 3d 61 7d 7d 29 2c 67 3d 64 28 65 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 63 2c 64 29 7b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 63 61 6c 6c 28 74 68 69 73 2c 63 29 2c 74 68 69 73 2e 70 72 6f 70 65 72 74 69 65 73 3d 7b 66 69 6c 6c 3a 22 23 30 30 30 22 7d 2c 6e 75 6c 6c 21 3d 64 Data Ascii: lready exists: "+b;this.children[b]=a,a.parent=this}}),f=d(e,function(b){this.constructor=function(){b.constructor.call(this,"root"),this.properties=a}}),g=d(e,function(a){function c(c,d){if(a.constructor.call(this,c),this.properties={fill:"#000"},null!=d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49929	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	744	OUT	GET /assests/js/ie10-viewport-bug-workaround.js HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:34 UTC	518	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Sat, 27 Jul 2019 15:54:12 GMT Accept-Ranges: bytes ETag: "4a5023899344d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:46 GMT Content-Length: 641 Connection: close
2024-02-20 15:13:34 UTC	641	IN	Data Raw: 2f 2a 21 0a 20 2a 20 49 45 31 30 20 76 69 65 77 70 6f 72 74 20 68 61 63 6b 20 66 6f 72 20 53 75 72 66 61 63 65 2f 64 65 73 6b 74 6f 70 20 57 69 6e 64 6f 77 73 20 38 20 62 75 67 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 0a 2f 2f 20 53 65 65 20 74 68 65 20 47 65 74 74 69 6e 67 20 53 74 61 72 74 65 64 20 64 6f 63 73 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 0a 2f 2f 20 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 Data Ascii: /! IE10 viewport hack for Surface/desktop Windows 8 bug * Copyright 2014-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */// See the Getting Started docs for more information:// http://getbootstra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49930	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:33 UTC	731	OUT	GET /assests/js/googl-translate.js HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:34 UTC	518	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Tue, 05 Nov 2019 15:55:43 GMT Accept-Ranges: bytes ETag: "3ab4987af193d51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:47 GMT Content-Length: 591 Connection: close
2024-02-20 15:13:34 UTC	591	IN	Data Raw: 2f 2a 20 47 6f 6f 67 6c 65 20 54 72 61 6e 73 6c 61 74 65 20 2a 2f 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 6f 6f 67 6c 65 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 49 6e 69 74 28 29 20 7b 0d 0a 20 20 6e 65 77 20 67 6f 6f 67 6c 65 2e 74 72 61 6e 73 6c 61 74 65 2e 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 28 7b 20 70 61 67 65 4c 61 6e 67 75 61 67 65 3a 20 27 65 6e 27 7d 2c 20 22 67 6f 6f 67 6c 65 5f 74 72 61 6e 73 6c 61 74 65 5f 65 6c 65 6d 65 6e 74 22 29 3b 0d 0a 20 20 20 20 2f 2f 20 62 65 67 69 6e 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 20 63 6f 6d 70 6c 69 61 6e 63 65 0d 0a 20 20 20 20 24 28 27 69 6d 67 2e 67 6f 6f 67 2d 74 65 2d 67 61 64 67 65 74 2d 69 63 6f 6e 27 29 2e 61 74 74 72 28 27 61 6c 74 27 2c 27 47 6f 6f 67 6c 65 20 54 72 61 6e 73 6c Data Ascii: /* Google Translate */function googleTranslateElementInit() { new google.translate.TranslateElement({ pageLanguage: 'en'}, "google_translate_element"); // begin accessibility compliance $('img.goog-te-gadget-icon').attr('alt','Google Transl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49931	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:34 UTC	550	OUT	GET /mdtaxconnect/img/Logo_Final-Tory-Blue-background.png HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:34 UTC	507	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 08 Nov 2023 15:53:15 GMT Accept-Ranges: bytes ETag: "4f312eaf5b12da1:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:47 GMT Content-Length: 17281 Connection: close
2024-02-20 15:13:34 UTC	15440	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 36 00 00 01 2c 08 06 00 00 00 f9 28 ec d6 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ed dd bf 6e 24 57 b6 2f e8 c8 83 36 c6 ab 6c 80 7e 71 70 1f a0 d8 4f 50 ec 27 10 1b b4 64 15 e5 0b 10 f5 04 c5 f2 c6 13 0b 90 2f d2 92 45 34 e9 dd b1 ba f8 04 4d 3e c0 a0 8b c6 00 73 01 02 a7 e8 5f 20 07 a1 b3 42 27 c5 2e 66 ec d8 f1 3f f3 fb 00 42 52 77 55 32 32 32 22 32 e2 b7 d7 5e 7b b1 5a ad 0a 00 00 00 00 80 39 f9 0f 9f 16 00 00 00 00 30 37 82 4d 00 00 00 00 60 76 04 9b 00 00 00 00 c0 ec 08 36 01 00 00 00 80 d9 11 6c 02 00 00 00 00 b3 23 d8 04 00 00 00 00 66 47 b0 09 00 00 00 00 cc 8e 60 13 00 00 00 00 98 1d c1 26 00 00 00 00 30 3b 82 4d 00 00 00 00 60 76 04 9b Data Ascii: PNGIHDR6,(pHYs.#.#x?v IDATxn$W/6l~qpOP'd/E4M>s_ B'.f?BRwU222"2^{Z907M`v6l#fG`&0;M`v
2024-02-20 15:13:34 UTC	1841	IN	Data Raw: ae 3e cb a1 aa 60 ab 15 bc bf eb 68 df de 47 5f d0 bf c4 79 79 5e b3 4f be 24 2c 2c f3 b6 c7 d5 f6 4f 62 1f fc 23 31 d4 7c 8a a9 f4 75 a1 66 dd 71 33 f4 35 b9 ba 46 fe bd e6 ba 54 d7 4f 33 57 57 41 ee 32 de c7 4b a1 e6 e4 56 5e 17 6c 02 00 00 bc 2c 35 44 19 73 01 8e 3a eb fd ec 9a 4e 3d ff 98 d9 ff 2d 25 04 cd 5d 3d fa 24 de 4b ea 54 d6 be 7b 53 f6 e5 b2 c7 b0 69 93 21 a6 99 de b6 a8 58 eb 22 58 f9 38 42 6b 82 8b b8 4e fc 25 7e ff 6d 42 af d9 db 68 a3 f0 21 c2 be 45 9c 8f 67 0d f7 43 ca 7b 7d d7 e1 f1 b6 1f db f8 39 a6 e2 a7 56 69 de af 0d 5a d4 a9 eb 1f 7a 32 50 d5 66 93 7e b2 55 7f e2 3e 16 36 ea a2 0a 7e 99 d0 13 74 52 d3 d0 0b c1 26 00 00 40 ad db 84 3f 33 d5 8a cd 6a 01 91 d4 e9 c5 95 32 70 f9 5b 8b aa b6 94 20 f4 bc 61 f0 b0 1f 21 65 6a cf c2 fb 19 Data Ascii: >`hG_yy^O$,,Ob#1\|ufq35FTO3WWA2KV^l,5Ds:N=-%]=$KT{Si!X"X8BkN%~mBh!EgC{}9ViZz2Pf~U>6~tR&@?3j2p[ a!ej

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49933	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:34 UTC	722	OUT	GET /assests/js/search.js HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1
2024-02-20 15:13:34 UTC	518	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Tue, 10 Dec 2019 14:24:26 GMT Accept-Ranges: bytes ETag: "7772cc8665afd51:0" Server: Microsoft-IIS/10.0 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:47 GMT Content-Length: 376 Connection: close
2024-02-20 15:13:34 UTC	376	IN	Data Raw: 2f 2a 20 53 77 69 66 74 79 70 65 20 53 65 61 72 63 68 20 2a 2f 0d 0a 0d 0a 20 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 74 2c 75 2c 6e 2c 73 2c 65 29 7b 77 5b 27 53 77 69 66 74 79 70 65 4f 62 6a 65 63 74 27 5d 3d 6e 3b 77 5b 6e 5d 3d 77 5b 6e 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 28 77 5b 6e 5d 2e 71 3d 77 5b 6e 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 3b 73 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3b 0d 0a 20 20 65 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 5b 30 5d 3b 73 2e 61 73 79 6e 63 3d 31 3b 73 2e 73 72 63 3d 75 3b 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 2c 65 29 3b 0d 0a 20 20 7d 29 28 77 69 6e 64 6f Data Ascii: /* Swiftype Search */ (function(w,d,t,u,n,s,e){w['SwiftypeObject']=n;w[n]=w[n]\|\|function(){ (w[n].q=w[n].q\|\|[]).push(arguments);};s=d.createElement(t); e=d.getElementsByTagName(t)[0];s.async=1;s.src=u;e.parentNode.insertBefore(s,e); })(windo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49936	172.217.165.142	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:34 UTC	879	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit&_=1708442012438 HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:34 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:13:34 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:34 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-02-20 15:13:34 UTC	1252	IN	Data Raw: 66 62 2c 67 62 2c 68 62 2c 69 62 2c 77 2c 6a 62 2c 6d 62 2c 6f 62 2c 73 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b Data Ascii: fb,gb,hb,ib,w,jb,mb,ob,sb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;
2024-02-20 15:13:34 UTC	1252	IN	Data Raw: 28 30 29 2b 66 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b Data Ascii: (0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};
2024-02-20 15:13:34 UTC	1252	IN	Data Raw: 53 63 72 69 70 74 28 61 29 3a 61 3b 62 3d 6e 65 77 20 53 61 3b 62 2e 6e 67 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 61 29 72 65 74 75 72 6e 20 61 2e 6e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 41 22 29 3b 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 57 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 59 61 2e 61 70 70 6c 79 28 31 2c Data Ascii: Script(a):a;b=new Sa;b.ng=a;return b};_.Ua=function(a){if(a instanceof Sa)return a.ng;throw Error("A");};Va=function(){};Xa=function(a){return new _.Wa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.$a=function(a){var b=_.Ya.apply(1,
2024-02-20 15:13:34 UTC	1252	IN	Data Raw: 28 22 61 22 29 3b 7d 3b 69 62 3d 68 62 28 74 68 69 73 29 3b 0a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 69 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 67 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ("a");};ib=hb(this);w=function(a,b){if(b)a:{var c=ib;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&gb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){
2024-02-20 15:13:34 UTC	1252	IN	Data Raw: 61 29 29 3b 7d 3b 5f 2e 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 78 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6d 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: a));};_.lb=function(a){if(!(a instanceof Array)){a=_.x(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};mb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.nb=function(){functi
2024-02-20 15:13:34 UTC	1252	IN	Data Raw: 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b 7d 7d 29 3b 77 28 22 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f Data Ascii: )b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{}});w("Reflect.construct",function(){return _.nb});w("Reflect.setPrototypeOf",function(a){return a?a:sb?function(b,c){try{return sb(b,c),!0}catch(d){return!1}}:null});w("Promise",functio
2024-02-20 15:13:34 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 62 61 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 Data Ascii: function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}"function"==typeof h?this.ba(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`
2024-02-20 15:13:34 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 28 71 2c 70 29 7b 6d 3d 71 3b 6e 3d 70 7d 29 3b 74 68 69 73 2e 4c 63 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d Data Ascii: nction(q,p){m=q;n=p});this.Lc(l(g,m),l(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Lc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null=
2024-02-20 15:13:34 UTC	1252	IN	Data Raw: 3d 3d 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 75 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 67 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b Data Ascii: ===m}function d(l){if(!ub(l,f)){var m=new b;gb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49935	169.46.32.99	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:34 UTC	537	OUT	GET /install/v2/st.js HTTP/1.1 Host: app.swiftype.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.marylandtaxes.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:35 UTC	415	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:35 GMT Content-Type: text/javascript Content-Length: 425856 Last-Modified: Fri, 28 Apr 2023 13:00:45 GMT Connection: close Vary: Accept-Encoding Cache-Control: max-age=315360000 ETag: "644bc37d-67f80" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: public Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-02-20 15:13:35 UTC	15969	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 77 69 6e 64 6f 77 2e 5f 5f 73 74 5f 6d 6f 6d 65 6e 74 3d 77 69 6e 64 6f 77 2e 6d 6f 6d 65 6e 74 2c 77 69 6e 64 6f 77 2e 5f 5f 73 74 5f 72 6f 6d 65 3d 77 69 6e 64 6f 77 2e 72 6f 6d 65 7d 28 29 2c 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 35 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 Data Ascii: !function(){"use strict";window.__st_moment=window.moment,window.__st_rome=window.rome}(),/! jQuery JavaScript Library v3.5.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors
2024-02-20 15:13:35 UTC	16384	IN	Data Raw: 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 72 65 74 75 72 6e 21 28 21 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 64 74 2e 63 61 6c 6c 28 74 29 7c 7c 28 65 3d 6c 74 28 74 29 29 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 28 6e 3d 79 74 2e 63 61 6c 6c 28 65 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7c 7c 6d 74 2e 63 61 6c 6c 28 6e 29 21 3d 3d 67 74 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 Data Ascii: "),isReady:!0,error:function(t){throw new Error(t)},noop:function(){},isPlainObject:function(t){var e,n;return!(!t\|\|"[object Object]"!==dt.call(t)\|\|(e=lt(t))&&("function"!=typeof(n=yt.call(e,"constructor")&&e.constructor)\|\|mt.call(n)!==gt))},isEmptyObject
2024-02-20 15:13:35 UTC	16384	IN	Data Raw: 28 68 5b 70 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 75 3d 63 5b 74 5d 7c 7c 5b 5d 2c 66 3d 75 5b 30 5d 3d 3d 3d 55 26 26 75 5b 31 5d 2c 76 3d 66 26 26 75 5b 32 5d 2c 70 3d 66 26 26 6d 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 66 5d 3b 70 3d 2b 2b 66 26 26 70 26 26 70 5b 79 5d 7c 7c 28 76 3d 66 3d 30 29 7c 7c 64 2e 70 6f 70 28 29 3b 29 69 66 28 31 3d 3d 3d 70 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 76 26 26 70 3d 3d 3d 65 29 7b 63 5b 74 5d 3d 5b 55 2c 66 2c 76 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 5f 26 26 28 70 3d 65 2c 68 3d 70 5b 71 5d 7c 7c 28 70 5b 71 5d 3d 7b 7d 29 2c 63 3d 68 5b 70 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 68 5b 70 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 75 3d 63 5b 74 5d 7c 7c 5b 5d 2c 66 3d 75 5b 30 5d 3d 3d 3d 55 26 Data Ascii: (h[p.uniqueID]={}),u=c[t]\|\|[],f=u[0]===U&&u[1],v=f&&u[2],p=f&&m.childNodes[f];p=++f&&p&&p[y]\|\|(v=f=0)\|\|d.pop();)if(1===p.nodeType&&++v&&p===e){c[t]=[U,f,v];break}}else if(_&&(p=e,h=p[q]\|\|(p[q]={}),c=h[p.uniqueID]\|\|(h[p.uniqueID]={}),u=c[t]\|\|[],f=u[0]===U&
2024-02-20 15:13:35 UTC	16384	IN	Data Raw: 29 29 3b 72 65 74 75 72 6e 20 61 28 29 2c 72 2e 70 72 6f 6d 69 73 65 28 65 29 7d 7d 29 3b 76 61 72 20 56 74 3d 2f 5b 2b 2d 5d 3f 28 3f 3a 5c 64 2a 5c 2e 7c 29 5c 64 2b 28 3f 3a 5b 65 45 5d 5b 2b 2d 5d 3f 5c 64 2b 7c 29 2f 2e 73 6f 75 72 63 65 2c 59 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 56 74 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 57 74 3d 5b 22 54 6f 70 22 2c 22 52 69 67 68 74 22 2c 22 42 6f 74 74 6f 6d 22 2c 22 4c 65 66 74 22 5d 2c 7a 74 3d 53 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 47 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 54 74 2e 63 6f 6e 74 61 69 6e 73 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 74 29 7d 2c 4b 74 3d 7b 63 6f 6d 70 6f Data Ascii: ));return a(),r.promise(e)}});var Vt=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,Yt=new RegExp("^(?:([+-])=\|)("+Vt+")([a-z%])$","i"),Wt=["Top","Right","Bottom","Left"],zt=St.documentElement,Gt=function(t){return Tt.contains(t.ownerDocument,t)},Kt={compo
2024-02-20 15:13:35 UTC	16384	IN	Data Raw: 6c 65 6d 5b 74 2e 70 72 6f 70 5d 3d 74 2e 6e 6f 77 29 7d 7d 2c 54 74 2e 65 61 73 69 6e 67 3d 7b 6c 69 6e 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2e 35 2d 4d 61 74 68 2e 63 6f 73 28 74 2a 4d 61 74 68 2e 50 49 29 2f 32 7d 2c 5f 64 65 66 61 75 6c 74 3a 22 73 77 69 6e 67 22 7d 2c 54 74 2e 66 78 3d 42 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2c 54 74 2e 66 78 2e 73 74 65 70 3d 7b 7d 3b 76 61 72 20 53 65 2c 62 65 2c 78 65 3d 2f 5e 28 3f 3a 74 6f 67 67 6c 65 7c 73 68 6f 77 7c 68 69 64 65 29 24 2f 2c 54 65 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 3b 54 74 2e 41 6e 69 6d 61 74 69 6f 6e 3d 54 74 2e 65 78 74 65 6e 64 28 4a 2c 7b 74 77 65 65 6e 65 72 73 Data Ascii: lem[t.prop]=t.now)}},Tt.easing={linear:function(t){return t},swing:function(t){return.5-Math.cos(t*Math.PI)/2},_default:"swing"},Tt.fx=B.prototype.init,Tt.fx.step={};var Se,be,xe=/^(?:toggle\|show\|hide)$/,Te=/queueHooks$/;Tt.Animation=Tt.extend(J,{tweeners
2024-02-20 15:13:35 UTC	16384	IN	Data Raw: 74 2e 67 65 74 28 74 2c 65 2c 6e 2c 22 6a 73 6f 6e 22 29 7d 2c 67 65 74 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 54 74 2e 67 65 74 28 74 2c 75 6e 64 65 66 69 6e 65 64 2c 65 2c 22 73 63 72 69 70 74 22 29 7d 7d 29 2c 54 74 2e 65 61 63 68 28 5b 22 67 65 74 22 2c 22 70 6f 73 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 54 74 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 76 74 28 6e 29 26 26 28 72 3d 72 7c 7c 69 2c 69 3d 6e 2c 6e 3d 75 6e 64 65 66 69 6e 65 64 29 2c 54 74 2e 61 6a 61 78 28 54 74 2e 65 78 74 65 6e 64 28 7b 75 72 6c 3a 74 2c 74 79 70 65 3a 65 2c 64 61 74 61 54 79 70 65 3a 72 2c 64 61 74 61 3a 6e 2c 73 75 63 63 65 73 73 3a 69 7d 2c 54 74 2e 69 73 50 6c 61 Data Ascii: t.get(t,e,n,"json")},getScript:function(t,e){return Tt.get(t,undefined,e,"script")}}),Tt.each(["get","post"],function(t,e){Tt[e]=function(t,n,i,r){return vt(n)&&(r=r\|\|i,i=n,n=undefined),Tt.ajax(Tt.extend({url:t,type:e,dataType:r,data:n,success:i},Tt.isPla
2024-02-20 15:13:35 UTC	16384	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 5f 71 75 65 72 79 2e 71 7d 2c 69 2e 67 65 74 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 6f 75 6e 74 7d 2c 69 2e 6c 61 73 74 45 78 65 63 75 74 65 64 41 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6c 61 73 74 7d 2c 69 2e 67 65 74 43 6c 69 63 6b 52 65 63 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 6c 69 63 6b 52 65 63 6f 72 64 73 7d 2c 69 2e 67 65 74 4c 61 73 74 43 6c 69 63 6b 52 65 63 6f 72 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 65 2e 65 61 63 68 28 74 68 69 73 2e 67 65 74 43 6c 69 63 6b 52 65 63 6f 72 64 73 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: urn this._query.q},i.getCount=function(){return this._count},i.lastExecutedAt=function(){return this._last},i.getClickRecords=function(){return this._clickRecords},i.getLastClickRecord=function(){var t=null;return e.each(this.getClickRecords(),function(e,
2024-02-20 15:13:35 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 6e 21 3d 3d 46 26 26 28 6a 74 3d 65 2c 6e 3d 62 74 28 6e 29 29 2c 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 76 61 72 20 65 2c 6e 2c 72 2c 6f 2c 73 2c 61 2c 6c 2c 75 3b 72 65 74 75 72 6e 20 78 74 2e 74 65 73 74 28 74 2e 63 68 61 72 41 74 28 50 74 29 29 3f 28 65 3d 74 2e 63 68 61 72 41 74 28 50 74 29 2c 50 74 2b 2b 29 3a 28 65 3d 46 2c 30 3d 3d 3d 42 74 26 26 69 28 54 74 29 29 2c 65 3d 3d 3d 46 26 26 28 65 3d 50 74 2c 74 2e 73 75 62 73 74 72 28 50 74 2c 32 29 3d 3d 3d 44 74 3f 28 6e 3d 44 74 2c 50 74 2b 3d 32 29 3a 28 6e 3d 46 2c 30 3d 3d 3d 42 74 26 26 69 28 43 74 29 29 2c 6e 21 3d 3d 46 26 26 28 6a 74 3d 65 2c 6e 3d 52 74 28 29 29 2c 28 65 3d 6e 29 3d 3d 3d 46 26 26 28 65 3d 50 74 2c 74 2e 73 75 62 73 74 72 28 50 74 2c 32 29 3d Data Ascii: eturn n!==F&&(jt=e,n=bt(n)),e=n}function T(){var e,n,r,o,s,a,l,u;return xt.test(t.charAt(Pt))?(e=t.charAt(Pt),Pt++):(e=F,0===Bt&&i(Tt)),e===F&&(e=Pt,t.substr(Pt,2)===Dt?(n=Dt,Pt+=2):(n=F,0===Bt&&i(Ct)),n!==F&&(jt=e,n=Rt()),(e=n)===F&&(e=Pt,t.substr(Pt,2)=
2024-02-20 15:13:35 UTC	16384	IN	Data Raw: 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 74 29 29 2c 6e 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 2e 5d 2a 5c 2e 3f 2f 2c 22 22 29 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 29 2c 31 3d 3d 3d 65 26 26 30 3d 3d 3d 6e 3f 22 6f 6e 65 22 3a 22 6f 74 68 65 72 22 7d 7d 29 2c 49 6e 74 6c 4d 65 73 73 61 67 65 46 6f 72 6d 61 74 2e 5f 5f 61 64 64 4c 6f 63 61 6c 65 44 61 74 61 28 7b 6c 6f 63 61 6c 65 3a 22 6a 61 22 2c 70 6c 75 72 61 6c 52 75 6c 65 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6f 74 68 65 72 22 7d 7d 29 2c 49 6e 74 6c 4d 65 73 73 61 67 65 46 6f 72 6d 61 74 2e 5f 5f 61 64 64 4c 6f 63 61 6c 65 44 61 74 61 28 7b 6c 6f 63 61 6c 65 3a Data Ascii: .floor(Math.abs(t)),n=t.toString().replace(/^[^.]*\.?/,"").length;return t=Math.floor(t),1===e&&0===n?"one":"other"}}),IntlMessageFormat.__addLocaleData({locale:"ja",pluralRuleFunction:function(){return"other"}}),IntlMessageFormat.__addLocaleData({locale:
2024-02-20 15:13:35 UTC	16384	IN	Data Raw: 74 20 64 65 66 69 6e 65 64 27 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 72 3d 69 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 2d 31 3b 69 66 28 6e 3d 2b 65 7c 7c 30 2c 49 6e 66 69 6e 69 74 79 3d 3d 3d 4d 61 74 68 2e 61 62 73 28 6e 29 26 26 28 6e 3d 30 29 2c 6e 3e 3d 72 29 72 65 74 75 72 6e 2d 31 3b 66 6f 72 28 6e 3d 4d 61 74 68 2e 6d 61 78 28 30 3c 3d 6e 3f 6e 3a 72 2d 4d 61 74 68 2e 61 62 73 28 6e 29 2c 30 29 3b 6e 3c 72 3b 29 7b 69 66 28 6e 20 69 6e 20 69 26 26 69 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 6e 2b 2b 7d 72 65 74 75 72 6e 2d 31 7d 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 72 2c 6f 29 7b 74 68 69 73 2e 56 45 52 53 49 4f 4e 3d 22 32 2e 30 2e 37 22 2c 74 68 69 73 Data Ascii: t defined');var i=Object(this),r=i.length>>>0;if(0===r)return-1;if(n=+e\|\|0,Infinity===Math.abs(n)&&(n=0),n>=r)return-1;for(n=Math.max(0<=n?n:r-Math.abs(n),0);n<r;){if(n in i&&i[n]===t)return n;n++}return-1});var s=function(i,r,o){this.VERSION="2.0.7",this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49940	151.101.0.143	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:36 UTC	600	OUT	GET /install/v2/config/3jhvv-yfJCUxQ51kSGbN.json HTTP/1.1 Host: s.swiftypecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.marylandtaxes.gov Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.marylandtaxes.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:36 UTC	892	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18776 Content-Type: application/json; charset=utf-8 Access-Control-Allow-Methods: GET, POST Access-Control-Expose-Headers: Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"8a8e158965388a52b610dcad35038011" Last-Modified: Tue, 17 Dec 2019 18:03:48 GMT Cache-Control: max-age=300, public X-Request-Id: 1af0c4db8cc355da988498f07bd28b19 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 20 Feb 2024 15:13:36 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-lga21920-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1708442016.256862,VS0,VE600 Vary: Accept-Encoding, Origin
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 7b 22 69 6e 73 74 61 6c 6c 22 3a 7b 22 70 72 69 6d 61 72 79 5f 64 6f 63 5f 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 68 6f 6f 6b 73 22 3a 7b 22 71 75 65 72 79 5f 66 69 6c 74 65 72 22 3a 6e 75 6c 6c 2c 22 72 65 73 75 6c 74 5f 63 6c 69 63 6b 65 64 5f 66 69 6c 74 65 72 22 3a 6e 75 6c 6c 7d 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 7b 22 73 65 61 72 63 68 22 3a 22 2f 2f 73 65 61 72 63 68 2d 61 70 69 2e 73 77 69 66 74 79 70 65 2e 63 6f 6d 2f 61 70 69 2f 76 31 2f 70 75 62 6c 69 63 2f 69 6e 73 74 61 6c 6c 73 2f 33 6a 68 76 76 2d 79 66 4a 43 55 78 51 35 31 6b 53 47 62 4e 2f 73 65 61 72 63 68 2e 6a 73 6f 6e 22 2c 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 3a 22 2f 2f 73 65 61 72 63 68 2d 61 70 69 2e 73 77 69 66 74 79 70 65 2e 63 6f 6d 2f 61 70 69 2f 76 31 2f 70 75 62 Data Ascii: {"install":{"primary_doc_type":"page","hooks":{"query_filter":null,"result_clicked_filter":null},"endpoints":{"search":"//search-api.swiftype.com/api/v1/public/installs/3jhvv-yfJCUxQ51kSGbN/search.json","autocomplete":"//search-api.swiftype.com/api/v1/pub
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 36 66 63 66 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 22 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 69 6e 74 6c 22 3a 22 2f 2f 73 2e 73 77 69 66 74 79 70 65 63 64 6e 2e 63 6f 6d 2f 69 6e 73 74 61 6c 6c 2f 76 32 2f 69 6e 74 6c 2f 22 7d 7d 2c 22 75 69 22 3a 7b 22 73 65 61 72 63 68 5f 72 65 73 75 6c 74 73 5f 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 72 79 6c 61 6e 64 74 61 78 65 73 2e 67 6f 76 2f 73 65 61 72 63 68 2f 22 2c 22 73 65 61 72 63 68 22 3a 7b 22 72 65 73 75 6c 74 73 5f 64 69 73 70 6c 61 79 22 3a 7b 22 69 6e 69 74 69 61 6c 6c 79 5f 76 69 73 69 62 6c 65 22 3a 66 Data Ascii: t-style:normal; font-weight:bold; background-color:#f6fcfe !important}","polyfills":{"intl":"//s.swiftypecdn.com/install/v2/intl/"}},"ui":{"search_results_page_url":"https://www.marylandtaxes.gov/search/","search":{"results_display":{"initially_visible":f
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 6a 6f 69 6e 65 64 45 6c 65 6d 65 6e 74 22 3a 5b 22 2e 73 74 2d 73 65 61 72 63 68 2d 61 64 6a 6f 69 6e 65 64 22 5d 2c 22 46 69 65 6c 64 44 65 70 65 6e 64 65 6e 74 56 69 73 69 62 69 6c 69 74 79 22 3a 5b 22 2e 73 74 2d 73 65 61 72 63 68 2d 74 72 61 6e 73 69 65 6e 74 2d 6f 6e 2d 73 65 6c 65 63 74 22 5d 2c 22 46 69 65 6c 64 41 6e 64 51 75 65 72 79 44 65 70 65 6e 64 65 6e 74 56 69 73 69 62 69 6c 69 74 79 22 3a 5b 22 2e 73 74 2d 73 65 61 72 63 68 2d 74 72 61 6e 73 69 65 6e 74 2d 6f 6e 2d 73 65 6c 65 63 74 2d 61 6e 64 2d 71 75 65 72 79 22 5d 2c 22 46 69 65 6c 64 41 6e 64 52 65 73 75 6c 74 73 44 65 70 65 6e 64 65 6e 74 56 69 73 69 62 69 6c 69 74 79 22 3a 5b 22 2e 73 74 2d 73 65 61 72 63 68 2d 74 72 61 6e 73 69 65 6e 74 2d 6f 6e 2d 73 65 6c 65 63 74 2d 61 6e 64 2d Data Ascii: joinedElement":[".st-search-adjoined"],"FieldDependentVisibility":[".st-search-transient-on-select"],"FieldAndQueryDependentVisibility":[".st-search-transient-on-select-and-query"],"FieldAndResultsDependentVisibility":[".st-search-transient-on-select-and-
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 7b 22 6f 75 74 70 75 74 73 22 3a 7b 22 52 65 73 75 6c 74 4c 69 73 74 22 3a 5b 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 73 22 5d 2c 22 52 65 73 75 6c 74 53 75 6d 6d 61 72 79 22 3a 5b 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 73 75 6d 6d 61 72 79 22 5d 2c 22 52 65 73 75 6c 74 50 61 67 69 6e 61 74 69 6f 6e 22 3a 5b 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 70 61 67 69 6e 61 74 69 6f 6e 22 5d 2c 22 43 68 72 6f 6d 65 45 6c 65 6d 65 6e 74 22 3a 5b 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 63 68 72 6f 6d 65 2d 69 6e 70 75 74 22 2c 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 63 68 72 6f 6d 65 2d 6f 75 74 70 75 74 22 2c 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 63 68 72 6f 6d Data Ascii: {"outputs":{"ResultList":[".st-autocomplete-results"],"ResultSummary":[".st-autocomplete-summary"],"ResultPagination":[".st-autocomplete-pagination"],"ChromeElement":[".st-autocomplete-chrome-input",".st-autocomplete-chrome-output",".st-autocomplete-chrom
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 74 72 69 67 67 65 72 22 5d 7d 7d 7d 2c 22 74 65 6d 70 6c 61 74 65 73 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 7b 22 69 6e 6a 65 63 74 65 64 5f 63 6f 6e 74 65 6e 74 22 3a 7b 22 6d 61 69 6e 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 64 65 66 61 75 6c 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5c 22 20 64 61 74 61 2d 73 74 2d 74 61 72 67 65 74 2d 65 6c 65 6d 65 6e 74 3d 5c 22 2e 73 74 2d 64 65 66 61 75 6c 74 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 5c 22 20 73 74 79 6c 65 3d 5c 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 5c 22 20 3e 5c 6e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 73 20 73 74 2d 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5c 22 Data Ascii: utocomplete-trigger"]}}},"templates":{"default":{"injected_content":{"main":"<div class=\"st-default-autocomplete\" data-st-target-element=\".st-default-search-input\" style=\"display: none;\" >\n <div class=\"st-autocomplete-results st-ui-autocomplete\"
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 63 6f 6e 74 65 6e 74 20 73 74 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 5c 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 5c 6e 5c 6e 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 6e 6f 2d 72 65 73 75 6c 74 73 20 73 74 2d 73 65 61 72 63 68 2d 73 75 67 67 65 73 74 69 6f 6e 73 5c 22 3e 5c 6e 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 5c 6e 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 5c 6e 5c 6e 20 20 20 20 3c 21 2d 2d 20 46 4f 4f 54 45 52 20 2d 2d 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 6f 6f 74 65 72 5f 62 61 72 20 73 74 2d 70 6f 73 69 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 3e 5c 6e 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 Data Ascii: content st-search-results\"></div>\n \n\n <section class=\"st-ui-no-results st-search-suggestions\">\n </section>\n </div>\n\n\n\n ... FOOTER -->\n <div class=\"st-ui-container-footer_bar st-position-container\">\n <section c
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 61 74 69 6f 6e 2d 6e 75 6d 62 65 72 2d 6c 69 6e 6b 20 73 74 2d 72 65 73 75 6c 74 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 27 20 64 61 74 61 2d 73 74 2d 70 61 67 65 3d 7b 7b 70 61 67 65 5f 6e 75 6d 62 65 72 7d 7d 20 68 72 65 66 3d 27 23 27 3e 7b 7b 20 70 61 67 65 5f 6e 75 6d 62 65 72 20 7d 7d 3c 2f 61 3e 5c 6e 20 20 20 20 7b 25 20 65 6c 73 65 20 25 7d 5c 6e 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 27 73 74 2d 75 69 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 20 73 74 2d 75 69 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 75 6d 62 65 72 2d 6c 69 6e 6b 20 73 74 2d 72 65 73 75 6c 74 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 20 61 63 74 69 76 65 27 20 64 61 74 61 2d 73 74 2d 70 61 67 65 3d 7b 7b 70 61 67 65 5f 6e 75 6d 62 65 72 7d 7d 20 68 72 65 Data Ascii: ation-number-link st-result-pagination-link' data-st-page={{page_number}} href='#'>{{ page_number }}</a>\n {% else %}\n <a class='st-ui-pagination-link st-ui-pagination-number-link st-result-pagination-link active' data-st-page={{page_number}} hre
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 20 3c 69 6e 70 75 74 20 69 64 3d 5c 22 7b 7b 66 61 63 65 74 5f 64 61 74 61 2e 6c 61 62 65 6c 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 65 70 6c 61 63 65 3a 27 20 27 2c 27 5f 27 7d 7d 2d 7b 7b 66 61 63 65 74 5b 30 5d 7d 7d 5c 22 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 63 6c 61 73 73 3d 5c 22 73 74 2d 66 69 6c 74 65 72 2d 65 6c 65 6d 65 6e 74 5c 22 20 6e 61 6d 65 3d 5c 22 7b 7b 66 61 63 65 74 5b 30 5d 7d 7d 5c 22 20 76 61 6c 75 65 3d 5c 22 7b 7b 66 61 63 65 74 5b 30 5d 7d 7d 5c 22 20 64 61 74 61 2d 73 74 2d 66 69 6c 74 65 72 2d 76 61 6c 75 65 73 3d 5c 22 7b 7b 66 61 63 65 74 5b 30 5d 7d 7d 5c 22 3e 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 5c 22 7b 7b 66 61 63 65 74 5f 64 61 74 61 2e 6c 61 62 65 6c 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 Data Ascii: <input id=\"{{facet_data.label \| downcase \| replace:' ','_'}}-{{facet[0]}}\" type=\"checkbox\" class=\"st-filter-element\" name=\"{{facet[0]}}\" value=\"{{facet[0]}}\" data-st-filter-values=\"{{facet[0]}}\"> <label for=\"{{facet_data.label \| downcase \| r
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 65 6c 7d 7d 5f 7b 7b 20 66 61 63 65 74 5f 64 61 74 61 2e 66 72 6f 6d 5f 6c 61 62 65 6c 20 7d 7d 7b 25 20 65 6e 64 63 61 70 74 75 72 65 20 25 7d 5c 6e 7b 25 20 63 61 70 74 75 72 65 20 74 6f 5f 69 64 20 25 7d 7b 7b 20 66 61 63 65 74 5f 64 61 74 61 2e 6c 61 62 65 6c 20 7d 7d 5f 7b 7b 20 66 61 63 65 74 5f 64 61 74 61 2e 74 6f 5f 6c 61 62 65 6c 20 7d 7d 7b 25 20 65 6e 64 63 61 70 74 75 72 65 20 25 7d 5c 6e 5c 6e 5c 6e 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 5c 22 5c 22 3e 5c 6e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 69 6e 70 75 74 5c 22 3e 5c 6e 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 5c 22 7b 7b 20 66 72 6f 6d 5f 69 64 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 65 70 6c 61 63 65 3a 20 27 20 27 2c 20 27 5f 27 20 7c 20 72 65 6d 6f Data Ascii: el}}_{{ facet_data.from_label }}{% endcapture %}\n{% capture to_id %}{{ facet_data.label }}_{{ facet_data.to_label }}{% endcapture %}\n\n\n<form action=\"\">\n <div class=\"st-ui-input\">\n <label for=\"{{ from_id \| downcase \| replace: ' ', '_' \| remo
2024-02-20 15:13:36 UTC	1379	IN	Data Raw: 69 64 3d 5c 22 7b 7b 20 66 72 6f 6d 5f 69 64 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 65 70 6c 61 63 65 3a 20 27 20 27 2c 20 27 5f 27 20 7c 20 72 65 6d 6f 76 65 3a 20 27 3a 27 20 7d 7d 5c 22 2f 3e 5c 6e 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 69 6e 70 75 74 5c 22 3e 5c 6e 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 5c 22 7b 7b 20 74 6f 5f 69 64 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 65 70 6c 61 63 65 3a 20 27 20 27 2c 20 27 5f 27 20 7c 20 72 65 6d 6f 76 65 3a 20 27 3a 27 20 7d 7d 5c 22 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 6c 61 62 65 6c 5c 22 3e 7b 7b 20 66 61 63 65 74 5f 64 61 74 61 2e 74 6f 5f 6c 61 62 65 6c 20 7d 7d 3c 2f 6c 61 62 65 6c 3e 5c 6e 20 20 20 20 3c 69 6e 70 75 74 20 63 Data Ascii: id=\"{{ from_id \| downcase \| replace: ' ', '_' \| remove: ':' }}\"/>\n </div>\n <div class=\"st-ui-input\">\n <label for=\"{{ to_id \| downcase \| replace: ' ', '_' \| remove: ':' }}\" class=\"st-ui-label\">{{ facet_data.to_label }}</label>\n <input c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49946	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:36 UTC	827	OUT	GET /favicon.ico HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.marylandtaxes.gov/MDTaxConnect/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0
2024-02-20 15:13:36 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: PHP/8.3.3 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:49 GMT Content-Length: 56800 Connection: close
2024-02-20 15:13:36 UTC	5359	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 20 74 65 6d 70 6c 61 74 65 3d 22 2f 54 65 6d 70 6c 61 74 65 73 2f 4e 45 57 2d 74 65 6d 70 6c 61 74 65 2e 64 77 74 2e 70 68 70 22 20 63 6f 64 65 4f 75 74 73 69 64 65 48 54 4d 4c 49 73 4c 6f 63 6b 65 64 3d 22 66 61 6c 73 65 22 20 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 45 64 69 74 61 62 6c 65 20 6e 61 6d 65 3d 22 68 65 61 64 22 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 45 6e 64 45 64 69 74 61 62 6c 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 48 65 61 64 20 42 45 47 49 4e 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d Data Ascii: <!DOCTYPE html> <html class="no-js" lang="en">... InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" --><head>... InstanceBeginEditable name="head" -->... InstanceEndEditable -->... Head BEGIN --><!-
2024-02-20 15:13:36 UTC	7240	IN	Data Raw: 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 6e 61 76 62 61 72 2d 64 61 72 6b 20 6e 61 76 62 61 72 2d 73 74 61 74 69 63 2d 74 6f 70 20 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 6e 6f 2d 6d 61 72 67 69 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 20 69 64 3d 22 6e 61 76 62 61 72 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: style="padding: 0;"> <nav class="navbar navbar-default navbar-dark navbar-static-top no-border-radius no-margin" style="top: 0;"> <div class="container-fluid" id="navbar-inner-container">
2024-02-20 15:13:36 UTC	8688	IN	Data Raw: 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 43 6f 6e 74 61 63 74 20 54 61 78 70 61 79 65 72 20 53 65 72 76 69 63 65 73 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 43 6f 6e 74 61 63 74 20 54 61 78 70 61 79 65 72 20 53 65 72 76 69 63 65 73 22 3e 43 6f 6e 74 61 63 74 20 54 61 78 70 61 79 65 72 20 53 65 72 76 69 63 65 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 63 6f 6d 70 2e 70 68 70 23 6d 70 69 61 22 20 63 6c 61 73 73 3d 22 6d 65 Data Ascii: ass="menu-link-text" title="Contact Taxpayer Services" aria-label="Contact Taxpayer Services">Contact Taxpayer Services</a> <br> <a href="/divisions/comp.php#mpia" class="me
2024-02-20 15:13:36 UTC	5792	IN	Data Raw: 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 61 75 74 6f 68 65 69 67 68 74 20 63 6c 65 61 72 66 69 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 22 3e 50 4f 50 55 4c 41 52 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ol-xs-12 col-autoheight clearfix"> <div class="widget-default clearfix pad-0-25-sm"> <p style="font-size: 14px; font-weight: 700;">POPULAR</p>
2024-02-20 15:13:36 UTC	7240	IN	Data Raw: 0d 0a 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 30 35 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 30 35 20 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 4e 6f 6e 72 65 73 69 64 65 6e 74 20 52 65 74 75 72 6e 22 3e 35 30 35 20 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 4e 6f 6e 72 65 73 69 64 65 6e 74 20 52 65 74 75 72 6e 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 30 35 4e 52 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 30 35 4e 52 0d 0a 09 09 09 09 09 09 09 09 09 09 2d 20 4e 52 0d 0a 09 09 09 09 09 09 09 09 09 09 43 6f 6d 70 75 74 61 74 69 6f 6e 22 3e 0d 0a 09 09 09 09 09 09 Data Ascii: <option value="/forms/23_forms/505.pdf" label="505 -Nonresident Return">505 -Nonresident Return</option><option value="/forms/23_forms/505NR.pdf" label="505NR- NRComputation">
2024-02-20 15:13:36 UTC	7240	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 72 6f 77 2d 61 75 74 6f 68 65 69 67 68 74 20 6e 6f 2d 6d 61 72 67 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 36 20 63 6f 6c 2d 6d 64 2d 36 20 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 61 75 74 6f 68 65 69 67 68 74 20 63 6c 65 61 72 66 69 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 Data Ascii: <div class="row row-autoheight no-margin"> <div class="col-lg-6 col-md-6 col-sm-6 col-xs-12 col-autoheight clearfix"> <div class="widget-default clearfix pad-0-25-sm">
2024-02-20 15:13:36 UTC	4344	IN	Data Raw: 78 74 22 20 74 69 74 6c 65 3d 22 4f 66 66 69 63 65 20 6f 66 20 4c 65 67 69 73 6c 61 74 69 76 65 20 41 66 66 61 69 72 73 20 53 74 61 74 65 20 41 67 65 6e 63 79 20 46 72 61 75 64 20 52 65 70 6f 72 74 69 6e 67 22 3e 4f 66 66 69 63 65 20 6f 66 20 4c 65 67 69 73 6c 61 74 69 76 65 20 41 66 66 61 69 72 73 20 53 74 61 74 65 20 41 67 65 6e 63 79 20 46 72 61 75 64 20 52 65 70 6f 72 74 69 6e 67 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 74 61 78 2d 73 65 63 75 72 69 74 79 2f 69 64 65 Data Ascii: xt" title="Office of Legislative Affairs State Agency Fraud Reporting">Office of Legislative Affairs State Agency Fraud Reporting</a> <hr> <a href="/tax-security/ide
2024-02-20 15:13:36 UTC	2896	IN	Data Raw: 63 65 20 44 69 76 69 73 69 6f 6e 20 28 43 44 29 22 3e 20 43 6f 6d 70 6c 69 61 6e 63 65 20 44 69 76 69 73 69 6f 6e 20 28 43 44 29 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 61 66 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 4f 66 66 69 63 65 20 6f 66 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 61 6e 64 20 46 69 6e 61 6e 63 65 20 28 41 20 26 61 6d 70 3b 20 46 29 20 22 3e 20 4f 66 66 69 63 65 20 6f 66 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 61 6e 64 20 46 69 6e 61 6e 63 65 20 28 41 20 26 61 6d 70 3b 20 46 29 20 3c 2f Data Ascii: ce Division (CD)"> Compliance Division (CD) </a><hr> <a href="/divisions/af.php" class="menu-link-text" title="Office of Administration and Finance (A & F) "> Office of Administration and Finance (A & F) </
2024-02-20 15:13:36 UTC	2896	IN	Data Raw: 64 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 57 68 65 72 65 27 73 20 4d 79 20 52 65 66 75 6e 64 22 3e 57 68 65 72 65 27 73 20 4d 79 20 52 65 66 75 6e 64 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 75 6e 63 6c 61 69 6d 65 64 2d 70 72 6f 70 65 72 74 79 2f 69 6e 64 65 78 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 55 6e 63 6c 61 69 6d 65 64 20 50 72 Data Ascii: d.php" class="menu-link-text" title="Where's My Refund">Where's My Refund</a> <br> <a href="/unclaimed-property/index.php" class="menu-link-text" title="Unclaimed Pr
2024-02-20 15:13:36 UTC	4344	IN	Data Raw: 20 20 20 3c 70 3e 57 65 27 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 74 68 65 20 70 61 67 65 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 6f 72 20 6e 6f 20 6c 6f 6e 67 65 72 20 65 78 69 73 74 73 2e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 3c 70 3e 50 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 6c 69 6e 6b 73 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 70 61 67 65 20 74 6f 20 66 69 6e 64 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 79 6f 75 20 6e 65 65 64 2e 3c 2f 70 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 3c 70 3e 54 68 61 6e 6b 20 79 6f 75 21 3c 2f 70 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 Data Ascii: <p>We're sorry, but the page you're looking for has been moved or no longer exists.</p> <p>Please use the links at the top of the page to find the information you need.</p> <p>Thank you!</p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49947	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:36 UTC	1838	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fnew-user-signup%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=1379327624&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 5061 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/new-user-signup/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:36 UTC	5061	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 72 70 74 70 25 32 46 70 6f 72 74 61 6c 25 32 46 68 6f 6d 65 25 32 46 6e 65 77 2d 75 73 65 72 2d 73 69 67 6e 75 70 25 32 46 21 75 74 25 32 46 70 25 32 46 7a 31 25 32 46 30 34 5f 53 6a 39 43 50 79 6b 73 73 79 30 78 50 4c 4d 6e 4d 7a 30 76 4d 41 66 49 6a 6f 38 7a 69 54 52 31 4e 7a 44 77 38 33 51 32 4d 41 73 49 73 58 41 7a 4d 67 6a 33 63 67 6e 78 4e 51 77 77 4d 33 4d 33 30 77 38 45 4b 44 48 41 41 52 77 50 39 4b 47 4c 30 34 31 45 51 68 64 5f 34 63 50 30 6f 73 42 4a 6a 43 77 4e 6e 64 77 38 44 49 79 5f 33 30 47 41 6a 41 30 64 5f 78 31 43 54 4d 45 63 76 49 4d 73 45 71 67 43 50 47 51 57 35 6f 52 45 47 6d 59 36 4b 41 4f 75 53 5a 37 6b 21 25 32 46 64 7a 25 32 46 64 35 25 32 46 4c 32 64 42 49 53 45 76 5a 30 46 42 49 53 39 6e 51 53 45 68 25 32 Data Ascii: $tvn=%2Frptp%2Fportal%2Fhome%2Fnew-user-signup%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2
2024-02-20 15:13:37 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:37 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:37 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49949	167.102.245.60	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:37 UTC	563	OUT	GET /favicon.ico HTTP/1.1 Host: www.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0
2024-02-20 15:13:37 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: PHP/8.3.3 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:14:50 GMT Content-Length: 56800 Connection: close
2024-02-20 15:13:37 UTC	5359	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 20 74 65 6d 70 6c 61 74 65 3d 22 2f 54 65 6d 70 6c 61 74 65 73 2f 4e 45 57 2d 74 65 6d 70 6c 61 74 65 2e 64 77 74 2e 70 68 70 22 20 63 6f 64 65 4f 75 74 73 69 64 65 48 54 4d 4c 49 73 4c 6f 63 6b 65 64 3d 22 66 61 6c 73 65 22 20 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 45 64 69 74 61 62 6c 65 20 6e 61 6d 65 3d 22 68 65 61 64 22 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 45 6e 64 45 64 69 74 61 62 6c 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 48 65 61 64 20 42 45 47 49 4e 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d Data Ascii: <!DOCTYPE html> <html class="no-js" lang="en">... InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" --><head>... InstanceBeginEditable name="head" -->... InstanceEndEditable -->... Head BEGIN --><!-
2024-02-20 15:13:37 UTC	10136	IN	Data Raw: 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 6e 61 76 62 61 72 2d 64 61 72 6b 20 6e 61 76 62 61 72 2d 73 74 61 74 69 63 2d 74 6f 70 20 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 6e 6f 2d 6d 61 72 67 69 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 20 69 64 3d 22 6e 61 76 62 61 72 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: style="padding: 0;"> <nav class="navbar navbar-default navbar-dark navbar-static-top no-border-radius no-margin" style="top: 0;"> <div class="container-fluid" id="navbar-inner-container">
2024-02-20 15:13:37 UTC	8688	IN	Data Raw: 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 62 75 73 69 6e 65 73 73 2f 69 6e 63 6f 6d 65 2f 66 69 6c 69 6e 67 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 70 68 70 23 64 65 61 64 6c 69 6e 65 73 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 57 68 65 6e 20 74 6f 20 46 69 6c 65 22 3e 57 68 65 6e 20 74 6f 20 46 69 6c 65 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 62 75 73 69 6e 65 73 73 2f 62 75 73 69 6e 65 73 73 2d 66 61 71 73 2e 70 68 70 22 20 Data Ascii: <a href="/business/income/filing-information.php#deadlines" class="menu-link-text" title="When to File">When to File</a> <hr> <a href="/business/business-faqs.php"
2024-02-20 15:13:37 UTC	7240	IN	Data Raw: 20 54 61 78 20 46 6f 72 6d 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 0d 0a 09 09 09 09 09 09 09 09 09 09 76 61 6c 75 65 3d 22 2f 69 6e 64 69 76 69 64 75 61 6c 2f 69 6e 63 6f 6d 65 2f 66 6f 72 6d 73 2f 32 30 32 33 5f 49 6e 63 6f 6d 65 5f 54 61 78 5f 46 6f 72 6d 73 2e 70 68 70 22 0d 0a 09 09 09 09 09 09 09 09 09 09 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 20 6c 61 62 65 6c 3d 22 32 30 32 33 20 49 6e 63 6f 6d 65 20 54 61 78 20 46 6f 72 6d 73 22 3e 32 30 32 32 20 49 6e 63 6f 6d 65 20 54 61 78 20 46 6f 72 6d 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 0d 0a 09 09 09 09 09 09 09 09 09 09 76 61 6c 75 65 3d 22 2f 69 6e 73 74 72 75 63 74 69 6f 6e 2d Data Ascii: Tax Forms</option><optionvalue="/individual/income/forms/2023_Income_Tax_Forms.php"style="font-weight:bold;" label="2023 Income Tax Forms">2022 Income Tax Forms</option><optionvalue="/instruction-
2024-02-20 15:13:37 UTC	8688	IN	Data Raw: 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 31 30 5f 35 31 31 44 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 31 30 2f 35 31 31 44 0d 0a 09 09 09 09 09 09 09 09 09 09 09 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 09 32 30 32 33 22 3e 35 31 30 2f 35 31 31 44 0d 0a 09 09 09 09 09 09 09 09 09 09 09 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 09 32 30 32 33 3c 2f 6f 70 74 69 6f 6e 3e 20 2d 2d 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 21 2d 2d 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 31 30 5f 35 31 31 45 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 31 30 2f 35 31 31 45 22 3e 35 31 30 2f 35 31 31 45 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 6f 70 74 69 6f 6e 3e 2d 2d 3e 0d 0a 0d 0a 09 09 09 09 Data Ascii: value="/forms/23_forms/510_511D.pdf" label="510/511D-2023">510/511D-2023</option> -->...<option value="/forms/23_forms/510_511E.pdf" label="510/511E">510/511E</option>-->
2024-02-20 15:13:37 UTC	4344	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 75 6e 63 6c 61 69 6d 65 64 2d 70 72 6f 70 65 72 74 79 2f 69 6e 64 65 78 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 55 6e 63 6c 61 69 6d 65 64 20 50 72 6f 70 65 72 74 79 22 3e 55 6e 63 6c 61 69 6d 65 64 20 50 72 6f 70 65 72 74 79 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <a href="/unclaimed-property/index.php" class="menu-link-text" title="Unclaimed Property">Unclaimed Property</a> </div> </div>
2024-02-20 15:13:37 UTC	12345	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 63 6f 6d 70 2f 63 6f 6d 70 74 72 6f 6c 6c 65 72 2d 6f 66 2d 6d 61 72 79 6c 61 6e 64 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 43 6f 6d 70 74 72 6f 6c 6c 65 72 20 42 72 6f 6f 6b 65 20 4c 69 65 72 6d 61 6e 22 3e 43 6f 6d 70 74 72 6f 6c 6c 65 72 20 42 72 6f 6f 6b 65 20 4c 69 65 72 6d 61 6e 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="widget-default clearfix pad-0-25-sm"><a href="/divisions/comp/comptroller-of-maryland.php" class="menu-link-text" title="Comptroller Brooke Lierman">Comptroller Brooke Lierman </a><hr>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49948	151.101.0.143	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:37 UTC	621	OUT	GET /assets/new_embed-2552d8d62d9c60f59b3b11a5d083d1ebd090c72de809fc7c76fb339825302241.css HTTP/1.1 Host: s.swiftypecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.marylandtaxes.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:37 UTC	436	IN	HTTP/1.1 200 OK Connection: close Content-Length: 91625 Content-Type: text/css ETag: "62b9d075-165e9" Expires: Fri, 14 Feb 2025 22:59:23 GMT Cache-Control: max-age=31536000, public Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 20 Feb 2024 15:13:37 GMT Via: 1.1 varnish Age: 404053 X-Served-By: cache-ewr18164-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1708442017.240114,VS0,VE1 Vary: Accept-Encoding
2024-02-20 15:13:37 UTC	16384	IN	Data Raw: 2e 69 72 73 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 69 72 73 2d 6c 69 6e 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 72 73 2d 6c 69 6e 65 2d 6c 65 66 74 2c 2e 69 72 73 2d 6c 69 6e 65 2d 6d 69 64 2c 2e 69 72 73 2d 6c 69 6e 65 2d 72 69 67 68 74 7b 70 6f 73 69 74 69 Data Ascii: .irs{position:relative;display:block;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.irs-line{position:relative;display:block;overflow:hidden;outline:none !important}.irs-line-left,.irs-line-mid,.irs-line-right{positi
2024-02-20 15:13:37 UTC	16384	IN	Data Raw: 65 72 2e 73 74 2d 75 69 2d 6c 65 66 74 5f 73 69 64 65 62 61 72 2c 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 69 6e 74 65 72 66 61 63 65 2d 64 65 73 69 67 6e 65 72 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 6f 76 65 72 6c 61 79 2d 63 6f 6e 74 61 69 6e 65 72 2e 73 74 2d 75 69 2d 72 69 67 68 74 5f 73 69 64 65 62 61 72 7b 77 69 64 74 68 3a 38 34 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 32 30 70 78 7d 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 69 6e 74 65 72 66 61 63 65 2d 64 65 73 69 67 6e 65 72 20 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 73 65 61 72 63 68 2d 73 75 6d 6d 61 72 79 2c 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 69 6e Data Ascii: er.st-ui-left_sidebar,.st-ui-injected-container-interface-designer.st-ui-injected-overlay-container.st-ui-right_sidebar{width:840px;margin-left:-420px}.st-ui-injected-container-interface-designer .st-ui-injected-search-summary,.st-ui-injected-container-in
2024-02-20 15:13:37 UTC	16384	IN	Data Raw: 72 43 72 63 76 48 34 73 72 45 6a 75 4b 66 44 50 5a 45 6b 75 53 77 6e 41 76 67 48 63 34 4c 44 39 56 68 5a 68 52 4b 78 58 25 32 42 66 42 41 77 44 49 59 55 39 31 76 4f 64 66 4b 45 6b 56 68 34 37 7a 48 59 30 50 6e 45 69 42 46 63 37 55 62 41 79 35 6c 50 6d 43 69 31 65 68 70 4d 7a 38 70 45 41 4e 58 79 66 50 66 49 5a 6a 4f 7a 7a 7a 6a 4f 41 65 56 6e 6c 6f 46 49 59 30 57 4e 54 67 75 72 30 4a 4c 33 4b 79 44 42 56 44 43 66 67 77 31 48 4f 74 37 59 66 31 66 6a 68 31 4c 4c 69 74 63 39 71 74 59 52 39 51 63 6f 43 45 61 32 33 41 53 52 4a 4d 62 68 72 41 75 78 67 6b 6e 73 37 56 25 32 42 43 69 58 66 7a 41 46 75 6d 25 32 46 53 5a 57 25 32 46 67 6e 64 49 76 75 75 49 58 6c 4a 77 45 25 32 46 6e 4f 50 33 77 50 6d 4e 46 34 69 39 33 70 25 32 42 72 66 4a 68 76 45 6d 42 77 6e 56 7a Data Ascii: rCrcvH4srEjuKfDPZEkuSwnAvgHc4LD9VhZhRKxX%2BfBAwDIYU91vOdfKEkVh47zHY0PnEiBFc7UbAy5lPmCi1ehpMz8pEANXyfPfIZjOzzzjOAeVnloFIY0WNTgur0JL3KyDBVDCfgw1HOt7Yf1fjh1LLitc9qtYR9QcoCEa23ASRJMbhrAuxgkns7V%2BCiXfzAFum%2FSZW%2FgndIvuuIXlJwE%2FnOP3wPmNF4i93p%2BrfJhvEmBwnVz
2024-02-20 15:13:37 UTC	16384	IN	Data Raw: 78 7d 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 69 6e 74 65 72 66 61 63 65 2d 64 65 73 69 67 6e 65 72 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 6f 6e 2d 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 74 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 70 72 69 6d 61 72 79 5f 63 6f 6e 74 65 6e 74 20 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 73 65 61 72 63 68 2d 73 75 6d 6d 61 72 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 3a 33 70 78 20 30 20 32 30 70 78 7d 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 69 6e 74 65 72 66 61 63 65 2d 64 65 73 69 67 6e 65 72 2e 73 74 2d 75 69 2d 69 6e 6a 65 63 74 65 64 2d 6f 6e 2d 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 2e Data Ascii: x}.st-ui-injected-container-interface-designer.st-ui-injected-on-page-container .st-ui-container-primary_content .st-ui-injected-search-summary{font-size:14px;margin:3px 0 20px}.st-ui-injected-container-interface-designer.st-ui-injected-on-page-container.
2024-02-20 15:13:37 UTC	16384	IN	Data Raw: 6f 4e 67 54 77 34 59 6e 31 6d 36 54 59 57 52 54 58 65 63 5a 47 36 50 63 59 48 75 4b 59 6a 30 6f 39 73 53 77 34 59 6d 31 32 32 51 59 32 64 54 58 75 62 59 78 79 67 32 32 70 7a 70 41 42 6a 6d 4a 77 58 69 68 25 32 42 41 68 54 32 54 54 4e 52 25 32 42 43 64 79 25 32 42 46 4a 49 4f 75 35 6f 70 67 4d 63 68 4b 44 38 55 4c 78 45 61 61 79 61 5a 71 50 77 44 75 58 77 35 4e 41 31 6e 50 70 67 42 55 6f 39 4d 5a 77 7a 6a 64 68 57 47 70 77 51 6b 76 68 4f 54 44 4d 6c 6a 70 6b 43 62 34 32 4b 62 45 43 68 64 34 59 7a 76 6b 6d 44 45 73 4e 54 6d 67 70 50 41 65 47 32 56 4b 48 4c 45 46 74 64 66 72 66 59 32 78 69 65 55 37 51 6a 57 39 5a 78 72 6f 4c 33 74 76 4b 39 4c 25 32 46 48 32 4d 54 79 6e 4b 41 62 33 37 4b 4d 64 52 65 38 74 34 55 79 57 31 44 6d 4a 6e 4d 6e 31 35 33 67 61 72 79 Data Ascii: oNgTw4Yn1m6TYWRTXecZG6PcYHuKYj0o9sSw4Ym122QY2dTXubYxyg22pzpABjmJwXih%2BAhT2TTNR%2BCdy%2BFJIOu5opgMchKD8ULxEaayaZqPwDuXw5NA1nPpgBUo9MZwzjdhWGpwQkvhOTDMljpkCb42KbEChd4YzvkmDEsNTmgpPAeG2VKHLEFtdfrfY2xieU7QjW9ZxroL3tvK9L%2FH2MTynKAb37KMdRe8t4UyW1DmJnMn153gary
2024-02-20 15:13:37 UTC	9705	IN	Data Raw: 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 32 68 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 25 32 46 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 25 32 46 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 25 32 42 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 79 31 6a 4d 44 45 78 49 44 59 32 4c 6a 45 30 4e 54 59 32 4d 53 77 67 4d 6a 41 78 4d 69 38 77 Data Ascii: iZSBJbWFnZVJlYWR5ccllPAAAA2hpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw%2FeHBhY2tldCBiZWdpbj0i77u%2FIiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8%2BIDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAxMi8w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49950	151.101.0.143	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:37 UTC	384	OUT	GET /install/v2/config/3jhvv-yfJCUxQ51kSGbN.json HTTP/1.1 Host: s.swiftypecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:37 UTC	748	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18776 Content-Type: application/json; charset=utf-8 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"e64c23549bd41d3bec2ed70630cd3d8a" Last-Modified: Tue, 17 Dec 2019 18:03:48 GMT Cache-Control: max-age=300, public X-Request-Id: b9ce82b8e33809d26b928958817afbfd Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 20 Feb 2024 15:13:37 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-ewr18159-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1708442017.335934,VS0,VE276 Vary: Accept-Encoding, Origin
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 7b 22 69 6e 73 74 61 6c 6c 22 3a 7b 22 70 72 69 6d 61 72 79 5f 64 6f 63 5f 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 68 6f 6f 6b 73 22 3a 7b 22 71 75 65 72 79 5f 66 69 6c 74 65 72 22 3a 6e 75 6c 6c 2c 22 72 65 73 75 6c 74 5f 63 6c 69 63 6b 65 64 5f 66 69 6c 74 65 72 22 3a 6e 75 6c 6c 7d 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 7b 22 73 65 61 72 63 68 22 3a 22 2f 2f 73 65 61 72 63 68 2d 61 70 69 2e 73 77 69 66 74 79 70 65 2e 63 6f 6d 2f 61 70 69 2f 76 31 2f 70 75 62 6c 69 63 2f 69 6e 73 74 61 6c 6c 73 2f 33 6a 68 76 76 2d 79 66 4a 43 55 78 51 35 31 6b 53 47 62 4e 2f 73 65 61 72 63 68 2e 6a 73 6f 6e 22 2c 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 3a 22 2f 2f 73 65 61 72 63 68 2d 61 70 69 2e 73 77 69 66 74 79 70 65 2e 63 6f 6d 2f 61 70 69 2f 76 31 2f 70 75 62 Data Ascii: {"install":{"primary_doc_type":"page","hooks":{"query_filter":null,"result_clicked_filter":null},"endpoints":{"search":"//search-api.swiftype.com/api/v1/public/installs/3jhvv-yfJCUxQ51kSGbN/search.json","autocomplete":"//search-api.swiftype.com/api/v1/pub
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 36 66 63 66 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 22 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 69 6e 74 6c 22 3a 22 2f 2f 73 2e 73 77 69 66 74 79 70 65 63 64 6e 2e 63 6f 6d 2f 69 6e 73 74 61 6c 6c 2f 76 32 2f 69 6e 74 6c 2f 22 7d 7d 2c 22 75 69 22 3a 7b 22 73 65 61 72 63 68 5f 72 65 73 75 6c 74 73 5f 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 72 79 6c 61 6e 64 74 61 78 65 73 2e 67 6f 76 2f 73 65 61 72 63 68 2f 22 2c 22 73 65 61 72 63 68 22 3a 7b 22 72 65 73 75 6c 74 73 5f 64 69 73 70 6c 61 79 22 3a 7b 22 69 6e 69 74 69 61 6c 6c 79 5f 76 69 73 69 62 6c 65 22 3a 66 Data Ascii: t-style:normal; font-weight:bold; background-color:#f6fcfe !important}","polyfills":{"intl":"//s.swiftypecdn.com/install/v2/intl/"}},"ui":{"search_results_page_url":"https://www.marylandtaxes.gov/search/","search":{"results_display":{"initially_visible":f
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 6a 6f 69 6e 65 64 45 6c 65 6d 65 6e 74 22 3a 5b 22 2e 73 74 2d 73 65 61 72 63 68 2d 61 64 6a 6f 69 6e 65 64 22 5d 2c 22 46 69 65 6c 64 44 65 70 65 6e 64 65 6e 74 56 69 73 69 62 69 6c 69 74 79 22 3a 5b 22 2e 73 74 2d 73 65 61 72 63 68 2d 74 72 61 6e 73 69 65 6e 74 2d 6f 6e 2d 73 65 6c 65 63 74 22 5d 2c 22 46 69 65 6c 64 41 6e 64 51 75 65 72 79 44 65 70 65 6e 64 65 6e 74 56 69 73 69 62 69 6c 69 74 79 22 3a 5b 22 2e 73 74 2d 73 65 61 72 63 68 2d 74 72 61 6e 73 69 65 6e 74 2d 6f 6e 2d 73 65 6c 65 63 74 2d 61 6e 64 2d 71 75 65 72 79 22 5d 2c 22 46 69 65 6c 64 41 6e 64 52 65 73 75 6c 74 73 44 65 70 65 6e 64 65 6e 74 56 69 73 69 62 69 6c 69 74 79 22 3a 5b 22 2e 73 74 2d 73 65 61 72 63 68 2d 74 72 61 6e 73 69 65 6e 74 2d 6f 6e 2d 73 65 6c 65 63 74 2d 61 6e 64 2d Data Ascii: joinedElement":[".st-search-adjoined"],"FieldDependentVisibility":[".st-search-transient-on-select"],"FieldAndQueryDependentVisibility":[".st-search-transient-on-select-and-query"],"FieldAndResultsDependentVisibility":[".st-search-transient-on-select-and-
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 7b 22 6f 75 74 70 75 74 73 22 3a 7b 22 52 65 73 75 6c 74 4c 69 73 74 22 3a 5b 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 73 22 5d 2c 22 52 65 73 75 6c 74 53 75 6d 6d 61 72 79 22 3a 5b 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 73 75 6d 6d 61 72 79 22 5d 2c 22 52 65 73 75 6c 74 50 61 67 69 6e 61 74 69 6f 6e 22 3a 5b 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 70 61 67 69 6e 61 74 69 6f 6e 22 5d 2c 22 43 68 72 6f 6d 65 45 6c 65 6d 65 6e 74 22 3a 5b 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 63 68 72 6f 6d 65 2d 69 6e 70 75 74 22 2c 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 63 68 72 6f 6d 65 2d 6f 75 74 70 75 74 22 2c 22 2e 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 63 68 72 6f 6d Data Ascii: {"outputs":{"ResultList":[".st-autocomplete-results"],"ResultSummary":[".st-autocomplete-summary"],"ResultPagination":[".st-autocomplete-pagination"],"ChromeElement":[".st-autocomplete-chrome-input",".st-autocomplete-chrome-output",".st-autocomplete-chrom
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 74 72 69 67 67 65 72 22 5d 7d 7d 7d 2c 22 74 65 6d 70 6c 61 74 65 73 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 7b 22 69 6e 6a 65 63 74 65 64 5f 63 6f 6e 74 65 6e 74 22 3a 7b 22 6d 61 69 6e 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 64 65 66 61 75 6c 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5c 22 20 64 61 74 61 2d 73 74 2d 74 61 72 67 65 74 2d 65 6c 65 6d 65 6e 74 3d 5c 22 2e 73 74 2d 64 65 66 61 75 6c 74 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 5c 22 20 73 74 79 6c 65 3d 5c 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 5c 22 20 3e 5c 6e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 73 20 73 74 2d 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5c 22 Data Ascii: utocomplete-trigger"]}}},"templates":{"default":{"injected_content":{"main":"<div class=\"st-default-autocomplete\" data-st-target-element=\".st-default-search-input\" style=\"display: none;\" >\n <div class=\"st-autocomplete-results st-ui-autocomplete\"
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 63 6f 6e 74 65 6e 74 20 73 74 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 5c 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 5c 6e 5c 6e 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 6e 6f 2d 72 65 73 75 6c 74 73 20 73 74 2d 73 65 61 72 63 68 2d 73 75 67 67 65 73 74 69 6f 6e 73 5c 22 3e 5c 6e 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 5c 6e 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 5c 6e 5c 6e 20 20 20 20 3c 21 2d 2d 20 46 4f 4f 54 45 52 20 2d 2d 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 6f 6f 74 65 72 5f 62 61 72 20 73 74 2d 70 6f 73 69 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 3e 5c 6e 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 Data Ascii: content st-search-results\"></div>\n \n\n <section class=\"st-ui-no-results st-search-suggestions\">\n </section>\n </div>\n\n\n\n ... FOOTER -->\n <div class=\"st-ui-container-footer_bar st-position-container\">\n <section c
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 61 74 69 6f 6e 2d 6e 75 6d 62 65 72 2d 6c 69 6e 6b 20 73 74 2d 72 65 73 75 6c 74 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 27 20 64 61 74 61 2d 73 74 2d 70 61 67 65 3d 7b 7b 70 61 67 65 5f 6e 75 6d 62 65 72 7d 7d 20 68 72 65 66 3d 27 23 27 3e 7b 7b 20 70 61 67 65 5f 6e 75 6d 62 65 72 20 7d 7d 3c 2f 61 3e 5c 6e 20 20 20 20 7b 25 20 65 6c 73 65 20 25 7d 5c 6e 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 27 73 74 2d 75 69 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 20 73 74 2d 75 69 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 75 6d 62 65 72 2d 6c 69 6e 6b 20 73 74 2d 72 65 73 75 6c 74 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 6e 6b 20 61 63 74 69 76 65 27 20 64 61 74 61 2d 73 74 2d 70 61 67 65 3d 7b 7b 70 61 67 65 5f 6e 75 6d 62 65 72 7d 7d 20 68 72 65 Data Ascii: ation-number-link st-result-pagination-link' data-st-page={{page_number}} href='#'>{{ page_number }}</a>\n {% else %}\n <a class='st-ui-pagination-link st-ui-pagination-number-link st-result-pagination-link active' data-st-page={{page_number}} hre
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 20 3c 69 6e 70 75 74 20 69 64 3d 5c 22 7b 7b 66 61 63 65 74 5f 64 61 74 61 2e 6c 61 62 65 6c 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 65 70 6c 61 63 65 3a 27 20 27 2c 27 5f 27 7d 7d 2d 7b 7b 66 61 63 65 74 5b 30 5d 7d 7d 5c 22 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 63 6c 61 73 73 3d 5c 22 73 74 2d 66 69 6c 74 65 72 2d 65 6c 65 6d 65 6e 74 5c 22 20 6e 61 6d 65 3d 5c 22 7b 7b 66 61 63 65 74 5b 30 5d 7d 7d 5c 22 20 76 61 6c 75 65 3d 5c 22 7b 7b 66 61 63 65 74 5b 30 5d 7d 7d 5c 22 20 64 61 74 61 2d 73 74 2d 66 69 6c 74 65 72 2d 76 61 6c 75 65 73 3d 5c 22 7b 7b 66 61 63 65 74 5b 30 5d 7d 7d 5c 22 3e 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 5c 22 7b 7b 66 61 63 65 74 5f 64 61 74 61 2e 6c 61 62 65 6c 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 Data Ascii: <input id=\"{{facet_data.label \| downcase \| replace:' ','_'}}-{{facet[0]}}\" type=\"checkbox\" class=\"st-filter-element\" name=\"{{facet[0]}}\" value=\"{{facet[0]}}\" data-st-filter-values=\"{{facet[0]}}\"> <label for=\"{{facet_data.label \| downcase \| r
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 65 6c 7d 7d 5f 7b 7b 20 66 61 63 65 74 5f 64 61 74 61 2e 66 72 6f 6d 5f 6c 61 62 65 6c 20 7d 7d 7b 25 20 65 6e 64 63 61 70 74 75 72 65 20 25 7d 5c 6e 7b 25 20 63 61 70 74 75 72 65 20 74 6f 5f 69 64 20 25 7d 7b 7b 20 66 61 63 65 74 5f 64 61 74 61 2e 6c 61 62 65 6c 20 7d 7d 5f 7b 7b 20 66 61 63 65 74 5f 64 61 74 61 2e 74 6f 5f 6c 61 62 65 6c 20 7d 7d 7b 25 20 65 6e 64 63 61 70 74 75 72 65 20 25 7d 5c 6e 5c 6e 5c 6e 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 5c 22 5c 22 3e 5c 6e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 69 6e 70 75 74 5c 22 3e 5c 6e 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 5c 22 7b 7b 20 66 72 6f 6d 5f 69 64 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 65 70 6c 61 63 65 3a 20 27 20 27 2c 20 27 5f 27 20 7c 20 72 65 6d 6f Data Ascii: el}}_{{ facet_data.from_label }}{% endcapture %}\n{% capture to_id %}{{ facet_data.label }}_{{ facet_data.to_label }}{% endcapture %}\n\n\n<form action=\"\">\n <div class=\"st-ui-input\">\n <label for=\"{{ from_id \| downcase \| replace: ' ', '_' \| remo
2024-02-20 15:13:37 UTC	1379	IN	Data Raw: 69 64 3d 5c 22 7b 7b 20 66 72 6f 6d 5f 69 64 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 65 70 6c 61 63 65 3a 20 27 20 27 2c 20 27 5f 27 20 7c 20 72 65 6d 6f 76 65 3a 20 27 3a 27 20 7d 7d 5c 22 2f 3e 5c 6e 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 69 6e 70 75 74 5c 22 3e 5c 6e 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 5c 22 7b 7b 20 74 6f 5f 69 64 20 7c 20 64 6f 77 6e 63 61 73 65 20 7c 20 72 65 70 6c 61 63 65 3a 20 27 20 27 2c 20 27 5f 27 20 7c 20 72 65 6d 6f 76 65 3a 20 27 3a 27 20 7d 7d 5c 22 20 63 6c 61 73 73 3d 5c 22 73 74 2d 75 69 2d 6c 61 62 65 6c 5c 22 3e 7b 7b 20 66 61 63 65 74 5f 64 61 74 61 2e 74 6f 5f 6c 61 62 65 6c 20 7d 7d 3c 2f 6c 61 62 65 6c 3e 5c 6e 20 20 20 20 3c 69 6e 70 75 74 20 63 Data Ascii: id=\"{{ from_id \| downcase \| replace: ' ', '_' \| remove: ':' }}\"/>\n </div>\n <div class=\"st-ui-input\">\n <label for=\"{{ to_id \| downcase \| replace: ' ', '_' \| remove: ':' }}\" class=\"st-ui-label\">{{ facet_data.to_label }}</label>\n <input c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49951	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:37 UTC	1342	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fnew-user-signup%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MAsIsXAzMgj3cgnxNQwwM3M30w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAOuSZ7k!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=1379327624&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:37 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:37 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:37 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49952	169.48.138.204	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:37 UTC	684	OUT	GET /cc.js?engine_key=XFBwKZR-z-7xV9bsZPzb&url=https%3A%2F%2Fwww.marylandtaxes.gov%2FMDTaxConnect%2Findex.php HTTP/1.1 Host: cc.swiftype.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.marylandtaxes.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:38 UTC	231	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:38 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Tue, 20 Feb 2024 15:13:37 GMT Cache-Control: no-cache
2024-02-20 15:13:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49953	169.48.138.204	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:38 UTC	443	OUT	GET /cc.js?engine_key=XFBwKZR-z-7xV9bsZPzb&url=https%3A%2F%2Fwww.marylandtaxes.gov%2FMDTaxConnect%2Findex.php HTTP/1.1 Host: cc.swiftype.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-20 15:13:39 UTC	231	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:38 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Tue, 20 Feb 2024 15:13:37 GMT Cache-Control: no-cache
2024-02-20 15:13:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49954	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:40 UTC	1149	OUT	GET /rptp/portal/business/register-existing-businesses/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:40 UTC	861	IN	HTTP/1.1 302 Found Date: Tue, 20 Feb 2024 15:13:40 GMT Content-Length: 0 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Location: https://mdtaxconnect.gov/rptp/portal/business/register-existing-businesses/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-221240677" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49955	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:40 UTC	1334	OUT	GET /rptp/portal/business/register-existing-businesses/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; rxvt=1708443806250\|1708441968947; dtPC=-2$242004906_473h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:41 UTC	1427	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: X-TOKEN--rptp-portal-business-register-existing-businesses=CF78C376D2900982D7A4B2CDFA81C88F70D8C82EAAC8180F8FFDD1DD62B2B3E9E9B66D61C3E98C88246DF178411252D20AD1; Path=/rptp/portal/business/register-existing-businesses; HttpOnly; Secure; SameSite=Strict X-TOKEN: CF78C376D2900982D7A4B2CDFA81C88F70D8C82EAAC8180F8FFDD1DD62B2B3E9E9B66D61C3E98C88246DF178411252D20AD1 X-Frame-Options: SAMEORIGIN Content-Location: /rptp/portal/business/register-existing-businesses/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Pragma: no-cache Vary: Cookie,User-Agent Server-Timing: dtSInfo;desc="0", dtRpid;desc="345525484" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en
2024-02-20 15:13:41 UTC	14957	IN	Data Raw: 66 64 63 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 3c 21 2d 2d 20 72 65 6c 3d 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 20 69 6e 64 69 63 61 74 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 Data Ascii: fdcf<!DOCTYPE html><html lang="en" ><head><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=Edge">... rel=dynamic-content indicates an element
2024-02-20 15:13:41 UTC	16384	IN	Data Raw: 78 6d 6c 68 74 74 70 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 34 20 26 26 20 78 6d 6c 68 74 74 70 2e 73 74 61 74 75 73 3d 3d 32 30 30 29 20 7b 0d 0a 09 09 20 20 20 20 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 64 69 76 49 44 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 09 20 20 20 20 7d 0d 0a 09 09 7d 3b 0d 0a 09 09 78 6d 6c 68 74 74 70 2e 6f 70 65 6e 28 22 47 45 54 22 2c 22 65 78 74 65 6e 64 53 65 73 73 69 6f 6e 2e 6a 73 70 22 2c 66 61 6c 73 65 29 3b 0d 0a 09 09 78 6d 6c 68 74 74 70 2e 73 65 6e 64 28 29 3b 0d 0a 09 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 73 69 74 65 57 69 64 65 48 65 6c 70 4c 69 6e 6b 22 20 Data Ascii: xmlhttp.readyState==4 && xmlhttp.status==200) { document.getElementById(divID).style.display = "none"; }};xmlhttp.open("GET","extendSession.jsp",false);xmlhttp.send();}</script>...<a href="#void" id="siteWideHelpLink"
2024-02-20 15:13:41 UTC	16384	IN	Data Raw: 65 71 75 65 73 74 20 43 68 61 74 0d 0a 09 09 3c 2f 61 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 34 22 3e 0d 0a 09 09 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 63 61 6e 63 65 6c 43 68 61 74 42 74 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 64 61 6e 67 65 72 22 20 74 61 62 69 6e 64 65 78 3d 22 34 22 3e 0d 0a 09 09 09 43 61 6e 63 65 6c 0d 0a 09 09 3c 2f 61 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 62 72 20 2f 3e 0d 0a 3c 70 3e 4c 69 76 65 20 43 68 61 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 4d 6f 6e 64 61 79 20 74 68 72 6f 75 67 68 20 46 72 69 64 61 79 20 66 72 6f 6d 20 38 20 41 4d 20 74 6f 20 35 20 50 4d 20 43 53 54 20 65 78 63 6c 75 64 69 6e 67 20 68 Data Ascii: equest Chat</a></div><div class="col-sm-4"><a href="#void" id="cancelChatBtn" class="btn btn-danger" tabindex="4">Cancel</a></div></div><br /><p>Live Chat is available Monday through Friday from 8 AM to 5 PM CST excluding h
2024-02-20 15:13:41 UTC	16384	IN	Data Raw: 74 20 74 68 65 20 6e 61 76 20 6c 69 6e 6b 73 2c 20 66 6f 72 6d 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 65 6e 74 20 66 6f 72 20 74 6f 67 67 6c 69 6e 67 20 2d 2d 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 6c 61 70 73 65 20 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 22 20 69 64 3d 22 74 68 65 6d 65 2d 74 6f 70 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 2d 31 22 3e 0d 0a 09 09 09 09 09 09 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 20 6e 61 76 62 61 72 2d 6e 61 76 22 3e 0d 0a 09 09 09 09 09 09 09 0d 0a 09 09 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 22 3e 3c 61 20 6f 6e 63 6c 69 63 6b 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 72 65 74 75 72 6e 20 63 68 65 63 6b 44 69 72 74 79 46 6c 61 67 28 29 3b 22 20 68 72 65 66 3d 27 2f Data Ascii: t the nav links, forms, and other content for toggling --><div class="collapse navbar-collapse" id="theme-topnavbar-collapse-1"><ul class="nav navbar-nav"><li class=""><a onclick="javascript:return checkDirtyFlag();" href='/
2024-02-20 15:13:41 UTC	879	IN	Data Raw: 64 3d 22 77 70 74 68 65 6d 65 43 6f 6d 70 6c 65 6d 65 6e 74 61 72 79 43 6f 6e 74 65 6e 74 54 65 78 74 22 20 3e 3c 2f 73 70 61 6e 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 09 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 6c 65 74 20 75 72 6c 53 74 72 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0d 0a 09 09 69 66 20 28 75 72 6c 53 74 72 2e 69 6e 64 65 78 4f 66 28 22 2f 70 6f 72 74 61 6c 2f 68 6f 6d 65 2f 22 29 20 3c 20 30 29 20 7b 0d 0a 09 09 09 24 28 20 22 2e 6e 61 76 2d 70 72 6f 66 69 6c 65 2d 69 74 65 6d 22 20 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 20 22 62 6c 6f 63 6b 22 29 3b 0d 0a 09 09 09 24 28 20 22 2e 6e 61 76 2d 6c Data Ascii: d="wpthemeComplementaryContentText" ></span></div></body><script> $(document).ready(function () {let urlStr = location.href;if (urlStr.indexOf("/portal/home/") < 0) {$( ".nav-profile-item" ).css("display", "block");$( ".nav-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49956	142.250.72.110	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:41 UTC	858	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:41 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:13:41 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:41 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-02-20 15:13:41 UTC	1252	IN	Data Raw: 66 62 2c 67 62 2c 68 62 2c 69 62 2c 77 2c 6a 62 2c 6d 62 2c 6f 62 2c 73 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b Data Ascii: fb,gb,hb,ib,w,jb,mb,ob,sb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;
2024-02-20 15:13:41 UTC	1252	IN	Data Raw: 28 30 29 2b 66 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b Data Ascii: (0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};
2024-02-20 15:13:41 UTC	1252	IN	Data Raw: 53 63 72 69 70 74 28 61 29 3a 61 3b 62 3d 6e 65 77 20 53 61 3b 62 2e 6e 67 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 61 29 72 65 74 75 72 6e 20 61 2e 6e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 41 22 29 3b 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 57 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 59 61 2e 61 70 70 6c 79 28 31 2c Data Ascii: Script(a):a;b=new Sa;b.ng=a;return b};_.Ua=function(a){if(a instanceof Sa)return a.ng;throw Error("A");};Va=function(){};Xa=function(a){return new _.Wa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.$a=function(a){var b=_.Ya.apply(1,
2024-02-20 15:13:41 UTC	1252	IN	Data Raw: 28 22 61 22 29 3b 7d 3b 69 62 3d 68 62 28 74 68 69 73 29 3b 0a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 69 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 67 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ("a");};ib=hb(this);w=function(a,b){if(b)a:{var c=ib;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&gb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){
2024-02-20 15:13:41 UTC	1252	IN	Data Raw: 61 29 29 3b 7d 3b 5f 2e 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 78 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6d 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: a));};_.lb=function(a){if(!(a instanceof Array)){a=_.x(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};mb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.nb=function(){functi
2024-02-20 15:13:41 UTC	1252	IN	Data Raw: 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b 7d 7d 29 3b 77 28 22 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6e 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f Data Ascii: )b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{}});w("Reflect.construct",function(){return _.nb});w("Reflect.setPrototypeOf",function(a){return a?a:sb?function(b,c){try{return sb(b,c),!0}catch(d){return!1}}:null});w("Promise",functio
2024-02-20 15:13:41 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 62 61 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 Data Ascii: function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}"function"==typeof h?this.ba(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`
2024-02-20 15:13:42 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 28 71 2c 70 29 7b 6d 3d 71 3b 6e 3d 70 7d 29 3b 74 68 69 73 2e 4c 63 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d Data Ascii: nction(q,p){m=q;n=p});this.Lc(l(g,m),l(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Lc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null=
2024-02-20 15:13:42 UTC	1252	IN	Data Raw: 3d 3d 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 75 62 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 67 62 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b Data Ascii: ===m}function d(l){if(!ub(l,f)){var m=new b;gb(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49959	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:42 UTC	1280	OUT	GET /rptp/PA_Reg/js/registerExternalUser.js?modifiedDate=2024-01-30T10:09 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/rptp/portal/business/register-existing-businesses/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442006.0.0.0; dtPC=-2$242020859_794h1vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0; rxvt=1708443820867\|1708441968947
2024-02-20 15:13:42 UTC	648	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:42 GMT Content-Type: application/javascript Content-Length: 13277 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Last-Modified: Tue, 30 Jan 2024 07:12:06 GMT Server-Timing: dtSInfo;desc="1" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US
2024-02-20 15:13:42 UTC	13277	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6f 75 6e 74 72 79 43 6f 64 65 50 6c 61 63 65 48 6f 6c 64 65 72 28 29 7b 76 61 72 20 62 3d 70 68 6f 6e 65 50 6c 61 63 65 48 6f 6c 64 65 72 28 24 28 22 23 63 6f 75 6e 74 72 79 43 6f 64 65 22 29 2e 76 61 6c 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 24 28 22 23 64 61 79 50 68 6f 6e 65 22 29 2e 61 74 74 72 28 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 62 69 6c 65 43 6f 75 6e 74 72 79 43 6f 64 65 50 6c 61 63 65 48 6f 6c 64 65 72 28 29 7b 76 61 72 20 62 3d 70 68 6f 6e 65 50 6c 61 63 65 48 6f 6c 64 65 72 28 24 28 22 23 6d 6f 62 69 6c 65 43 6f 75 6e 74 72 79 43 6f 64 65 22 29 2e 76 61 6c 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 24 28 22 23 6d 6f 62 69 6c 65 50 68 6f 6e Data Ascii: function countryCodePlaceHolder(){var b=phonePlaceHolder($("#countryCode").val().toLowerCase());$("#dayPhone").attr("placeholder",b)}function mobileCountryCodePlaceHolder(){var b=phonePlaceHolder($("#mobileCountryCode").val().toLowerCase());$("#mobilePhon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49960	142.251.40.100	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:42 UTC	851	OUT	GET /recaptcha/api.js?onload=loadCaptcha&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:42 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 20 Feb 2024 15:13:42 GMT Date: Tue, 20 Feb 2024 15:13:42 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:42 UTC	724	IN	Data Raw: 34 66 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4fe/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-02-20 15:13:42 UTC	561	IN	Data Raw: 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 79 69 4e 57 33 52 39 6a 6b 79 4c 56 50 35 2d 45 45 5a 4c 44 7a 55 74 41 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f Data Ascii: SI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js';po.cro
2024-02-20 15:13:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49965	142.251.35.164	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:44 UTC	1137	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO&co=aHR0cHM6Ly9tZHRheGNvbm5lY3QuZ292OjQ0Mw..&hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&size=normal&cb=wlqylckyd8tb HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:44 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:13:44 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-7u2Frg6bLWOPlQPtsLN9ug' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:44 UTC	361	IN	Data Raw: 32 61 64 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ad4<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-02-20 15:13:44 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-02-20 15:13:44 UTC	1252	IN	Data Raw: 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 Data Ascii: 9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
2024-02-20 15:13:44 UTC	1252	IN	Data Raw: 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a Data Ascii: 0-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
2024-02-20 15:13:44 UTC	1252	IN	Data Raw: 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA,
2024-02-20 15:13:44 UTC	1252	IN	Data Raw: 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b Data Ascii: l(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal;
2024-02-20 15:13:44 UTC	1252	IN	Data Raw: 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 79 69 4e 57 33 52 39 6a 6b 79 4c 56 50 35 2d 45 45 5a 4c 44 7a 55 74 41 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 37 75 32 46 72 67 36 62 4c 57 4f 50 6c 51 50 74 73 4c 4e 39 75 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 Data Ascii: U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/styles__ltr.css"><script nonce="7u2Frg6bLWOPlQPtsLN9ug" type="text/javascript">window['__recaptcha_api'] = 'http
2024-02-20 15:13:44 UTC	1252	IN	Data Raw: 45 36 74 45 53 44 58 57 61 2d 5a 72 46 61 77 34 7a 51 6d 47 75 69 63 76 67 64 41 44 50 51 74 5f 39 6a 78 50 31 4a 55 64 30 54 65 73 6a 59 4d 72 53 67 54 6e 58 69 74 4f 5a 78 72 30 5a 4e 65 52 34 32 52 6e 4c 4f 71 67 65 59 30 48 57 72 45 53 75 53 6e 34 79 77 5a 4d 71 41 5a 62 61 57 63 6c 46 50 37 6c 39 73 6a 6c 59 4d 39 32 71 6a 76 71 56 73 44 32 43 6e 45 78 71 6a 6c 68 44 4c 54 55 55 4a 33 5a 63 74 4f 51 64 68 32 33 56 47 36 41 2d 66 4b 54 48 63 4e 45 4f 73 37 6d 4c 6b 31 71 5a 75 2d 76 54 4a 5f 6f 68 49 31 41 62 66 65 77 53 62 75 63 76 4a 4a 4e 31 6f 78 49 62 5f 4b 6d 76 54 69 31 52 64 56 34 41 6c 6c 5a 62 36 36 66 54 6d 39 50 4f 49 37 66 31 34 51 4d 59 4c 5f 48 4b 5f 66 59 78 66 43 39 2d 6b 6f 61 49 31 4a 49 65 30 44 2d 74 32 58 61 63 42 68 6a 77 5a 6c Data Ascii: E6tESDXWa-ZrFaw4zQmGuicvgdADPQt_9jxP1JUd0TesjYMrSgTnXitOZxr0ZNeR42RnLOqgeY0HWrESuSn4ywZMqAZbaWclFP7l9sjlYM92qjvqVsD2CnExqjlhDLTUUJ3ZctOQdh23VG6A-fKTHcNEOs7mLk1qZu-vTJ_ohI1AbfewSbucvJJN1oxIb_KmvTi1RdV4AllZb66fTm9POI7f14QMYL_HK_fYxfC9-koaI1JIe0D-t2XacBhjwZl
2024-02-20 15:13:44 UTC	1252	IN	Data Raw: 32 65 64 2d 54 76 4b 37 41 37 51 79 71 5a 6d 4d 34 73 38 52 4d 41 61 38 2d 53 4c 41 6a 67 65 7a 5a 43 52 34 63 66 4b 4a 37 74 51 31 73 38 41 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 37 75 32 46 72 67 36 62 4c 57 4f 50 6c 51 50 74 73 4c 4e 39 75 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 36 65 58 5a 4a 55 6e 68 35 63 45 70 77 4f 56 68 7a 57 46 41 33 59 6b 5a 79 56 55 4a 6b 4f 45 70 5a 58 33 70 44 55 33 55 79 Data Ascii: 2ed-TvK7A7QyqZmM4s8RMAa8-SLAjgezZCR4cfKJ7tQ1s8A"><script type="text/javascript" nonce="7u2Frg6bLWOPlQPtsLN9ug"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy96eXZJUnh5cEpwOVhzWFA3YkZyVUJkOEpZX3pDU3Uy
2024-02-20 15:13:44 UTC	595	IN	Data Raw: 30 51 6b 68 58 61 32 78 4a 54 58 56 58 62 55 39 47 53 46 68 6c 62 6b 78 6c 64 6d 4e 6e 61 57 39 57 4d 6b 78 50 54 6c 56 4f 57 53 39 6e 59 32 6f 78 54 32 74 54 61 55 74 76 51 6d 74 57 61 33 6c 58 56 31 41 34 4e 45 4e 6b 56 6c 46 6e 61 32 56 52 4f 47 39 33 59 57 4a 61 57 45 52 53 65 6b 70 79 55 6c 63 77 54 57 64 30 5a 55 6c 77 63 45 4a 52 56 6b 30 33 61 6b 4e 46 4d 47 35 4c 61 44 68 32 65 56 63 79 54 57 6c 55 55 6d 56 48 62 6c 52 49 59 30 64 47 52 54 5a 57 64 31 4e 52 65 6e 56 77 62 44 6c 78 56 54 4e 50 55 6c 42 34 65 47 46 34 4e 45 56 68 61 6a 68 31 65 6a 6b 78 65 55 68 47 4d 57 52 46 55 53 39 79 51 31 4e 6a 4d 57 45 78 5a 31 4a 72 52 31 70 52 55 47 78 30 63 47 74 43 55 56 52 72 51 57 55 30 64 6a 4e 35 4e 6e 45 7a 4d 7a 63 79 62 48 5a 6b 4d 30 74 79 51 6e Data Ascii: 0QkhXa2xJTXVXbU9GSFhlbkxldmNnaW9WMkxPTlVOWS9nY2oxT2tTaUtvQmtWa3lXV1A4NENkVlFna2VROG93YWJaWERSekpyUlcwTWd0ZUlwcEJRVk03akNFMG5LaDh2eVcyTWlUUmVHblRIY0dGRTZWd1NRenVwbDlxVTNPUlB4eGF4NEVhajh1ejkxeUhGMWRFUS9yQ1NjMWExZ1JrR1pRUGx0cGtCUVRrQWU0djN5NnEzMzcybHZkM0tyQn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49971	142.251.35.164	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:46 UTC	1037	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO&co=aHR0cHM6Ly9tZHRheGNvbm5lY3QuZ292OjQ0Mw..&hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&size=normal&cb=wlqylckyd8tb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:46 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Tue, 20 Feb 2024 15:13:46 GMT Date: Tue, 20 Feb 2024 15:13:46 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:46 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 79 69 4e 57 33 52 39 6a 6b 79 4c 56 50 35 2d 45 45 5a 4c 44 7a 55 74 41 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js');
2024-02-20 15:13:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49972	142.251.35.164	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:46 UTC	1025	OUT	GET /js/bg/zyvIRxypJp9XsXP7bFrUBd8JY_zCSu2ya-bkldlMTk8.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO&co=aHR0cHM6Ly9tZHRheGNvbm5lY3QuZ292OjQ0Mw..&hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&size=normal&cb=wlqylckyd8tb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:46 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 17265 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 18 Feb 2024 03:56:51 GMT Expires: Mon, 17 Feb 2025 03:56:51 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 05 Feb 2024 17:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 213415 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-20 15:13:46 UTC	440	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 7d 2c 58 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 7a 29 7b 69 66 28 7a 3d 28 64 3d 58 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 64 7c 7c 21 64 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 7a 3b 74 72 79 7b 7a 3d 64 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var B=function(d){return d},X=this\|\|self,J=function(d,z){if(z=(d=X.trustedTypes,null),!d\|\|!d.createPolicy)return z;try{z=d.createPolicy("bg",{createHTML:
2024-02-20 15:13:46 UTC	1252	IN	Data Raw: 63 72 65 61 74 65 53 63 72 69 70 74 28 49 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 49 29 7b 72 65 74 75 72 6e 22 22 2b 49 7d 7d 28 58 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 7a 4e 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 7a 2c 58 2c 49 2c 56 2c 61 29 7b 66 6f 72 28 56 3d 28 49 3d 28 58 3d 28 7a 3d 6d 28 28 61 3d 64 5b 64 61 5d 7c 7c 7b 7d 2c 64 29 29 2c 61 2e 77 6b 3d 6d 28 64 29 2c 61 2e 4e 3d 5b 5d 2c 64 2e 54 3d 3d 64 3f 28 62 28 64 29 7c 30 29 2d 31 3a 31 29 2c 6d 28 64 29 29 2c 30 29 3b 56 3c 58 3b 56 2b 2b 29 61 2e 4e 2e 70 75 73 68 28 6d 28 64 29 29 3b 66 6f 72 28 61 2e 4a 65 3d 66 28 64 2c 7a 29 2c 61 2e 65 73 3d 66 28 64 2c Data Ascii: createScript(I)}:function(I){return""+I}}(X)(Array(7824*Math.random()\|0).join("\n")+'(function(){var zN=function(d,z,X,I,V,a){for(V=(I=(X=(z=m((a=d[da]\|\|{},d)),a.wk=m(d),a.N=[],d.T==d?(b(d)\|0)-1:1),m(d)),0);V<X;V++)a.N.push(m(d));for(a.Je=f(d,z),a.es=f(d,
2024-02-20 15:13:46 UTC	1252	IN	Data Raw: 7b 74 28 61 2c 64 29 2c 58 3d 64 2e 4c 7d 49 28 58 29 7d 65 6c 73 65 20 69 66 28 56 3d 3d 73 4b 29 7a 5b 33 5d 26 26 28 64 2e 58 3d 74 72 75 65 29 2c 7a 5b 34 5d 26 26 28 64 2e 55 3d 74 72 75 65 29 2c 64 2e 6f 28 7a 29 3b 65 6c 73 65 20 69 66 28 56 3d 3d 63 29 64 2e 58 3d 74 72 75 65 2c 64 2e 6f 28 7a 29 3b 65 6c 73 65 20 69 66 28 56 3d 3d 4a 53 29 7b 64 2e 58 3d 74 72 75 65 3b 74 72 79 7b 66 6f 72 28 58 3d 30 3b 58 3c 64 2e 75 2e 6c 65 6e 67 74 68 3b 58 2b 2b 29 74 72 79 7b 49 3d 64 2e 75 5b 58 5d 2c 49 5b 30 5d 5b 49 5b 31 5d 5d 28 49 5b 32 5d 29 7d 63 61 74 63 68 28 61 29 7b 7d 7d 63 61 74 63 68 28 61 29 7b 7d 28 30 2c 7a 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 61 2c 6c 29 7b 64 2e 56 28 61 2c 74 72 75 65 2c 6c 29 7d 2c 28 64 2e 75 3d 5b 5d 2c 66 75 Data Ascii: {t(a,d),X=d.L}I(X)}else if(V==sK)z[3]&&(d.X=true),z[4]&&(d.U=true),d.o(z);else if(V==c)d.X=true,d.o(z);else if(V==JS){d.X=true;try{for(X=0;X<d.u.length;X++)try{I=d.u[X],I[0][I[1]](I[2])}catch(a){}}catch(a){}(0,z[1])(function(a,l){d.V(a,true,l)},(d.u=[],fu
2024-02-20 15:13:46 UTC	1252	IN	Data Raw: 6f 6e 28 49 29 7b 7a 2e 54 6f 28 49 29 2c 64 2e 54 6f 28 49 29 7d 2c 28 64 3d 28 7a 3d 6e 65 77 20 28 58 2e 70 72 6f 74 6f 74 79 70 65 2e 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 30 3d 3d 3d 74 68 69 73 2e 6e 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 5b 28 74 68 69 73 2e 57 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 49 2c 56 29 7b 72 65 74 75 72 6e 20 49 2d 56 7d 29 2c 74 68 69 73 2e 6e 29 2c 74 68 69 73 2e 57 5b 74 68 69 73 2e 57 2e 6c 65 6e 67 74 68 3e 3e 31 5d 5d 7d 2c 58 2e 70 72 6f 74 6f 74 79 70 65 2e 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 56 29 7b 28 74 68 69 73 2e 6e 2b 2b 2c 35 30 29 3e 74 68 69 73 2e 57 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 57 2e 70 75 73 68 28 49 29 3a 28 56 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d Data Ascii: on(I){z.To(I),d.To(I)},(d=(z=new (X.prototype.rk=function(){if(0===this.n)return[0,0];return[(this.W.sort(function(I,V){return I-V}),this.n),this.W[this.W.length>>1]]},X.prototype.To=function(I,V){(this.n++,50)>this.W.length?this.W.push(I):(V=Math.floor(M
2024-02-20 15:13:46 UTC	1252	IN	Data Raw: 28 49 3d 76 6f 69 64 20 30 2c 7a 2e 46 29 56 3d 5a 72 28 7a 2e 46 2c 7a 29 3b 65 6c 73 65 7b 69 66 28 58 3d 66 28 7a 2c 34 32 34 29 2c 58 3e 3d 61 29 62 72 65 61 6b 3b 56 3d 66 28 7a 2c 28 49 3d 6d 28 28 55 28 32 31 31 2c 7a 2c 58 29 2c 7a 29 29 2c 49 29 29 7d 56 26 26 56 5b 78 5d 26 32 30 34 38 3f 56 28 7a 2c 64 29 3a 53 28 7a 2c 5b 6e 2c 32 31 2c 49 5d 2c 30 29 2c 51 28 7a 2c 64 2c 66 61 6c 73 65 2c 66 61 6c 73 65 29 7d 63 61 74 63 68 28 6c 29 7b 66 28 7a 2c 34 37 30 29 3f 53 28 7a 2c 6c 2c 32 32 29 3a 55 28 34 37 30 2c 7a 2c 6c 29 7d 69 66 28 21 64 29 7b 69 66 28 7a 2e 58 42 29 7b 45 4b 28 32 34 36 35 35 33 30 30 37 32 37 34 2c 28 7a 2e 42 2d 2d 2c 7a 29 29 3b 72 65 74 75 72 6e 7d 53 28 7a 2c 5b 6e 2c 33 33 5d 2c 30 29 7d 7d 63 61 74 63 68 28 6c 29 7b Data Ascii: (I=void 0,z.F)V=Zr(z.F,z);else{if(X=f(z,424),X>=a)break;V=f(z,(I=m((U(211,z,X),z)),I))}V&&V[x]&2048?V(z,d):S(z,[n,21,I],0),Q(z,d,false,false)}catch(l){f(z,470)?S(z,l,22):U(470,z,l)}if(!d){if(z.XB){EK(246553007274,(z.B--,z));return}S(z,[n,33],0)}}catch(l){
2024-02-20 15:13:46 UTC	1252	IN	Data Raw: 28 64 2c 7a 29 7b 72 65 74 75 72 6e 20 7a 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 3c 64 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 64 5b 7a 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 7a 2c 58 2c 49 2c 56 2c 61 29 7b 69 66 28 21 64 2e 46 42 26 26 28 49 3d 76 6f 69 64 20 30 2c 7a 26 26 7a 5b 30 5d 3d 3d 3d 6e 26 26 28 49 3d 7a 5b 32 5d 2c 58 3d 7a 5b 31 5d 2c 7a 3d 76 6f 69 64 20 30 29 2c 56 3d 66 28 64 2c 34 34 38 29 2c 30 3d 3d 56 2e 6c 65 6e 67 74 68 26 26 28 61 3d 66 28 64 2c 32 31 31 29 3e 3e 33 2c 56 2e 70 75 73 68 28 58 2c 61 3e 3e 38 26 32 35 35 2c 61 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 49 26 26 56 2e 70 75 73 68 28 49 26 32 35 35 Data Ascii: (d,z){return z=0,function(){return z<d.length?{done:false,value:d[z++]}:{done:true}}},S=function(d,z,X,I,V,a){if(!d.FB&&(I=void 0,z&&z[0]===n&&(I=z[2],X=z[1],z=void 0),V=f(d,448),0==V.length&&(a=f(d,211)>>3,V.push(X,a>>8&255,a&255),void 0!=I&&V.push(I&255
2024-02-20 15:13:46 UTC	1252	IN	Data Raw: 3d 30 2c 64 29 2c 49 29 3b 30 3c 47 3b 29 68 3d 56 25 38 2c 43 3d 38 2d 28 68 7c 30 29 2c 48 3d 56 3e 3e 33 2c 61 3d 7a 2e 48 5b 48 5d 2c 43 3d 43 3c 47 3f 43 3a 47 2c 58 26 26 28 4e 3d 7a 2c 42 3d 56 2c 4e 2e 44 21 3d 42 3e 3e 36 26 26 28 4e 2e 44 3d 42 3e 3e 36 2c 42 3d 66 28 4e 2c 33 38 39 29 2c 4e 2e 4c 65 3d 78 76 28 4e 2e 68 2c 5b 30 2c 30 2c 42 5b 31 5d 2c 42 5b 32 5d 5d 2c 4e 2e 44 29 29 2c 61 5e 3d 7a 2e 4c 65 5b 48 26 6c 5d 29 2c 4a 7c 3d 28 61 3e 3e 38 2d 28 68 7c 30 29 2d 28 43 7c 30 29 26 28 31 3c 3c 43 29 2d 31 29 3c 3c 28 47 7c 30 29 2d 28 43 7c 30 29 2c 47 2d 3d 43 2c 56 2b 3d 43 3b 72 65 74 75 72 6e 20 55 28 34 32 34 2c 28 58 3d 4a 2c 7a 29 2c 28 49 7c 30 29 2b 28 64 7c 30 29 29 2c 58 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 7a 2c 58 Data Ascii: =0,d),I);0<G;)h=V%8,C=8-(h\|0),H=V>>3,a=z.H[H],C=C<G?C:G,X&&(N=z,B=V,N.D!=B>>6&&(N.D=B>>6,B=f(N,389),N.Le=xv(N.h,[0,0,B[1],B[2]],N.D)),a^=z.Le[H&l]),J\|=(a>>8-(h\|0)-(C\|0)&(1<<C)-1)<<(G\|0)-(C\|0),G-=C,V+=C;return U(424,(X=J,z),(I\|0)+(d\|0)),X},q=function(d,z,X
2024-02-20 15:13:46 UTC	1252	IN	Data Raw: 29 7b 69 66 28 64 2e 46 29 72 65 74 75 72 6e 20 5a 72 28 64 2e 4f 2c 64 29 3b 72 65 74 75 72 6e 28 7a 3d 75 28 38 2c 64 2c 74 72 75 65 29 2c 7a 26 31 32 38 29 26 26 28 7a 5e 3d 31 32 38 2c 64 3d 75 28 32 2c 64 2c 74 72 75 65 29 2c 7a 3d 28 7a 3c 3c 32 29 2b 28 64 7c 30 29 29 2c 7a 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 7a 2c 58 2c 49 2c 56 29 7b 56 3d 74 68 69 73 3b 74 72 79 7b 52 73 28 49 2c 64 2c 7a 2c 74 68 69 73 2c 58 29 7d 63 61 74 63 68 28 61 29 7b 74 28 61 2c 74 68 69 73 29 2c 49 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 6c 28 56 2e 4c 29 7d 29 7d 7d 2c 6b 76 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 7a 29 7b 72 65 74 75 72 6e 20 64 28 66 75 6e 63 74 69 6f 6e 28 58 29 7b 58 28 7a 29 7d 29 2c 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a Data Ascii: ){if(d.F)return Zr(d.O,d);return(z=u(8,d,true),z&128)&&(z^=128,d=u(2,d,true),z=(z<<2)+(d\|0)),z},w=function(d,z,X,I,V){V=this;try{Rs(I,d,z,this,X)}catch(a){t(a,this),I(function(l){l(V.L)})}},kv=function(d,z){return d(function(X){X(z)}),[function(){return z
2024-02-20 15:13:46 UTC	1252	IN	Data Raw: 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 29 3b 4b 28 74 72 75 65 2c 28 46 28 5b 28 46 28 5b 28 46 28 28 59 28 66 75 6e 63 74 69 6f 6e 28 42 29 7b 55 4b 28 34 2c 42 29 7d 2c 34 31 35 2c 28 28 59 28 66 75 6e 63 74 69 6f 6e 28 42 2c 4a 2c 48 2c 43 2c 47 2c 4e 2c 68 2c 41 2c 4d 2c 4c 2c 72 2c 45 29 7b 66 75 6e 63 74 69 6f 6e 20 52 28 70 2c 57 29 7b 66 6f 72 28 3b 4e 3c 70 3b 29 72 7c 3d 62 28 42 29 3c 3c 4e 2c 4e 2b 3d 38 3b 72 65 74 75 72 6e 20 57 3d 72 26 28 28 4e 2d 3d 70 2c 31 29 3c 3c 70 29 2d 31 2c 72 3e 3e 3d 70 2c 57 7d 66 6f 72 28 4c 3d 28 48 3d 28 72 3d 28 68 3d 6d 28 42 29 2c 4e 3d 30 29 2c 47 3d 28 52 28 33 29 7c 30 29 2b 31 2c 52 28 35 29 29 2c 5b 5d 29 2c 4a 3d 45 3d 30 3b 45 3c 48 3b 45 2b 2b 29 4d 3d 52 28 31 29 2c 4c 2e 70 75 73 68 28 4d 29 Data Ascii: fromCharCode(a);K(true,(F([(F([(F((Y(function(B){UK(4,B)},415,((Y(function(B,J,H,C,G,N,h,A,M,L,r,E){function R(p,W){for(;N<p;)r\|=b(B)<<N,N+=8;return W=r&((N-=p,1)<<p)-1,r>>=p,W}for(L=(H=(r=(h=m(B),N=0),G=(R(3)\|0)+1,R(5)),[]),J=E=0;E<H;E++)M=R(1),L.push(M)
2024-02-20 15:13:46 UTC	1252	IN	Data Raw: 4e 3d 66 28 28 4a 3d 66 28 28 4a 3d 28 47 3d 6d 28 28 68 3d 6d 28 28 4e 3d 6d 28 42 29 2c 42 29 29 2c 42 29 29 2c 6d 29 28 42 29 2c 42 29 2c 4a 29 2c 42 29 2c 4e 29 2c 42 29 2c 47 29 2c 68 3d 66 28 42 2c 68 29 2c 22 6f 62 6a 65 63 74 22 29 3d 3d 69 44 28 4e 29 29 7b 66 6f 72 28 48 20 69 6e 20 43 3d 5b 5d 2c 4e 29 43 2e 70 75 73 68 28 48 29 3b 4e 3d 43 7d 69 66 28 42 2e 54 3d 3d 42 29 66 6f 72 28 42 3d 30 2c 47 3d 30 3c 47 3f 47 3a 31 2c 48 3d 4e 2e 6c 65 6e 67 74 68 3b 42 3c 48 3b 42 2b 3d 47 29 68 28 4e 2e 73 6c 69 63 65 28 42 2c 28 42 7c 30 29 2b 28 47 7c 30 29 29 2c 4a 29 7d 7d 2c 28 59 28 66 75 6e 63 74 69 6f 6e 28 42 29 7b 6d 76 28 42 2c 34 29 7d 2c 35 30 34 2c 28 59 28 66 75 6e 63 74 69 6f 6e 28 42 2c 4a 2c 48 2c 43 2c 47 29 7b 28 47 3d 66 28 42 2c Data Ascii: N=f((J=f((J=(G=m((h=m((N=m(B),B)),B)),m)(B),B),J),B),N),B),G),h=f(B,h),"object")==iD(N)){for(H in C=[],N)C.push(H);N=C}if(B.T==B)for(B=0,G=0<G?G:1,H=N.length;B<H;B+=G)h(N.slice(B,(B\|0)+(G\|0)),J)}},(Y(function(B){mv(B,4)},504,(Y(function(B,J,H,C,G){(G=f(B,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49975	142.251.35.164	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:46 UTC	1060	OUT	GET /recaptcha/api2/bframe?hl=en&v=yiNW3R9jkyLVP5-EEZLDzUtA&k=6Lcfp2QpAAAAAGqjcXHnKeo_RFdTrqW77e0hWtoO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mdtaxconnect.gov/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-02-20 15:13:47 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 20 Feb 2024 15:13:47 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-yV3rmq2N4jghMDqhawdBdg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-20 15:13:47 UTC	361	IN	Data Raw: 31 64 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d11<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-02-20 15:13:47 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2024-02-20 15:13:47 UTC	1252	IN	Data Raw: 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c Data Ascii: F9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
2024-02-20 15:13:47 UTC	1252	IN	Data Raw: 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d Data Ascii: 90-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
2024-02-20 15:13:47 UTC	1252	IN	Data Raw: 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA
2024-02-20 15:13:47 UTC	1252	IN	Data Raw: 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c Data Ascii: rl(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal
2024-02-20 15:13:47 UTC	828	IN	Data Raw: 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 79 69 4e 57 33 52 39 6a 6b 79 4c 56 50 35 2d 45 45 5a 4c 44 7a 55 74 41 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 79 56 33 72 6d 71 32 4e 34 6a 67 68 4d 44 71 68 61 77 64 42 64 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 Data Ascii: , U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/styles__ltr.css"><script nonce="yV3rmq2N4jghMDqhawdBdg" type="text/javascript">window['__recaptcha_api'] = 'htt
2024-02-20 15:13:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49977	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:48 UTC	1856	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-existing-businesses%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=4277207902&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 1862 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/business/register-existing-businesses/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442021.0.0.0; rxvt=1708443825466\|1708441968947; dtPC=-2$242020859_794h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:48 UTC	1862	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 32 30 31 38 35 36 39 25 37 43 31 37 30 38 34 34 32 30 32 35 34 36 38 25 37 43 64 6e 25 37 43 36 30 34 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 62 67 25 37 43 31 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 30 38 34 34 32 30 31 38 35 36 39 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 33 33 31 33 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 37 36 31 25 37 43 56 43 44 53 25 37 43 31 25 37 43 56 43 53 25 37 43 36 39 36 35 25 37 43 56 43 4f 25 37 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708442018569%7C1708442025468%7Cdn%7C604%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%7Cbg%7C1%2C2%7C3%7C_event_%7C1708442018569%7C_vc_%7CV%7C3313%5Epc%7CVCD%7C1761%7CVCDS%7C1%7CVCS%7C6965%7CVCO%7C
2024-02-20 15:13:49 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:49 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:49 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49979	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:50 UTC	1351	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-existing-businesses%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=4277207902&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442021.0.0.0; rxvt=1708443825466\|1708441968947; dtPC=-2$242020859_794h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:50 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:50 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:50 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49982	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:50 UTC	1141	OUT	GET /rptp/portal/business/register-new-business HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442021.0.0.0; rxvt=1708443825466\|1708441968947; dtPC=-2$242020859_794h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:50 UTC	853	IN	HTTP/1.1 302 Found Date: Tue, 20 Feb 2024 15:13:50 GMT Content-Length: 0 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Location: https://mdtaxconnect.gov/rptp/portal/business/register-new-business/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="462622826" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49981	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:50 UTC	1327	OUT	GET /rptp/portal/business/register-new-business/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442021.0.0.0; rxvt=1708443825466\|1708441968947; dtPC=-2$242020859_794h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:51 UTC	1408	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: X-TOKEN--rptp-portal-business-register-new-business=C5F8EC1A8D473CD534FB2C8FB32076639726BFA4AD7198CA9052E92A8E66C850BC614A30485A8175F31DA9412AF1863B1193; Path=/rptp/portal/business/register-new-business; HttpOnly; Secure; SameSite=Strict X-TOKEN: C5F8EC1A8D473CD534FB2C8FB32076639726BFA4AD7198CA9052E92A8E66C850BC614A30485A8175F31DA9412AF1863B1193 X-Frame-Options: SAMEORIGIN Content-Location: /rptp/portal/business/register-new-business/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Pragma: no-cache Vary: Cookie,User-Agent Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1947109023" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en
2024-02-20 15:13:51 UTC	14976	IN	Data Raw: 66 64 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 3c 21 2d 2d 20 72 65 6c 3d 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 20 69 6e 64 69 63 61 74 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 Data Ascii: fd7a<!DOCTYPE html><html lang="en" ><head><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=Edge">... rel=dynamic-content indicates an element
2024-02-20 15:13:51 UTC	16384	IN	Data Raw: 6d 6c 68 74 74 70 2e 73 74 61 74 75 73 3d 3d 32 30 30 29 20 7b 0d 0a 09 09 20 20 20 20 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 64 69 76 49 44 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 09 20 20 20 20 7d 0d 0a 09 09 7d 3b 0d 0a 09 09 78 6d 6c 68 74 74 70 2e 6f 70 65 6e 28 22 47 45 54 22 2c 22 65 78 74 65 6e 64 53 65 73 73 69 6f 6e 2e 6a 73 70 22 2c 66 61 6c 73 65 29 3b 0d 0a 09 09 78 6d 6c 68 74 74 70 2e 73 65 6e 64 28 29 3b 0d 0a 09 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 73 69 74 65 57 69 64 65 48 65 6c 70 4c 69 6e 6b 22 20 74 69 74 6c 65 3d 22 47 6c 6f 62 61 6c 20 48 65 6c 70 22 3e 0d 0a 09 3c 73 70 Data Ascii: mlhttp.status==200) { document.getElementById(divID).style.display = "none"; }};xmlhttp.open("GET","extendSession.jsp",false);xmlhttp.send();}</script>...<a href="#void" id="siteWideHelpLink" title="Global Help"><sp
2024-02-20 15:13:51 UTC	16384	IN	Data Raw: 73 3d 22 63 6f 6c 2d 73 6d 2d 34 22 3e 0d 0a 09 09 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 63 61 6e 63 65 6c 43 68 61 74 42 74 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 64 61 6e 67 65 72 22 20 74 61 62 69 6e 64 65 78 3d 22 34 22 3e 0d 0a 09 09 09 43 61 6e 63 65 6c 0d 0a 09 09 3c 2f 61 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 62 72 20 2f 3e 0d 0a 3c 70 3e 4c 69 76 65 20 43 68 61 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 4d 6f 6e 64 61 79 20 74 68 72 6f 75 67 68 20 46 72 69 64 61 79 20 66 72 6f 6d 20 38 20 41 4d 20 74 6f 20 35 20 50 4d 20 43 53 54 20 65 78 63 6c 75 64 69 6e 67 20 68 6f 6c 69 64 61 79 73 2e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 20 50 6f 72 74 6c 65 74 20 70 61 67 65 20 76 69 65 77 20 65 6e 64 Data Ascii: s="col-sm-4"><a href="#void" id="cancelChatBtn" class="btn btn-danger" tabindex="4">Cancel</a></div></div><br /><p>Live Chat is available Monday through Friday from 8 AM to 5 PM CST excluding holidays.</p>... Portlet page view end
2024-02-20 15:13:51 UTC	16384	IN	Data Raw: 74 20 66 6f 72 20 74 6f 67 67 6c 69 6e 67 20 2d 2d 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 6c 61 70 73 65 20 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 22 20 69 64 3d 22 74 68 65 6d 65 2d 74 6f 70 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 2d 31 22 3e 0d 0a 09 09 09 09 09 09 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 20 6e 61 76 62 61 72 2d 6e 61 76 22 3e 0d 0a 09 09 09 09 09 09 09 0d 0a 09 09 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 22 3e 3c 61 20 6f 6e 63 6c 69 63 6b 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 72 65 74 75 72 6e 20 63 68 65 63 6b 44 69 72 74 79 46 6c 61 67 28 29 3b 22 20 68 72 65 66 3d 27 2f 72 70 74 70 2f 70 6f 72 74 61 6c 2f 68 6f 6d 65 27 20 74 69 74 6c 65 3d 27 27 3e 48 6f 6d 65 3c 2f 61 3e 3c 2f 6c 69 3e Data Ascii: t for toggling --><div class="collapse navbar-collapse" id="theme-topnavbar-collapse-1"><ul class="nav navbar-nav"><li class=""><a onclick="javascript:return checkDirtyFlag();" href='/rptp/portal/home' title=''>Home</a></li>
2024-02-20 15:13:51 UTC	775	IN	Data Raw: 20 28 29 20 7b 0d 0a 09 09 6c 65 74 20 75 72 6c 53 74 72 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0d 0a 09 09 69 66 20 28 75 72 6c 53 74 72 2e 69 6e 64 65 78 4f 66 28 22 2f 70 6f 72 74 61 6c 2f 68 6f 6d 65 2f 22 29 20 3c 20 30 29 20 7b 0d 0a 09 09 09 24 28 20 22 2e 6e 61 76 2d 70 72 6f 66 69 6c 65 2d 69 74 65 6d 22 20 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 20 22 62 6c 6f 63 6b 22 29 3b 0d 0a 09 09 09 24 28 20 22 2e 6e 61 76 2d 6c 6f 67 6f 75 74 2d 69 74 65 6d 22 20 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 20 22 62 6c 6f 63 6b 22 29 3b 0d 0a 09 09 09 24 28 20 22 2e 64 61 74 61 53 65 63 22 20 29 2e 63 73 73 28 22 70 61 64 64 69 6e 67 22 2c 20 22 32 30 70 78 22 29 0d 0a 09 09 7d 0d 0a 09 09 24 28 22 2e 6e 61 76 2d 61 6e 6e 6f 75 6e Data Ascii: () {let urlStr = location.href;if (urlStr.indexOf("/portal/home/") < 0) {$( ".nav-profile-item" ).css("display", "block");$( ".nav-logout-item" ).css("display", "block");$( ".dataSec" ).css("padding", "20px")}$(".nav-announ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49988	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:53 UTC	1855	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-existing-businesses%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=349469379&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 5978 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/business/register-existing-businesses/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:53 UTC	5978	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 72 70 74 70 25 32 46 70 6f 72 74 61 6c 25 32 46 62 75 73 69 6e 65 73 73 25 32 46 72 65 67 69 73 74 65 72 2d 65 78 69 73 74 69 6e 67 2d 62 75 73 69 6e 65 73 73 65 73 25 32 46 21 75 74 25 32 46 70 25 32 46 7a 31 25 32 46 30 34 5f 53 6a 39 43 50 79 6b 73 73 79 30 78 50 4c 4d 6e 4d 7a 30 76 4d 41 66 49 6a 6f 38 7a 69 6a 53 30 4d 6e 4e 30 39 44 49 79 38 5f 46 31 4d 54 41 30 63 6a 59 4b 4e 4c 44 77 44 51 77 77 4e 44 45 7a 30 77 38 45 4b 44 48 41 41 52 77 50 39 4b 47 4c 30 34 31 45 51 68 64 5f 34 63 50 30 6f 56 43 76 63 51 34 4f 4e 44 42 7a 39 48 55 4e 4e 77 68 79 39 6a 41 7a 4d 7a 4b 41 4b 38 4a 68 52 6b 42 73 61 59 5a 44 70 71 41 67 41 68 37 42 6e 48 67 21 21 25 32 46 64 7a 25 32 46 64 35 25 32 46 4c 32 64 42 49 53 45 76 5a 30 46 42 49 Data Ascii: $tvn=%2Frptp%2Fportal%2Fbusiness%2Fregister-existing-businesses%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!%2Fdz%2Fd5%2FL2dBISEvZ0FBI
2024-02-20 15:13:54 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:54 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:54 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49989	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:54 UTC	1842	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-new-business%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=1118253042&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 1821 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/business/register-new-business/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:54 UTC	1821	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 32 30 32 39 33 30 38 25 37 43 31 37 30 38 34 34 32 30 33 31 31 30 30 25 37 43 64 6e 25 37 43 34 36 32 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 30 38 34 34 32 30 32 39 33 30 38 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 31 35 36 39 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 35 38 37 25 37 43 56 43 44 53 25 37 43 32 25 37 43 56 43 53 25 37 43 31 38 35 30 25 37 43 56 43 4f 25 37 43 33 33 33 36 25 37 43 56 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708442029308%7C1708442031100%7Cdn%7C462%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1708442029308%7C_vc_%7CV%7C1569%5Epc%7CVCD%7C1587%7CVCDS%7C2%7CVCS%7C1850%7CVCO%7C3336%7CVC
2024-02-20 15:13:54 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:54 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:54 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49990	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:54 UTC	1350	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-existing-businesses%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8_F1MTA0cjYKNLDwDQwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAh7BnHg!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=349469379&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:54 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:54 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:54 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49991	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:54 UTC	1344	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-new-business%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=1118253042&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:54 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:54 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:54 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49992	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:55 UTC	1253	OUT	GET /rptp/portal/home/md-sutec/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-TOKEN--rptp-portal-home=D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:55 UTC	846	IN	HTTP/1.1 302 Found Date: Tue, 20 Feb 2024 15:13:55 GMT Content-Length: 0 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Location: https://mdtaxconnect.gov/rptp/portal/home/md-sutec/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1860318329" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en-US

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49993	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:55 UTC	1446	OUT	GET /rptp/portal/home/md-sutec/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-TOKEN--rptp-portal-home=D545C4F820DD504CEAB705F99D8C657414C6AE10A8BADC8C64B2318A660070061E836F2D44B5FE2BCC601BB9D6DB5ACD54E4; PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442031.0.0.0; rxvt=1708443831095\|1708441968947; dtPC=-2$242030315_724h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:55 UTC	1364	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET X-Powered-By: Servlet/3.1 X-OneAgent-JS-Injection: true Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: X-TOKEN--rptp-portal-home-md-sutec=515B1EE05AE04A88FB13E33C509E0C5F06003D4195D24C21C50BC2C0E41D5976C436AE805EBC92EBE50D9BF56F1EB4466080; Path=/rptp/portal/home/md-sutec; HttpOnly; Secure; SameSite=Strict X-TOKEN: 515B1EE05AE04A88FB13E33C509E0C5F06003D4195D24C21C50BC2C0E41D5976C436AE805EBC92EBE50D9BF56F1EB4466080 X-Frame-Options: SAMEORIGIN Content-Location: /rptp/portal/home/md-sutec/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Pragma: no-cache Vary: Cookie,User-Agent Server-Timing: dtSInfo;desc="0", dtRpid;desc="-141859273" Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe Content-Language: en
2024-02-20 15:13:55 UTC	15020	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 3c 21 2d 2d 20 72 65 6c 3d 64 79 6e 61 6d 69 63 2d 63 6f 6e 74 65 6e 74 20 69 6e 64 69 63 61 74 65 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 Data Ascii: 8000<!DOCTYPE html><html lang="en" ><head><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=Edge">... rel=dynamic-content indicates an element
2024-02-20 15:13:55 UTC	16384	IN	Data Raw: 6c 68 74 74 70 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 34 20 26 26 20 78 6d 6c 68 74 74 70 2e 73 74 61 74 75 73 3d 3d 32 30 30 29 20 7b 0d 0a 09 09 20 20 20 20 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 64 69 76 49 44 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 09 20 20 20 20 7d 0d 0a 09 09 7d 3b 0d 0a 09 09 78 6d 6c 68 74 74 70 2e 6f 70 65 6e 28 22 47 45 54 22 2c 22 65 78 74 65 6e 64 53 65 73 73 69 6f 6e 2e 6a 73 70 22 2c 66 61 6c 73 65 29 3b 0d 0a 09 09 78 6d 6c 68 74 74 70 2e 73 65 6e 64 28 29 3b 0d 0a 09 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 73 69 74 65 57 69 64 65 48 65 6c 70 4c 69 6e 6b 22 20 74 69 Data Ascii: lhttp.readyState==4 && xmlhttp.status==200) { document.getElementById(divID).style.display = "none"; }};xmlhttp.open("GET","extendSession.jsp",false);xmlhttp.send();}</script>...<a href="#void" id="siteWideHelpLink" ti
2024-02-20 15:13:56 UTC	16384	IN	Data Raw: 76 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 34 22 3e 0d 0a 09 09 3c 61 20 68 72 65 66 3d 22 23 76 6f 69 64 22 20 69 64 3d 22 63 61 6e 63 65 6c 43 68 61 74 42 74 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 64 61 6e 67 65 72 22 20 74 61 62 69 6e 64 65 78 3d 22 34 22 3e 0d 0a 09 09 09 43 61 6e 63 65 6c 0d 0a 09 09 3c 2f 61 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 62 72 20 2f 3e 0d 0a 3c 70 3e 4c 69 76 65 20 43 68 61 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 4d 6f 6e 64 61 79 20 74 68 72 6f 75 67 68 20 46 72 69 64 61 79 20 66 72 6f 6d 20 38 20 41 4d 20 74 6f 20 35 20 50 4d 20 43 53 54 20 65 78 63 6c 75 64 69 6e 67 20 68 6f 6c 69 64 61 79 73 2e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 20 50 6f 72 74 6c 65 74 Data Ascii: v><div class="col-sm-4"><a href="#void" id="cancelChatBtn" class="btn btn-danger" tabindex="4">Cancel</a></div></div><br /><p>Live Chat is available Monday through Friday from 8 AM to 5 PM CST excluding holidays.</p>... Portlet
2024-02-20 15:13:56 UTC	16384	IN	Data Raw: 6f 72 6d 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 65 6e 74 20 66 6f 72 20 74 6f 67 67 6c 69 6e 67 20 2d 2d 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 6c 61 70 73 65 20 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 22 20 69 64 3d 22 74 68 65 6d 65 2d 74 6f 70 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 2d 31 22 3e 0d 0a 09 09 09 09 09 09 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 20 6e 61 76 62 61 72 2d 6e 61 76 22 3e 0d 0a 09 09 09 09 09 09 09 0d 0a 09 09 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 61 63 74 69 76 65 22 3e 3c 61 20 6f 6e 63 6c 69 63 6b 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 72 65 74 75 72 6e 20 63 68 65 63 6b 44 69 72 74 79 46 6c 61 67 28 29 3b 22 20 68 72 65 66 3d 27 2f 72 70 74 70 2f 70 6f 72 74 61 6c 2f Data Ascii: orms, and other content for toggling --><div class="collapse navbar-collapse" id="theme-topnavbar-collapse-1"><ul class="nav navbar-nav"><li class="active"><a onclick="javascript:return checkDirtyFlag();" href='/rptp/portal/
2024-02-20 15:13:56 UTC	1010	IN	Data Raw: 70 6c 65 6d 65 6e 74 61 72 79 43 6f 6e 74 65 6e 74 22 20 72 6f 6c 65 3d 22 72 65 67 69 6f 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 77 70 74 68 65 6d 65 43 6f 6d 70 6c 65 6d 65 6e 74 61 72 79 43 6f 6e 74 65 6e 74 54 65 78 74 22 3e 0d 0a 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 77 70 74 68 65 6d 65 41 6c 74 54 65 78 74 22 20 69 64 3d 22 77 70 74 68 65 6d 65 43 6f 6d 70 6c 65 6d 65 6e 74 61 72 79 43 6f 6e 74 65 6e 74 54 65 78 74 22 20 3e 3c 2f 73 70 61 6e 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 09 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 6c 65 74 20 75 72 6c 53 74 72 20 Data Ascii: plementaryContent" role="region" tabindex="-1" aria-labelledby="wpthemeComplementaryContentText"><span class="wpthemeAltText" id="wpthemeComplementaryContentText" ></span></div></body><script> $(document).ready(function () {let urlStr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49999	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:58 UTC	1823	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fmd-sutec%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=526534433&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 1821 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/md-sutec/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442035.0.0.0; rxvt=1708443835498\|1708441968947; dtPC=-2$242034739_332h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:58 UTC	1821	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 30 38 34 34 32 30 33 33 39 36 34 25 37 43 31 37 30 38 34 34 32 30 33 35 35 30 30 25 37 43 64 6e 25 37 43 34 36 33 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 30 38 34 34 32 30 33 33 39 36 34 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 31 33 34 39 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 36 31 39 25 37 43 56 43 44 53 25 37 43 31 25 37 43 56 43 53 25 37 43 31 36 30 33 25 37 43 56 43 4f 25 37 43 33 31 31 38 25 37 43 56 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1708442033964%7C1708442035500%7Cdn%7C463%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1708442033964%7C_vc_%7CV%7C1349%5Epc%7CVCD%7C1619%7CVCDS%7C1%7CVCS%7C1603%7CVCO%7C3118%7CVC
2024-02-20 15:13:58 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:58 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:13:58 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	50000	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:59 UTC	1334	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fmd-sutec%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=526534433&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442035.0.0.0; rxvt=1708443835498\|1708441968947; dtPC=-2$242034739_332h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:13:59 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:13:59 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	50002	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:59 UTC	939	OUT	GET /business/bfile/osc/selectapp.aspx HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0
2024-02-20 15:13:59 UTC	372	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 Set-Cookie: ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh; path=/; HttpOnly; SameSite=Lax X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 19384 Connection: close
2024-02-20 15:13:59 UTC	2567	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0d 0a 3c 48 54 4d 4c 3e 0d 0a 09 3c 48 45 41 44 3e 0d 0a 09 09 3c 74 69 74 6c 65 3e 62 46 69 6c 65 20 2d 20 53 65 6c 65 63 74 20 41 70 70 6c 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 09 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 56 69 73 75 61 6c 20 53 74 75 64 69 6f 20 2e 4e 45 54 20 37 2e 31 22 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 56 69 73 75 61 6c 20 42 61 73 69 63 20 2e 4e 45 54 20 37 2e 31 22 20 6e 61 6d 65 3d 22 43 4f 44 45 5f 4c 41 4e 47 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"><HTML><HEAD><title>bFile - Select Application</title><meta content="Microsoft Visual Studio .NET 7.1" name="GENERATOR"><meta content="Visual Basic .NET 7.1" name="CODE_LANG
2024-02-20 15:13:59 UTC	7300	IN	Data Raw: 78 3b 22 20 74 61 72 67 65 74 3d 5f 74 6f 70 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 72 79 6c 61 6e 64 74 61 78 65 73 2e 67 6f 76 2f 64 69 76 69 73 69 6f 6e 73 2f 63 6f 6d 70 2f 70 65 74 65 72 2d 66 72 61 6e 63 68 6f 74 2e 70 68 70 20 22 3e 0d 0a 20 20 20 20 3c 46 4f 4e 54 20 43 4f 4c 4f 52 3d 22 23 66 66 66 66 66 66 22 3e 49 6e 69 74 69 61 74 69 76 65 73 3c 2f 46 4f 4e 54 3e 3c 2f 41 3e 0d 0a 0d 0a 3c 41 20 73 74 79 6c 65 3d 22 43 4f 4c 4f 52 3a 20 23 66 66 66 66 66 66 3b 20 54 45 58 54 2d 44 45 43 4f 52 41 54 49 4f 4e 3a 20 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 37 30 70 78 3b 22 20 74 61 72 67 65 74 3d 5f 74 6f 70 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 72 79 6c 61 6e 64 74 61 78 65 73 2e Data Ascii: x;" target=_top href="https://www.marylandtaxes.gov/divisions/comp/peter-franchot.php "> <FONT COLOR="#ffffff">Initiatives</FONT></A><A style="COLOR: #ffffff; TEXT-DECORATION: none;padding-right:70px;" target=_top href="https://www.marylandtaxes.
2024-02-20 15:13:59 UTC	7300	IN	Data Raw: 41 6c 6c 20 72 65 74 75 72 6e 73 20 79 6f 75 20 66 69 6c 65 20 77 68 69 6c 65 20 6c 6f 67 67 65 64 20 6f 6e 20 77 69 6c 6c 20 62 65 20 61 63 63 65 73 73 69 62 6c 65 20 69 6e 20 61 20 63 6f 6e 73 6f 6c 69 64 61 74 65 64 20 6c 69 73 74 5c 6e 5c 6e 43 48 4f 49 43 45 53 20 2d 20 46 69 6c 69 6e 67 20 57 69 74 68 68 6f 6c 64 69 6e 67 20 52 65 63 6f 6e 63 69 6c 69 61 74 69 6f 6e 20 72 65 74 75 72 6e 73 20 72 65 71 75 69 72 65 73 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 61 20 62 46 69 6c 65 20 55 73 65 72 20 52 65 67 69 73 74 72 61 74 69 6f 6e 27 29 3b 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 42 65 6e 65 66 69 74 73 3c 2f 61 3e 3c 2f 74 64 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 74 72 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 74 72 3e 0d 0a 09 Data Ascii: All returns you file while logged on will be accessible in a consolidated list\n\nCHOICES - Filing Withholding Reconciliation returns requires that you have a bFile User Registration');">Benefits</a></td></tr><tr>
2024-02-20 15:13:59 UTC	2217	IN	Data Raw: 72 3e 0d 0a 09 09 09 09 3c 74 72 3e 0d 0a 09 09 09 09 09 3c 74 64 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 33 25 22 3e 0d 0a 09 09 09 09 09 09 3c 49 4d 47 20 68 65 69 67 68 74 3d 22 31 30 22 20 61 6c 74 3d 22 22 20 68 73 70 61 63 65 3d 22 30 22 20 73 72 63 3d 22 2f 42 75 73 69 6e 65 73 73 2f 67 6c 4d 65 64 69 61 2f 72 65 64 62 75 6c 6c 65 74 2e 67 69 66 22 20 77 69 64 74 68 3d 22 37 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 0d 0a 09 09 09 09 09 3c 2f 74 64 3e 0d 0a 09 09 09 09 09 3c 74 64 20 76 41 6c 69 67 6e 3d 22 74 6f 70 22 20 63 6f 6c 53 70 61 6e 3d 22 35 22 3e 0d 0a 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 74 65 72 61 63 74 69 76 65 2e 6d 61 72 79 6c 61 6e 64 74 61 78 65 73 2e 67 6f 76 2f 62 Data Ascii: r><tr><td vAlign="top" width="3%"><IMG height="10" alt="" hspace="0" src="/Business/glMedia/redbullet.gif" width="7" border="0" /></td><td vAlign="top" colSpan="5"><a href="https://interactive.marylandtaxes.gov/b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	50001	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:59 UTC	920	OUT	GET /Business/glStyles/defaultcss.htm HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:13:59 UTC	268	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Mon, 27 Jan 2003 17:31:51 GMT Accept-Ranges: bytes ETag: "6c2682fa29c6c21:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 1976 Connection: close
2024-02-20 15:13:59 UTC	1976	IN	Data Raw: 62 6f 64 79 20 7b 0d 0a 09 09 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 74 64 20 09 09 20 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 3b 0d 0a 09 09 09 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 09 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 09 09 09 7d 09 0d 0a 0d 0a 2f 2a 0d 0a 74 64 20 09 09 20 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 2e 35 70 74 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 3b 0d 0a 09 09 09 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 09 09 09 74 65 78 74 2d 61 6c Data Ascii: body {margin: 0px;background-color: #ffffff;}td {font-size: 75%;font-family: arial;color: black;text-align: left;}/*td {font-size: 9.5pt;font-family: arial;color: black;text-al

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	50004	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:59 UTC	916	OUT	GET /Business/glStyles/appcss.htm HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:13:59 UTC	268	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Wed, 22 Jan 2020 16:50:56 GMT Accept-Ranges: bytes ETag: "3545c11d44d1d51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 4246 Connection: close
2024-02-20 15:13:59 UTC	4246	IN	Data Raw: 2f 2a 20 41 2e 73 75 62 69 74 65 6d 20 63 6c 61 73 73 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 76 69 73 69 74 65 64 20 6c 69 6e 6b 20 61 73 20 2a 2f 0d 0a 2f 2a 20 64 69 66 66 65 72 65 6e 74 20 63 6f 6c 6f 72 2e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 41 2e 73 75 62 69 74 65 6d 3a 76 69 73 69 74 65 64 2c 20 41 2e 73 75 62 69 74 65 6d 3a 6c 69 6e 6b 2c 20 41 2e 73 75 62 69 74 65 6d 3a 68 6f 76 65 72 20 Data Ascii: /* A.subitem classes can be used to display the visited link as // different color. // ------------------------------------------------------------ */A.subitem:visited, A.subitem:link, A.subitem:hover

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	50006	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:59 UTC	915	OUT	GET /Business/glAppIncl/src_DollarsAndCents.js HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:13:59 UTC	281	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 14 Jul 2005 16:27:22 GMT Accept-Ranges: bytes ETag: "39b990e99088c51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 3900 Connection: close
2024-02-20 15:13:59 UTC	2658	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 52 65 74 75 72 6e 44 6f 6c 6c 61 72 73 56 61 6c 28 73 56 61 6c 29 7b 0d 0a 09 76 61 72 20 69 52 65 74 75 72 6e 20 3d 20 70 61 72 73 65 49 6e 74 28 44 65 46 6f 72 6d 61 74 44 6f 6c 6c 61 72 73 28 73 56 61 6c 29 29 3b 0d 0a 09 69 66 28 69 73 4e 61 4e 28 69 52 65 74 75 72 6e 29 29 20 69 52 65 74 75 72 6e 20 3d 20 30 3b 0d 0a 09 72 65 74 75 72 6e 20 69 52 65 74 75 72 6e 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 74 75 72 6e 43 65 6e 74 73 56 61 6c 28 73 56 61 6c 29 7b 0d 0a 09 76 61 72 20 69 52 65 74 75 72 6e 20 3d 20 70 61 72 73 65 49 6e 74 28 44 65 46 6f 72 6d 61 74 43 65 6e 74 73 28 73 56 61 6c 29 29 3b 0d 0a 09 69 66 28 69 73 4e 61 4e 28 69 52 65 74 75 72 6e 29 29 20 69 52 65 74 75 72 6e 20 3d 20 30 3b 0d 0a 09 72 65 74 Data Ascii: function ReturnDollarsVal(sVal){var iReturn = parseInt(DeFormatDollars(sVal));if(isNaN(iReturn)) iReturn = 0;return iReturn;}function ReturnCentsVal(sVal){var iReturn = parseInt(DeFormatCents(sVal));if(isNaN(iReturn)) iReturn = 0;ret
2024-02-20 15:13:59 UTC	1242	IN	Data Raw: 20 31 3a 0d 0a 09 09 63 61 73 65 20 32 3a 0d 0a 09 09 63 61 73 65 20 33 3a 0d 0a 09 09 63 61 73 65 20 34 3a 0d 0a 09 09 63 61 73 65 20 35 3a 0d 0a 09 09 63 61 73 65 20 36 3a 0d 0a 09 09 63 61 73 65 20 37 3a 0d 0a 09 09 63 61 73 65 20 38 3a 0d 0a 09 09 63 61 73 65 20 39 3a 0d 0a 09 09 09 73 56 61 6c 20 3d 20 27 30 27 20 2b 20 69 56 61 6c 3b 0d 0a 09 09 09 62 72 65 61 6b 3b 0d 0a 09 09 64 65 66 61 75 6c 74 3a 0d 0a 09 09 09 73 56 61 6c 20 3d 20 27 27 20 2b 20 69 56 61 6c 3b 09 09 0d 0a 09 7d 0d 0a 09 72 65 74 75 72 6e 20 73 56 61 6c 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 53 70 6c 69 74 54 6f 74 61 6c 54 6f 46 69 65 6c 64 73 28 54 6f 74 61 6c 2c 20 6f 46 69 65 6c 64 44 2c 20 6f 46 69 65 6c 64 43 29 7b 0d 0a 09 76 61 72 20 62 49 73 4e 65 67 61 74 Data Ascii: 1:case 2:case 3:case 4:case 5:case 6:case 7:case 8:case 9:sVal = '0' + iVal;break;default:sVal = '' + iVal;}return sVal;}function SplitTotalToFields(Total, oFieldD, oFieldC){var bIsNegat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	50005	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:59 UTC	911	OUT	GET /Business/glAppIncl/src_OpenHelpWin.js HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:13:59 UTC	280	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 15 Mar 2012 14:25:48 GMT Accept-Ranges: bytes ETag: "fb428284b72cd1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 2351 Connection: close
2024-02-20 15:13:59 UTC	2351	IN	Data Raw: 2f 2a 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 73 72 63 5f 4f 70 65 6e 48 65 6c 70 57 69 6e 2e 6a 73 20 2d 20 47 6c 6f 62 61 6c 20 69 6e 63 6c 75 64 65 20 75 73 65 64 20 74 6f 20 6f 70 65 6e 20 61 20 0d 0a 6e 65 77 20 77 69 6e 64 6f 77 20 73 69 7a 65 64 20 74 6f 20 35 30 25 20 6f 66 20 74 68 65 20 70 61 72 65 6e 74 20 77 69 6e 64 6f 77 2e 20 20 54 68 69 73 0d 0a 72 6f 75 74 69 6e 65 20 61 6c 73 6f 20 64 65 74 65 72 6d 69 6e 65 73 20 62 72 6f 77 73 65 72 20 76 65 72 73 69 6f 6e 2e 0d 0a 09 0d 0a 23 23 20 74 6f 20 69 6e 76 6f 6b 65 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 Data Ascii: /* *********************************************************src_OpenHelpWin.js - Global include used to open a new window sized to 50% of the parent window. Thisroutine also determines browser version.## to invoke this function add the followi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	50007	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:59 UTC	1005	OUT	GET /business/glmedia/newHeader/Information%20for%20Business%20Taxpayers.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:13:59 UTC	268	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 17 Jan 2023 14:11:42 GMT Accept-Ranges: bytes ETag: "a13313a07d2ad91:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 9649 Connection: close
2024-02-20 15:13:59 UTC	7051	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 00 6c 08 03 00 00 00 ce b4 68 85 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 45 91 16 11 3b 88 54 c8 50 9d 2c 88 8a 38 4a 15 8b 60 a1 b4 15 5a 75 30 79 e9 1f 34 69 48 52 5c 1c 05 d7 82 83 3f 8b 55 07 17 67 5d 1d 5c 05 41 f0 07 c4 d5 c5 49 d1 45 4a bc 2f 29 b4 88 f1 c2 e3 7d 9c 77 cf e1 bd fb 00 a1 51 61 aa d9 35 01 a8 9a 65 a4 e2 31 31 9b 5b 15 7b 5e e1 c3 00 82 08 63 44 62 a6 9e 48 2f 66 e0 59 5f f7 d4 4d 75 17 e5 59 de 7d 7f 56 50 c9 9b 0c f0 89 c4 73 4c 37 2c e2 0d e2 99 4d 4b e7 bc 4f 1c 62 25 49 21 3e 27 1e 37 e8 82 c4 8f 5c 97 5d 7e e3 5c 74 58 e0 99 21 23 93 9a 27 0e 11 8b c5 0e 96 3b 98 95 0c 95 78 9a 38 a2 a8 1a e5 0b 59 97 15 Data Ascii: PNGIHDRlhiCCPICC profile(}=HPOSE;TP,8J`Zu0y4iHR\?Ug]\AIEJ/)}wQa5e11[{^cDbH/fY_MuY}VPsL7,MKOb%I!>'7\]~\tX!#';x8Y
2024-02-20 15:13:59 UTC	2598	IN	Data Raw: 24 03 92 c4 7e c0 32 9d db 87 5b a5 aa ed 67 79 4e 54 3f dc 0e 9f 36 96 73 e4 8c fb 87 9f e6 06 77 b7 b7 ef df ff ec d3 77 ff 1b 88 1e 32 7d ab b9 4f 98 4e c6 e5 ed f9 bf 98 27 4c 07 8a 4f ce af 5d 09 88 4e 4d f7 c9 e9 bf 8c da 39 78 c7 4b e4 7d cb 7e 62 04 46 1a eb 05 a1 94 27 d5 69 06 cc b4 c1 27 e7 d4 22 46 2b 07 4c 27 6a 6e 54 54 6c d4 0f 42 56 38 50 82 c1 7e d0 48 94 62 8a e8 7e f9 34 44 ef 47 d1 c3 4d 20 82 90 ab a8 e1 1f 7f 1e dd 8d 53 71 e2 1d a4 aa c1 59 4f 48 36 99 71 20 99 4f c3 af e2 e6 72 12 45 17 65 2f 98 bd f7 f8 f9 9e c3 14 3d 7b bb e7 71 21 4e 46 71 e3 49 37 fa 4a c9 e9 35 e3 f0 cc aa 5d 21 27 61 d2 4e 34 bd 46 27 c5 fc 54 89 1f 66 16 2b e1 34 38 74 47 f0 c2 69 23 84 19 e9 d4 39 19 ec ea c3 97 ac 1c 97 76 5d b1 f9 de 92 de c5 65 60 bc de Data Ascii: $~2[gyNT?6sww2}ON'LO]NM9xK}~bF'i'"F+L'jnTTlBV8P~Hb~4DGM SqYOH6q OrEe/={q!NFqI7J5]!'aN4F'Tf+48tGi#9v]e`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	50008	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:13:59 UTC	965	OUT	GET /Business/glMedia/bFile_Logo.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:13:59 UTC	268	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 21 Jan 2020 22:56:07 GMT Accept-Ranges: bytes ETag: "b2d88cf7add0d51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 2413 Connection: close
2024-02-20 15:13:59 UTC	2413	IN	Data Raw: 47 49 46 38 39 61 d8 00 7c 00 c4 00 00 00 00 00 ff ff ff f2 f2 f7 1b 20 89 25 2b 8d 54 59 a7 63 67 ad 77 7a af d5 d6 e8 28 30 8f 2d 35 92 30 37 93 38 3f 98 46 4d 9f 7f 83 bc 7e 82 bb 8c 90 c4 9c 9f cb b7 ba db c6 c8 e1 e3 e4 f0 8d 92 c4 a8 ac d2 d6 d8 e9 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 18 00 2c 00 00 00 00 d8 00 7c 00 00 05 ff 60 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 98 14 12 10 9d 9e 9f a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac 11 Data Ascii: GIF89a\| %+TYcgwz(0-5078?FM~!,\|` dihlp,tmx\|pH,rl:tJZvzxL.zn\|N~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	50009	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	962	OUT	GET /business/glmedia/1ptrans.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Mon, 27 Jan 2003 17:27:00 GMT Accept-Ranges: bytes ETag: "4cede84c29c6c21:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 44 Connection: close
2024-02-20 15:14:00 UTC	44	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff 33 cc 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 84 51 00 3b 00 Data Ascii: GIF89a3!,@Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	50012	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	962	OUT	GET /Business/glMedia/1ptrans.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Mon, 27 Jan 2003 17:27:00 GMT Accept-Ranges: bytes ETag: "4cede84c29c6c21:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 44 Connection: close
2024-02-20 15:14:00 UTC	44	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff 33 cc 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 84 51 00 3b 00 Data Ascii: GIF89a3!,@Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	50011	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	975	OUT	GET /Business/glmedia/external-link-symbol.svg HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Wed, 08 Jan 2020 20:52:31 GMT Accept-Ranges: bytes ETag: "9a6b9e8b65c6d51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 2135 Connection: close
2024-02-20 15:14:00 UTC	2135	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	50014	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	722	OUT	GET /business/glmedia/newHeader/Information%20for%20Business%20Taxpayers.png HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	268	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 17 Jan 2023 14:11:42 GMT Accept-Ranges: bytes ETag: "a13313a07d2ad91:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 9649 Connection: close
2024-02-20 15:14:00 UTC	4131	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 00 6c 08 03 00 00 00 ce b4 68 85 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 45 91 16 11 3b 88 54 c8 50 9d 2c 88 8a 38 4a 15 8b 60 a1 b4 15 5a 75 30 79 e9 1f 34 69 48 52 5c 1c 05 d7 82 83 3f 8b 55 07 17 67 5d 1d 5c 05 41 f0 07 c4 d5 c5 49 d1 45 4a bc 2f 29 b4 88 f1 c2 e3 7d 9c 77 cf e1 bd fb 00 a1 51 61 aa d9 35 01 a8 9a 65 a4 e2 31 31 9b 5b 15 7b 5e e1 c3 00 82 08 63 44 62 a6 9e 48 2f 66 e0 59 5f f7 d4 4d 75 17 e5 59 de 7d 7f 56 50 c9 9b 0c f0 89 c4 73 4c 37 2c e2 0d e2 99 4d 4b e7 bc 4f 1c 62 25 49 21 3e 27 1e 37 e8 82 c4 8f 5c 97 5d 7e e3 5c 74 58 e0 99 21 23 93 9a 27 0e 11 8b c5 0e 96 3b 98 95 0c 95 78 9a 38 a2 a8 1a e5 0b 59 97 15 Data Ascii: PNGIHDRlhiCCPICC profile(}=HPOSE;TP,8J`Zu0y4iHR\?Ug]\AIEJ/)}wQa5e11[{^cDbH/fY_MuY}VPsL7,MKOb%I!>'7\]~\tX!#';x8Y
2024-02-20 15:14:00 UTC	5518	IN	Data Raw: cf b2 c7 14 9f 16 8d 1b 8d 1d a4 b8 8b a5 ef e4 f3 1d 29 7b 51 3b b2 02 64 66 23 c0 8b ba f1 0b 90 44 23 cf 91 54 3d 57 44 5f 5a f9 57 36 7b de 9a 9d 9e 5d 6e ad 4d ce cc 4c 5e d9 68 ad 4d 4f 11 76 df 5f dd 21 ea 1d 10 7d 73 6f b3 33 dc dc 1f 1e 6e 6e 3d d8 6a 36 ff 91 f3 f2 89 85 52 b9 5c 0a 6b 47 9e 28 8f eb 45 43 17 b5 b1 e2 98 16 ae 6e d5 82 b8 f6 62 85 85 b5 17 c9 67 20 bd 0e 61 eb 81 3b 03 ea 3d 5f 2a 2b 81 7d ae c9 b2 5c a9 18 05 7a 87 51 a9 04 1f 2a f4 ae 31 f2 89 4a bf 7c 02 af 07 af e8 82 1f 7d df 8f ea 8b 17 36 87 0f 63 71 58 db 30 92 46 a5 21 70 bc f3 f8 28 0e 3f 2b f4 26 e2 4d 25 93 e8 06 d7 d0 e9 81 14 71 c7 e2 d5 56 3e 52 d1 f5 3a f7 78 3d 6a f9 46 2f 93 98 cb 8f 01 ea c6 ec d3 6c 45 cf b0 20 78 45 cf ca ac c2 4d 5c ba e1 1d 5d e3 6d e3 e8 Data Ascii: ){Q;df#D#T=WD_ZW6{]nML^hMOv_!}so3nn=j6R\kG(ECnbg a;=_+}\zQ1J\|}6cqX0F!p(?+&M%qV>R:x=jF/lE xEM\]m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	50013	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	965	OUT	GET /Business/glMedia/bluebullet.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 16 Dec 2004 17:11:20 GMT Accept-Ranges: bytes ETag: "9ad92f4392e3c41:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 62 Connection: close
2024-02-20 15:14:00 UTC	62	IN	Data Raw: 47 49 46 38 39 61 07 00 0a 00 91 00 00 ff ff ff 3d 7a b8 00 00 00 fe 01 02 21 f9 04 05 14 00 03 00 2c 00 00 00 00 07 00 0a 00 00 02 0f 84 8f a9 c1 0d dd 04 64 72 56 78 23 10 bc 17 00 3b Data Ascii: GIF89a=z!,drVx#;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	50010	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	964	OUT	GET /Business/glMedia/redbullet.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Fri, 23 May 2003 15:19:47 GMT Accept-Ranges: bytes ETag: "f21a69bf3e21c31:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 62 Connection: close
2024-02-20 15:14:00 UTC	62	IN	Data Raw: 47 49 46 38 39 61 07 00 0a 00 91 00 00 ff ff ff bc 11 27 00 00 00 fe 01 02 21 f9 04 05 14 00 03 00 2c 00 00 00 00 07 00 0a 00 00 02 0f 84 8f a9 c1 0d dd 04 64 72 56 78 23 10 bc 17 00 3b Data Ascii: GIF89a'!,drVx#;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	50015	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	682	OUT	GET /Business/glMedia/bFile_Logo.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	268	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 21 Jan 2020 22:56:07 GMT Accept-Ranges: bytes ETag: "b2d88cf7add0d51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:13:59 GMT Content-Length: 2413 Connection: close
2024-02-20 15:14:00 UTC	2413	IN	Data Raw: 47 49 46 38 39 61 d8 00 7c 00 c4 00 00 00 00 00 ff ff ff f2 f2 f7 1b 20 89 25 2b 8d 54 59 a7 63 67 ad 77 7a af d5 d6 e8 28 30 8f 2d 35 92 30 37 93 38 3f 98 46 4d 9f 7f 83 bc 7e 82 bb 8c 90 c4 9c 9f cb b7 ba db c6 c8 e1 e3 e4 f0 8d 92 c4 a8 ac d2 d6 d8 e9 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 18 00 2c 00 00 00 00 d8 00 7c 00 00 05 ff 60 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 98 14 12 10 9d 9e 9f a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac 11 Data Ascii: GIF89a\| %+TYcgwz(0-5078?FM~!,\|` dihlp,tmx\|pH,rl:tJZvzxL.zn\|N~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	50016	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	679	OUT	GET /business/glmedia/1ptrans.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Mon, 27 Jan 2003 17:27:00 GMT Accept-Ranges: bytes ETag: "4cede84c29c6c21:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:14:00 GMT Content-Length: 44 Connection: close
2024-02-20 15:14:00 UTC	44	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff 33 cc 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 84 51 00 3b 00 Data Ascii: GIF89a3!,@Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	50017	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	945	OUT	GET /favicon.ico HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactive.marylandtaxes.gov/business/bfile/osc/selectapp.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: PHP/8.3.3 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:15:13 GMT Content-Length: 56800 Connection: close
2024-02-20 15:14:00 UTC	5359	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 20 74 65 6d 70 6c 61 74 65 3d 22 2f 54 65 6d 70 6c 61 74 65 73 2f 4e 45 57 2d 74 65 6d 70 6c 61 74 65 2e 64 77 74 2e 70 68 70 22 20 63 6f 64 65 4f 75 74 73 69 64 65 48 54 4d 4c 49 73 4c 6f 63 6b 65 64 3d 22 66 61 6c 73 65 22 20 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 45 64 69 74 61 62 6c 65 20 6e 61 6d 65 3d 22 68 65 61 64 22 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 45 6e 64 45 64 69 74 61 62 6c 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 48 65 61 64 20 42 45 47 49 4e 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d Data Ascii: <!DOCTYPE html> <html class="no-js" lang="en">... InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" --><head>... InstanceBeginEditable name="head" -->... InstanceEndEditable -->... Head BEGIN --><!-
2024-02-20 15:14:00 UTC	7240	IN	Data Raw: 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 6e 61 76 62 61 72 2d 64 61 72 6b 20 6e 61 76 62 61 72 2d 73 74 61 74 69 63 2d 74 6f 70 20 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 6e 6f 2d 6d 61 72 67 69 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 20 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 20 69 64 3d 22 6e 61 76 62 61 72 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: style="padding: 0;"> <nav class="navbar navbar-default navbar-dark navbar-static-top no-border-radius no-margin" style="top: 0;"> <div class="container-fluid" id="navbar-inner-container">
2024-02-20 15:14:00 UTC	7240	IN	Data Raw: 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 43 6f 6e 74 61 63 74 20 54 61 78 70 61 79 65 72 20 53 65 72 76 69 63 65 73 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 43 6f 6e 74 61 63 74 20 54 61 78 70 61 79 65 72 20 53 65 72 76 69 63 65 73 22 3e 43 6f 6e 74 61 63 74 20 54 61 78 70 61 79 65 72 20 53 65 72 76 69 63 65 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 63 6f 6d 70 2e 70 68 70 23 6d 70 69 61 22 20 63 6c 61 73 73 3d 22 6d 65 Data Ascii: ass="menu-link-text" title="Contact Taxpayer Services" aria-label="Contact Taxpayer Services">Contact Taxpayer Services</a> <br> <a href="/divisions/comp.php#mpia" class="me
2024-02-20 15:14:00 UTC	7240	IN	Data Raw: 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 22 20 74 69 74 6c 65 3d 22 50 61 79 20 79 6f 75 72 20 74 61 78 65 73 20 64 72 6f 70 20 64 6f 77 6e 20 6d 65 6e 75 22 3e 20 50 61 79 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 6e 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 6e 6f 2d 70 61 64 64 69 6e 67 22 20 64 61 74 61 2d 61 64 6a 75 73 74 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 72 6f 77 2d 61 75 74 6f 68 65 69 67 68 74 20 6e 6f 2d 6d 61 72 67 69 6e 22 3e 0d 0a 20 20 20 Data Ascii: decoration: underline;" title="Pay your taxes drop down menu"> Pay </a> <div class="dropdown-menu no-border-radius no-padding" data-adjust="2"> <div class="row row-autoheight no-margin">
2024-02-20 15:14:00 UTC	5792	IN	Data Raw: 0d 0a 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 30 35 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 30 35 20 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 4e 6f 6e 72 65 73 69 64 65 6e 74 20 52 65 74 75 72 6e 22 3e 35 30 35 20 2d 0d 0a 09 09 09 09 09 09 09 09 09 09 4e 6f 6e 72 65 73 69 64 65 6e 74 20 52 65 74 75 72 6e 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 2f 66 6f 72 6d 73 2f 32 33 5f 66 6f 72 6d 73 2f 35 30 35 4e 52 2e 70 64 66 22 20 6c 61 62 65 6c 3d 22 35 30 35 4e 52 0d 0a 09 09 09 09 09 09 09 09 09 09 2d 20 4e 52 0d 0a 09 09 09 09 09 09 09 09 09 09 43 6f 6d 70 75 74 61 74 69 6f 6e 22 3e 0d 0a 09 09 09 09 09 09 Data Ascii: <option value="/forms/23_forms/505.pdf" label="505 -Nonresident Return">505 -Nonresident Return</option><option value="/forms/23_forms/505NR.pdf" label="505NR- NRComputation">
2024-02-20 15:14:00 UTC	7240	IN	Data Raw: 61 72 22 3e 57 68 61 74 27 73 20 4e 65 77 20 54 68 69 73 20 54 61 78 20 59 65 61 72 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 20 20 20 20 3c 62 72 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 69 6e 73 74 72 75 63 74 69 6f 6e 2d 62 6f 6f 6b 6c 65 74 73 32 30 32 33 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 49 6e 64 69 76 69 64 75 61 6c 20 54 61 78 20 49 6e 73 74 72 75 63 74 69 6f 6e 73 22 3e 49 6e 64 69 76 69 64 75 61 6c 20 54 61 78 20 49 6e 73 74 72 75 63 74 69 6f 6e 73 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 20 20 3c 62 72 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 74 65 72 61 63 74 69 76 65 2e 6d 61 72 79 6c 61 6e 64 Data Ascii: ar">What's New This Tax Year</a> <br><a href="/instruction-booklets2023.php" class="menu-link-text" title="Individual Tax Instructions">Individual Tax Instructions</a> <br><a href="https://interactive.maryland
2024-02-20 15:14:00 UTC	7240	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 75 6e 63 6c 61 69 6d 65 64 2d 70 72 6f 70 65 72 74 79 2f 69 6e 64 65 78 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 55 6e 63 6c 61 69 6d 65 64 20 50 72 6f 70 65 72 74 79 22 3e 55 6e 63 6c 61 69 6d 65 64 20 50 72 6f 70 65 72 74 79 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <a href="/unclaimed-property/index.php" class="menu-link-text" title="Unclaimed Property">Unclaimed Property</a> </div> </div>
2024-02-20 15:14:00 UTC	5792	IN	Data Raw: 69 63 65 73 20 28 4f 46 50 29 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 09 09 09 09 09 09 09 09 09 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 68 65 61 72 69 6e 67 73 2d 61 70 70 65 61 6c 73 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 48 65 61 72 69 6e 67 73 20 26 61 6d 70 3b 20 41 70 70 65 61 6c 73 22 3e 20 48 65 61 72 69 6e 67 73 20 26 61 6d 70 3b 20 41 70 70 65 61 6c 73 20 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 68 72 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 Data Ascii: ices (OFP) </a><hr> <a href="/divisions/hearings-appeals.php" class="menu-link-text" title="Hearings & Appeals"> Hearings & Appeals </a><hr> <a href="/divisions/hr.php" class="menu-link-text"
2024-02-20 15:14:00 UTC	1448	IN	Data Raw: 6c 67 2d 32 20 63 6f 6c 2d 6d 64 2d 32 20 63 6f 6c 2d 73 6d 2d 32 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 33 33 33 39 39 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 65 6d 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 65 6d 3b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 2e 35 65 6d 3b 22 3e 0d 0a 09 0d 0a 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 75 6c 22 3e 0d 0a 20 20 20 20 3c 6c 69 20 73 74 79 6c 65 3d 22 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 43 6f 6d 70 74 72 6f 6c 6c 65 72 6f 66 4d 61 72 79 6c 61 6e 64 2f 22 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d Data Ascii: lg-2 col-md-2 col-sm-2" style="background-color: #333399; padding-top: 1em; padding-bottom: 1em; padding-right: 0.5em;"> <ul class="footer-ul"> <li style="float: right;"><a href="https://www.facebook.com/ComptrollerofMaryland/" class="footer-
2024-02-20 15:14:00 UTC	2209	IN	Data Raw: 73 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 73 73 65 73 74 73 2f 6a 73 2f 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2f 6f 77 6c 2e 63 61 72 6f 75 73 65 6c 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0d 0a 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 73 73 65 73 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2d 65 61 73 69 6e 67 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0d 0a 3c 21 2d 2d Data Ascii: s/js/bootstrap.min.js" type="text/javascript"></script>...<script src="/assests/js/owl-carousel/owl.carousel.js" type="text/javascript"></script>-->...<script src="/assests/js/jquery-easing/jquery.easing.js" type="text/javascript"></script>-->...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	50020	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	679	OUT	GET /Business/glMedia/1ptrans.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Mon, 27 Jan 2003 17:27:00 GMT Accept-Ranges: bytes ETag: "4cede84c29c6c21:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:14:00 GMT Content-Length: 44 Connection: close
2024-02-20 15:14:00 UTC	44	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff 33 cc 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 84 51 00 3b 00 Data Ascii: GIF89a3!,@Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	50019	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	692	OUT	GET /Business/glmedia/external-link-symbol.svg HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Wed, 08 Jan 2020 20:52:31 GMT Accept-Ranges: bytes ETag: "9a6b9e8b65c6d51:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:14:00 GMT Content-Length: 2135 Connection: close
2024-02-20 15:14:00 UTC	2135	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	50021	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	682	OUT	GET /Business/glMedia/bluebullet.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:00 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Thu, 16 Dec 2004 17:11:20 GMT Accept-Ranges: bytes ETag: "9ad92f4392e3c41:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:14:00 GMT Content-Length: 62 Connection: close
2024-02-20 15:14:00 UTC	62	IN	Data Raw: 47 49 46 38 39 61 07 00 0a 00 91 00 00 ff ff ff 3d 7a b8 00 00 00 fe 01 02 21 f9 04 05 14 00 03 00 2c 00 00 00 00 07 00 0a 00 00 02 0f 84 8f a9 c1 0d dd 04 64 72 56 78 23 10 bc 17 00 3b Data Ascii: GIF89a=z!,drVx#;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	50022	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	1842	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-new-business%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2385240814&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 5049 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/business/register-new-business/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442035.0.0.0; rxvt=1708443835498\|1708441968947; dtPC=-2$242034739_332h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:14:00 UTC	5049	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 72 70 74 70 25 32 46 70 6f 72 74 61 6c 25 32 46 62 75 73 69 6e 65 73 73 25 32 46 72 65 67 69 73 74 65 72 2d 6e 65 77 2d 62 75 73 69 6e 65 73 73 25 32 46 21 75 74 25 32 46 70 25 32 46 7a 31 25 32 46 30 34 5f 53 6a 39 43 50 79 6b 73 73 79 30 78 50 4c 4d 6e 4d 7a 30 76 4d 41 66 49 6a 6f 38 7a 69 6a 53 30 4d 6e 4e 30 39 44 49 79 38 44 46 78 44 44 41 30 63 6a 66 78 39 76 64 30 38 77 67 77 4d 33 45 33 30 77 38 45 4b 44 48 41 41 52 77 50 39 4b 47 4c 30 34 31 45 51 68 64 5f 34 63 50 30 6f 56 43 76 63 51 34 4f 4e 44 42 7a 39 48 55 4e 4e 77 68 79 39 6a 41 7a 4d 7a 4b 41 4b 38 4a 68 52 6b 42 73 61 59 5a 44 70 71 41 67 41 69 77 56 39 63 41 21 21 25 32 46 64 7a 25 32 46 64 35 25 32 46 4c 32 64 42 49 53 45 76 5a 30 46 42 49 53 39 6e 51 53 45 68 Data Ascii: $tvn=%2Frptp%2Fportal%2Fbusiness%2Fregister-new-business%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh
2024-02-20 15:14:01 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:14:01 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:14:01 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	50018	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:00 UTC	681	OUT	GET /Business/glMedia/redbullet.gif HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:01 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Fri, 23 May 2003 15:19:47 GMT Accept-Ranges: bytes ETag: "f21a69bf3e21c31:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 20 Feb 2024 15:14:00 GMT Content-Length: 62 Connection: close
2024-02-20 15:14:01 UTC	62	IN	Data Raw: 47 49 46 38 39 61 07 00 0a 00 91 00 00 ff ff ff bc 11 27 00 00 00 fe 01 02 21 f9 04 05 14 00 03 00 2c 00 00 00 00 07 00 0a 00 00 02 0f 84 8f a9 c1 0d dd 04 64 72 56 78 23 10 bc 17 00 3b Data Ascii: GIF89a'!,drVx#;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	50023	167.102.245.62	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:01 UTC	662	OUT	GET /favicon.ico HTTP/1.1 Host: interactive.marylandtaxes.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAABADDQR=FEHFIKFCCOHOFEMCKELBPHOD; _ga_LSF75XJL4E=GS1.1.1708442011.1.0.1708442011.60.0.0; _ga=GA1.2.2101562765.1708442011; _gid=GA1.2.1067230564.1708442012; _gat_UA-111504782-1=1; _ga_VX6FNWE6LE=GS1.2.1708442013.1.0.1708442013.0.0.0; ASP.NET_SessionId=4q5mertxl4glkb3o0nc0y0lh
2024-02-20 15:14:01 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: PHP/8.3.3 X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' Date: Tue, 20 Feb 2024 15:15:14 GMT Content-Length: 56800 Connection: close
2024-02-20 15:14:01 UTC	6807	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 20 74 65 6d 70 6c 61 74 65 3d 22 2f 54 65 6d 70 6c 61 74 65 73 2f 4e 45 57 2d 74 65 6d 70 6c 61 74 65 2e 64 77 74 2e 70 68 70 22 20 63 6f 64 65 4f 75 74 73 69 64 65 48 54 4d 4c 49 73 4c 6f 63 6b 65 64 3d 22 66 61 6c 73 65 22 20 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 42 65 67 69 6e 45 64 69 74 61 62 6c 65 20 6e 61 6d 65 3d 22 68 65 61 64 22 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 49 6e 73 74 61 6e 63 65 45 6e 64 45 64 69 74 61 62 6c 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 48 65 61 64 20 42 45 47 49 4e 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d Data Ascii: <!DOCTYPE html> <html class="no-js" lang="en">... InstanceBegin template="/Templates/NEW-template.dwt.php" codeOutsideHTMLIsLocked="false" --><head>... InstanceBeginEditable name="head" -->... InstanceEndEditable -->... Head BEGIN --><!-
2024-02-20 15:14:01 UTC	7240	IN	Data Raw: 2d 78 73 2d 36 22 3e 0d 0a 09 09 09 09 09 09 09 20 20 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 36 70 78 3b 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 75 64 79 2d 6f 6c 64 2d 73 74 79 6c 65 2c 20 73 65 72 69 66 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 35 30 70 78 3b 22 3e 43 4f 4d 50 54 52 4f 4c 4c 45 52 26 6e 62 73 70 3b 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 75 64 79 2d 6f 6c 64 2d 73 74 79 6c 65 2c 20 73 65 72 69 66 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: -xs-6"> <p style="font-size: 36px; color: white; font-family: goudy-old-style, serif; font-weight: 400; justify-content: center; display: flex; padding-left: 250px;">COMPTROLLER  <span style="font-family: goudy-old-style, serif; font-weight
2024-02-20 15:14:01 UTC	7240	IN	Data Raw: 2d 72 69 67 68 74 20 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 62 75 73 69 6e 65 73 73 2f 69 6e 64 65 78 2e 70 68 70 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 20 70 61 64 64 69 6e 67 3a 20 6e 6f 6e 65 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6a 75 73 74 69 66 79 3b 22 20 74 69 74 6c 65 3d 22 42 75 73 69 6e 65 73 73 22 3e 42 75 73 69 6e 65 73 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: -right widget-default clearfix pad-0-25-sm"> <a href="/business/index.php" style="font-size: 14px; font-weight: 700; color: #222; padding: none; text-align: justify;" title="Business">Business</a>
2024-02-20 15:14:01 UTC	7240	IN	Data Raw: 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 61 75 74 6f 68 65 69 67 68 74 20 63 6c 65 61 72 66 69 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 2d 64 65 66 61 75 6c 74 20 63 6c 65 61 72 66 69 78 20 70 61 64 2d 30 2d 32 35 2d 73 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 22 3e 50 4f 50 55 4c 41 52 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ol-xs-12 col-autoheight clearfix"> <div class="widget-default clearfix pad-0-25-sm"> <p style="font-size: 14px; font-weight: 700;">POPULAR</p>
2024-02-20 15:14:01 UTC	7240	IN	Data Raw: 09 09 09 09 09 09 09 09 09 53 74 6f 70 20 50 79 6d 74 20 52 65 71 75 65 73 74 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 0d 0a 09 09 09 09 09 09 09 09 09 09 76 61 6c 75 65 3d 22 2f 69 6e 64 69 76 69 64 75 61 6c 2f 69 6e 63 6f 6d 65 2f 69 6e 63 6f 6d 65 2d 66 6f 72 6d 73 2d 69 6e 64 65 78 2e 70 68 70 23 77 69 74 68 68 6f 6c 64 69 6e 67 22 20 6c 61 62 65 6c 3d 22 57 69 74 68 68 6f 6c 64 69 6e 67 20 46 6f 72 6d 73 22 3e 57 69 74 68 68 6f 6c 64 69 6e 67 20 46 6f 72 6d 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 0d 0a 09 09 09 09 09 09 09 09 09 09 76 61 6c 75 65 3d 22 2f 69 6e 64 69 76 69 64 75 61 6c 2f 69 6e 63 6f 6d 65 2f 69 6e 63 6f 6d 65 2d 66 6f 72 6d 73 2d 69 6e 64 65 78 2e 70 Data Ascii: Stop Pymt Request</option><optionvalue="/individual/income/income-forms-index.php#withholding" label="Withholding Forms">Withholding Forms</option><optionvalue="/individual/income/income-forms-index.p
2024-02-20 15:14:01 UTC	7240	IN	Data Raw: 3a 20 37 30 30 3b 22 3e 43 6f 6d 6d 65 6e 74 20 26 61 6d 70 3b 20 4f 75 74 72 65 61 63 68 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 67 75 69 64 61 6e 63 65 2d 72 65 67 75 6c 61 74 69 6f 6e 73 2f 63 6f 6d 6d 65 6e 74 73 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 50 75 62 6c 69 63 20 43 6f 6d 6d 65 6e 74 73 22 3e 50 75 62 6c 69 63 20 43 6f 6d 6d 65 6e 74 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: : 700;">Comment & Outreach</p> <a href="/guidance-regulations/comments.php" class="menu-link-text" title="Public Comments">Public Comments</a> <br>
2024-02-20 15:14:01 UTC	2896	IN	Data Raw: 20 3c 61 20 68 72 65 66 3d 22 2f 6e 65 77 2d 74 61 78 2d 79 65 61 72 2d 75 70 64 61 74 65 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 57 68 61 74 27 73 20 4e 65 77 20 66 6f 72 20 74 68 65 20 54 61 78 20 59 65 61 72 20 32 30 32 33 22 3e 57 68 61 74 27 73 20 4e 65 77 20 66 6f 72 20 74 68 65 20 54 61 78 20 59 65 61 72 20 32 30 32 33 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f Data Ascii: <a href="/new-tax-year-update.php" class="menu-link-text" title="What's New for the Tax Year 2023">What's New for the Tax Year 2023</a> <br> <a href="/
2024-02-20 15:14:01 UTC	8688	IN	Data Raw: 63 65 20 44 69 76 69 73 69 6f 6e 20 28 43 44 29 22 3e 20 43 6f 6d 70 6c 69 61 6e 63 65 20 44 69 76 69 73 69 6f 6e 20 28 43 44 29 20 3c 2f 61 3e 3c 68 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 64 69 76 69 73 69 6f 6e 73 2f 61 66 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 2d 74 65 78 74 22 20 74 69 74 6c 65 3d 22 4f 66 66 69 63 65 20 6f 66 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 61 6e 64 20 46 69 6e 61 6e 63 65 20 28 41 20 26 61 6d 70 3b 20 46 29 20 22 3e 20 4f 66 66 69 63 65 20 6f 66 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 61 6e 64 20 46 69 6e 61 6e 63 65 20 28 41 20 26 61 6d 70 3b 20 46 29 20 3c 2f Data Ascii: ce Division (CD)"> Compliance Division (CD) </a><hr> <a href="/divisions/af.php" class="menu-link-text" title="Office of Administration and Finance (A & F) "> Office of Administration and Finance (A & F) </
2024-02-20 15:14:01 UTC	2209	IN	Data Raw: 73 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 73 73 65 73 74 73 2f 6a 73 2f 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2f 6f 77 6c 2e 63 61 72 6f 75 73 65 6c 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0d 0a 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 73 73 65 73 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2d 65 61 73 69 6e 67 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0d 0a 3c 21 2d 2d Data Ascii: s/js/bootstrap.min.js" type="text/javascript"></script>...<script src="/assests/js/owl-carousel/owl.carousel.js" type="text/javascript"></script>-->...<script src="/assests/js/jquery-easing/jquery.easing.js" type="text/javascript"></script>-->...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	50024	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:01 UTC	1344	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fbusiness%2Fregister-new-business%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8zijS0MnN09DIy8DFxDDA0cjfx9vd08wgwM3E30w8EKDHAARwP9KGL041EQhd_4cP0oVCvcQ4ONDBz9HUNNwhy9jAzMzKAK8JhRkBsaYZDpqAgAiwV9cA!!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2385240814&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442035.0.0.0; rxvt=1708443835498\|1708441968947; dtPC=-2$242034739_332h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:14:01 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:14:01 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:14:01 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	50027	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:03 UTC	1824	OUT	POST /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fmd-sutec%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2817284170&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive Content-Length: 5080 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://mdtaxconnect.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mdtaxconnect.gov/rptp/portal/home/md-sutec/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442035.0.0.0; rxvt=1708443835498\|1708441968947; dtPC=-2$242034739_332h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:14:03 UTC	5080	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 72 70 74 70 25 32 46 70 6f 72 74 61 6c 25 32 46 68 6f 6d 65 25 32 46 6d 64 2d 73 75 74 65 63 25 32 46 21 75 74 25 32 46 70 25 32 46 7a 31 25 32 46 30 34 5f 53 6a 39 43 50 79 6b 73 73 79 30 78 50 4c 4d 6e 4d 7a 30 76 4d 41 66 49 6a 6f 38 7a 69 54 52 31 4e 7a 44 77 38 33 51 32 4d 44 4d 30 74 44 41 33 4d 48 48 32 4d 54 64 31 39 41 77 77 4e 44 45 7a 30 77 38 45 4b 44 48 41 41 52 77 50 39 4b 47 4c 30 34 31 45 51 68 64 5f 34 63 50 30 6f 73 42 4a 6a 43 77 4e 6e 64 77 38 44 49 79 5f 33 30 47 41 6a 41 30 64 5f 78 31 43 54 4d 45 63 76 49 4d 73 45 71 67 43 50 47 51 57 35 6f 52 45 47 6d 59 36 4b 41 48 50 4a 4b 77 45 21 25 32 46 64 7a 25 32 46 64 35 25 32 46 4c 32 64 42 49 53 45 76 5a 30 46 42 49 53 39 6e 51 53 45 68 25 32 46 24 74 76 74 3d 31 Data Ascii: $tvn=%2Frptp%2Fportal%2Fhome%2Fmd-sutec%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F$tvt=1
2024-02-20 15:14:04 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:14:04 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 120 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET Set-Cookie: dtCookie=v_4_srv_17_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV_perc_100000_ol_0_mul_1_app-3A717c68634dfb8989_1; Path=/; Domain=.md.rpe
2024-02-20 15:14:04 UTC	120	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 37 4e 56 66 68 6a 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 31 31 37 31 35 32 32 31 34 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 30 38 31 36 36 32 36 35 30 36 38 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA27NVfhjqru\|version=\|buildNumber=10283240117152214\|lastModification=1708166265068

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	50028	20.141.131.150	443	4068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-20 15:14:04 UTC	1335	OUT	GET /rptp/mypoc/rb_28709ac7-8067-4033-904f-1495d953ea02?type=js3&sn=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV&svrid=-2&flavor=post&vi=RFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0&modifiedSince=1708166265068&rf=https%3A%2F%2Fmdtaxconnect.gov%2Frptp%2Fportal%2Fhome%2Fmd-sutec%2F!ut%2Fp%2Fz1%2F04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTR1NzDw83Q2MDM0tDA3MHH2MTd19AwwNDEz0w8EKDHAARwP9KGL041EQhd_4cP0osBJjCwNndw8DIy_30GAjA0d_x1CTMEcvIMsEqgCPGQW5oREGmY6KAHPJKwE!%2Fdz%2Fd5%2FL2dBISEvZ0FBIS9nQSEh%2F&bp=3&app=717c68634dfb8989&crc=2817284170&en=sbz95err&end=1 HTTP/1.1 Host: mdtaxconnect.gov Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PORTAL-PRDCORS=d9117d282d304dce7902cb932bcf6401; PORTAL-PRD=d9117d282d304dce7902cb932bcf6401; JSESSIONID=00017_VHxmGex_RRTgB7WPEBX5j:3HEJTVRQSD; dtCookie=v_4_srv_-2D2_sn_F8OIH0LDJAVM3KC08JS18MJMQTUJCPBV; rxVisitor=1708441968945MMORO1A8G9R3RPNDVGOGBB94TOIU7UUT; dtSa=-; _ga=GA1.1.1191083632.1708441971; _ga_C0MRJNQTD1=GS1.1.1708441971.1.1.1708442035.0.0.0; rxvt=1708443835498\|1708441968947; dtPC=-2$242034739_332h-vRFPDMAWODCNLSPHNHQNPCOUMHCHURGGU-0e0
2024-02-20 15:14:04 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 20 Feb 2024 15:14:04 GMT Content-Length: 6 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Methods: POST, GET
2024-02-20 15:14:04 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Target ID:	0
Start time:	16:12:41
Start date:	20/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:12:43
Start date:	20/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2256,i,11884261782894997089,10179543163277250750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:12:46
Start date:	20/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mdtaxconnect.gov//rptp/portal/home
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mdtaxconnect.gov//rptp/portal/home

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Windows Analysis Report
https://mdtaxconnect.gov//rptp/portal/home