Edit tour

Windows Analysis Report
https://greettive-tke-783743.pages.dev/help/contact/95094729232531

Overview

General Information

Sample URL:	https://greettive-tke-783743.pages.dev/help/contact/95094729232531
Analysis ID:	1446159
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on favicon image match)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2020,i,15421412117725282426,509490215148233789,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://greettive-tke-783743.pages.dev/help/contact/95094729232531" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://greettive-tke-783743.pages.dev/help/contact/95094729232531	Avira URL Cloud: detection malicious, Label: phishing
Source: https://greettive-tke-783743.pages.dev/help/contact/95094729232531	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://greettive-tke-783743.pages.dev/assets/banner-b1482d4c.webp	Avira URL Cloud: Label: phishing
Source: https://greettive-tke-783743.pages.dev/assets/facebook_logo_icon_147291-f2dfc6fd.ico	Avira URL Cloud: Label: phishing
Source: https://greettive-tke-783743.pages.dev/assets/index-ad6abe2c.js	Avira URL Cloud: Label: phishing
Source: https://greettive-tke-783743.pages.dev/assets/index-d076d531.css	Avira URL Cloud: Label: phishing

Phishing

Phishing site detected (based on favicon image match)

Source: https://greettive-tke-783743.pages.dev/help/contact/95094729232531

Matcher: Template: facebook matched with high similarity

Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.4:49755 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /help/contact/95094729232531 HTTP/1.1Host: greettive-tke-783743.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-ad6abe2c.js HTTP/1.1Host: greettive-tke-783743.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://greettive-tke-783743.pages.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://greettive-tke-783743.pages.dev/help/contact/95094729232531Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-d076d531.css HTTP/1.1Host: greettive-tke-783743.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://greettive-tke-783743.pages.dev/help/contact/95094729232531Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/banner-b1482d4c.webp HTTP/1.1Host: greettive-tke-783743.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://greettive-tke-783743.pages.dev/assets/index-d076d531.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://greettive-tke-783743.pages.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://greettive-tke-783743.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/facebook_logo_icon_147291-f2dfc6fd.ico HTTP/1.1Host: greettive-tke-783743.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://greettive-tke-783743.pages.dev/help/contact/95094729232531Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/8.46.123.175 HTTP/1.1Host: freeipapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://greettive-tke-783743.pages.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://greettive-tke-783743.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/banner-b1482d4c.webp HTTP/1.1Host: greettive-tke-783743.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/facebook_logo_icon_147291-f2dfc6fd.ico HTTP/1.1Host: greettive-tke-783743.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/8.46.123.175 HTTP/1.1Host: freeipapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: greettive-tke-783743.pages.dev
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: freeipapi.com

Source: chromecache_95.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_101.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_101.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-bootstrap
Source: chromecache_101.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Source: chromecache_101.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Source: chromecache_105.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_105.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_97.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.4:49755 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@16/26@16/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2020,i,15421412117725282426,509490215148233789,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://greettive-tke-783743.pages.dev/help/contact/95094729232531"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2020,i,15421412117725282426,509490215148233789,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://greettive-tke-783743.pages.dev/help/contact/95094729232531	100%	Avira URL Cloud	phishing
https://greettive-tke-783743.pages.dev/help/contact/95094729232531	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://cdn.jsdelivr.net/npm/bootstrap	0%	URL Reputation	safe
https://reactjs.org/docs/error-decoder.html?invariant=	0%	URL Reputation	safe
https://api.ipify.org/?format=json	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
https://cdn.jsdelivr.net/npm/react-bootstrap	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Avira URL Cloud	safe
https://greettive-tke-783743.pages.dev/assets/banner-b1482d4c.webp	100%	Avira URL Cloud	phishing
https://greettive-tke-783743.pages.dev/assets/facebook_logo_icon_147291-f2dfc6fd.ico	100%	Avira URL Cloud	phishing
https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js	0%	Avira URL Cloud	safe
https://greettive-tke-783743.pages.dev/assets/index-ad6abe2c.js	100%	Avira URL Cloud	phishing
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	0%	Avira URL Cloud	safe
https://freeipapi.com/api/json/8.46.123.175	0%	Avira URL Cloud	safe
https://greettive-tke-783743.pages.dev/assets/index-d076d531.css	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
greettive-tke-783743.pages.dev	172.66.47.121	true	false	unknown
freeipapi.com	188.114.97.3	true	false	unknown
api.ipify.org	104.26.12.205	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://greettive-tke-783743.pages.dev/assets/facebook_logo_icon_147291-f2dfc6fd.ico	false	Avira URL Cloud: phishing	unknown
https://greettive-tke-783743.pages.dev/assets/index-ad6abe2c.js	false	Avira URL Cloud: phishing	unknown
https://api.ipify.org/?format=json	false	URL Reputation: safe	unknown
https://greettive-tke-783743.pages.dev/assets/index-d076d531.css	false	Avira URL Cloud: phishing	unknown
https://freeipapi.com/api/json/8.46.123.175	false	Avira URL Cloud: safe	unknown
https://greettive-tke-783743.pages.dev/assets/banner-b1482d4c.webp	false	Avira URL Cloud: phishing	unknown
https://greettive-tke-783743.pages.dev/help/contact/95094729232531	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_101.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_105.2.dr	false	Avira URL Cloud: safe	unknown
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js	chromecache_101.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_105.2.dr	false	URL Reputation: safe	unknown
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	chromecache_101.2.dr	false	Avira URL Cloud: safe	unknown
http://jedwatson.github.io/classnames	chromecache_95.2.dr	false	URL Reputation: safe	unknown
https://cdn.jsdelivr.net/npm/react-bootstrap	chromecache_101.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.12.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
172.66.47.121	greettive-tke-783743.pages.dev	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	freeipapi.com	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1446159
Start date and time:	2024-05-23 00:12:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://greettive-tke-783743.pages.dev/help/contact/95094729232531
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@16/26@16/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, MoUsoCoreWorker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 216.58.212.174, 173.194.76.84, 34.104.35.123, 104.18.187.31, 104.18.186.31, 52.165.165.26, 93.184.221.240, 192.229.221.95, 13.85.23.206, 20.12.23.50, 216.58.212.163, 40.127.169.103
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://greettive-tke-783743.pages.dev/help/contact/95094729232531

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://greettive-tke-783743.pages.dev/help/contact/95094729232531 Model: Perplexity: mixtral-8x7b-instruct	```json { "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No 'Login', 'Sign In', or similar submit button is present in the text." ] }
Facebo k Bu$uness H e Ip enter How can we help you? How can we help? We need more information to address your issue. This form will only take a few minutes. Most common issues I need to contact the support team Next )

Input

Output

URL: https://greettive-tke-783743.pages.dev/help/contact/95094729232531 Model: Perplexity: mixtral-8x7b-instruct

```json
{
  "loginform": false,
  "reasons": [
    "No input fields for username or password are present in the text.",
    "No 'Login', 'Sign In', or similar submit button is present in the text."
  ]
}

Facebo k Bu$uness H e Ip enter How can we help you? How can we help? We need more information to address your issue. This form will only take a few minutes. Most common issues I need to contact the support team Next )

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10138)
Category:	downloaded
Size (bytes):	10139
Entropy (8bit):	4.71212553801944
Encrypted:	false
SSDEEP:	96:4Dw4yJ24lUXxk4e06i0y2y171sSIK6yR+VfjbqSWN4RdwYM+N0RP9oe+zvc4MV9q:4DC24+oD5vqSWgjMXoe6MUoSd
MD5:	9E8A83940F70CF868AB9FF3AF0F4B4C8
SHA1:	EE8165BDED6AA3AECCE0697AD22D602C11BF3085
SHA-256:	D076D531CC08F01D753F7CDA70ED0E97907546F161CBF470B72EF2FEA31C1F0B
SHA-512:	EA8365E9322E7AF32DD12A301592A845D11A4E96D13F578E66A6BF2C4D543C88A980176FEF149CC3E305B3C74B7ACF3BA7DADE07584434646C52FBF66A1877F2
Malicious:	false
Reputation:	low
URL:	https://greettive-tke-783743.pages.dev/assets/index-d076d531.css
Preview:	.logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-reduced-motion: no-preference){a:nth-of-type(2) .logo{animation:logo-spin infinite 20s linear}}.card{padding:2em}.read-the-docs{color:#888}.banner{position:relative;padding:14.5vh 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-image:url(/assets/banner-b1482d4c.webp)}.banner-content{position:absolute;top:0;right:0;bottom:0;left:0;z-index:1;display:flex;justify-content:center;align-items:center;flex-direction:column;padding:0 20px;color:#fff!important}.banner-content h5{font-size:14px;font-family:Freight Sans LF Pro Semibold,Helvetica,Arial,sans-serif;text-rendering:optimizelegibility;letter-spacing:4px;font-weight:600;margin-bottom:2.8vh}.banner-content h1{font-family:Freight Sans LF Pro Light,Helvetica,A

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	5.051070511894277
Encrypted:	false
SSDEEP:	24:0p0JvdYt3DA9iQCCtoJPWzrV2/7E95mSCNeMkSCcO0MkY4Nu:0hA9i2mKs/7GhCAMJC+MyNu
MD5:	0B54C00EAF8DB115115CBEE62FE666B3
SHA1:	C8A95305156D42E2643DE20887F6073A114F2F05
SHA-256:	D0EC3F116363476DA273F569F19DC87DE41604F9FB972A60849D409562806BBE
SHA-512:	FBD83D880A3613D95DD9022C44436D3D9EC97232F93F217DBCEFC9F64B6F55E5E8095CC2BAC3976D6BCDB9AC554F367E1AD1BFD727B335AD90FB53B2154DCA04
Malicious:	false
Reputation:	low
URL:	https://greettive-tke-783743.pages.dev/help/contact/95094729232531
Preview:	<!doctype html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <link rel="icon" type="image/svg+xml" href="/assets/facebook_logo_icon_147291-f2dfc6fd.ico" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link. rel="stylesheet". href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css". integrity="sha384-9ndCyUaIbzAi2FUVXJi0CjmCapSmO7SnpJef0486qhLnuZ2cdeRhO02iuK6FUUVM". crossorigin="anonymous". />. <title>Business Help Center \| Privacy Policy</title>. <script type="module" crossorigin src="/assets/index-ad6abe2c.js"></script>. <link rel="stylesheet" href="/assets/index-d076d531.css">. </head>. <body>. <div id="root"></div>. . </body>. <script src="https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js" crossorigin></script>. <script. src="https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js". crossorigin></script>. <script. src="https://cdn.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1089
Entropy (8bit):	4.941933023440703
Encrypted:	false
SSDEEP:	24:YydtBmCf205hNkHRuYDmSnfC3MLu2Y204/z:YmD205huH8OmSn63a
MD5:	3C86B80FE64A097437425DA3C6ABE4B8
SHA1:	59ED32368734BD5DBFFCD67F585EA09D7975F44D
SHA-256:	4674187050894318DEE6F80B8FE9D3CA9EC7F90C6F92BCDEE096810029D439F5
SHA-512:	AAD99C9FC2F36CA6DBCC68C0384973C57A601E3017AE5DDFED720F0C6E197905AFA425D7F82E9258E12A087CFF06A84737198C86A56AC1885E2DCFE04163FA48
Malicious:	false
Reputation:	low
URL:	https://freeipapi.com/api/json/8.46.123.175
Preview:	{"ipVersion":4,"ipAddress":"8.46.123.175","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,"continent":"Americas","continentCode":"AM","currency":{"code":"USD","name":"US Dollar"},"language":"English","timeZones":["America\/Adak","America\/Anchorage","America\/Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Beulah","America\/North_Dakota\/Center","America\/North_Dakota\/New_Salem","A

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	10751
Entropy (8bit):	5.3269914599293475
Encrypted:	false
SSDEEP:	192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G
MD5:	E91B2616629791B375867C298DC846CC
SHA1:	AA77AE4C49F525BC21DE1D04F08A5D73962C7CCE
SHA-256:	D949F1C3687AEDADCEDAC85261865F29B17CD273997E7F6B2BFC53B2F9D4C4DD
SHA-512:	415B3C2E8E3717D952B81CA469D0DBD284970CBFC16D9E7CF2EAD6542470488A1EC10BFF1308357FCE262B753BF746D9D057E115AD584905262211BEA4844A7A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	119175
Entropy (8bit):	5.312931607745592
Encrypted:	false
SSDEEP:	3072:rOoUFMlBxwlHb1Vjcpnd8US74ZnhA1IvUbidhmje7rP5yx60sC:ZZhAqvUbghUe7rPkkc
MD5:	365E05DCCD2211EEABA31DEFF514F5FA
SHA1:	A36F8E61ECCC12C333A44713DC4FAE6EC1548FC4
SHA-256:	150523E0558852A799AAE470EE18FDB61F89CF260EE6DA8EFD8687621156AE33
SHA-512:	F63CEC52665F84B468648C1C21AA4367724925E38C92E460851E0BCEAA9A6AAF215BBBCAD63945C7AF4A58368400F86035275E5D1C5AA308A856E79ED1B71534
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js
Preview:	/! For license information please see react-bootstrap.min.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","react-dom"],t):"object"==typeof exports?exports.ReactBootstrap=t(require("react"),require("react-dom")):e.ReactBootstrap=t(e.React,e.ReactDOM)}(self,((e,t)=>(()=>{var n={814:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function o(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var a=typeof n;if("string"===a\|\|"number"===a)e.push(n);else if(Array.isArray(n)){if(n.length){var s=o.apply(null,n);s&&e.push(s)}}else if("object"===a){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var i in n)r.call(n,i)&&n[i]&&e.push(i)}}}return e.join(" ")}e.exports?(o.default=o,e.exports=o):void 0===(n=function(){return o}.apply(t,[]))\|\|(e.expor

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.689703732199547
Encrypted:	false
SSDEEP:	3:YMb1gXMLQHY:YMeXFY
MD5:	5DA2A3FC880852D94D30E1C36942DA64
SHA1:	1FBA3A8452490F92741EAB2E2E264672459C25D7
SHA-256:	5BD3941594A0DB01B025F43A66AA85DEBFBC8EA6B708040095F388EE1656750C
SHA-512:	30640E214E98366335EF218FC14664D5EAFAEFEFD079904C77CE09109001AA90C793BCCE0E4505D1A6049AD39B11B4F9D3B3C76FF9302706C5D0B12BC3C176FC
Malicious:	false
Reputation:	low
Preview:	{"ip":"8.46.123.175"}

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Category:	dropped
Size (bytes):	67646
Entropy (8bit):	2.9987858597351176
Encrypted:	false
SSDEEP:	192:o9hmOxc0e2tbU/nDa23cIwAhvr1tyIVV5/dCaVi6W4ln6EdDfqpGG5:2me0aYcIwAhZUIVMKtlP1fRG5
MD5:	B4ED067CD6FD61A575E883605547D535
SHA1:	C159935982F1CDF3F04419C8C863FD3D030BF5FE
SHA-256:	F2DFC6FD9ED43D5C82D0F40627D75A70C26DBFA9B6AA1C450FBD75E5F0AD2CFD
SHA-512:	1C2D2F88FFF5C75127E97FCAEC3C8597738ADAFCA9E98BCE43886E1BEEEBDCECD0D0BCD46A145B94C6ADAEE39540E6C559189CDF0D4C820B35F6B66BB9452761
Malicious:	false
Reputation:	low
Preview:	............ .(.......(............. .........{...{............................................................................................................................................................................x...x...u...{...w...w...w...w...w...x...u...8...n...(....P...r...................................................................w...S.(-.n.......v...x...w...w...w...w...w...w...w...w...y........................................................................................................................................................................................................................................................................................................................ ..x...v...u...x...w...w...s...w...w!..x...w.#.w.T.w...x...t...'..................................................................................'..t...x...w...w.W.w.#.v...w...w...r...w...w...w...z...x...v...t................................................................

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Category:	downloaded
Size (bytes):	67646
Entropy (8bit):	2.9987858597351176
Encrypted:	false
SSDEEP:	192:o9hmOxc0e2tbU/nDa23cIwAhvr1tyIVV5/dCaVi6W4ln6EdDfqpGG5:2me0aYcIwAhZUIVMKtlP1fRG5
MD5:	B4ED067CD6FD61A575E883605547D535
SHA1:	C159935982F1CDF3F04419C8C863FD3D030BF5FE
SHA-256:	F2DFC6FD9ED43D5C82D0F40627D75A70C26DBFA9B6AA1C450FBD75E5F0AD2CFD
SHA-512:	1C2D2F88FFF5C75127E97FCAEC3C8597738ADAFCA9E98BCE43886E1BEEEBDCECD0D0BCD46A145B94C6ADAEE39540E6C559189CDF0D4C820B35F6B66BB9452761
Malicious:	false
Reputation:	low
URL:	https://greettive-tke-783743.pages.dev/assets/facebook_logo_icon_147291-f2dfc6fd.ico
Preview:	............ .(.......(............. .........{...{............................................................................................................................................................................x...x...u...{...w...w...w...w...w...x...u...8...n...(....P...r...................................................................w...S.(-.n.......v...x...w...w...w...w...w...w...w...w...y........................................................................................................................................................................................................................................................................................................................ ..x...v...u...x...w...w...s...w...w!..x...w.#.w.T.w...x...t...'..................................................................................'..t...x...w...w.W.w.#.v...w...w...r...w...w...w...z...x...v...t................................................................

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37546)
Category:	downloaded
Size (bytes):	278589
Entropy (8bit):	5.394152184894454
Encrypted:	false
SSDEEP:	3072:20T6Zr/NjcqhaZ/BktXbherv81G6FWsGh+u8K+JgYGc9j2F9cKFvs1b:N4aZaCv8/FWsG6bJgYGc9j27PFvs1b
MD5:	43BCA64059EC6E2A19DCF9A6E704D97A
SHA1:	B60DDA8AB99E2B6F8A2CE6FF0069E03ED7E2E152
SHA-256:	1E960A72DBF29AE14E949DE12493ABE39FE1A568A3E36BC45914D8D017C58733
SHA-512:	C3939BA08BC1ACE3E79634933EDA06C58A1796F5D893C95872006CA6DF6791888F1FC856788B95318D6DE710D0C2D19AC29B813558CB46C1FBB705423DB49F9C
Malicious:	false
Reputation:	low
URL:	https://greettive-tke-783743.pages.dev/assets/index-ad6abe2c.js
Preview:	var jh=Object.defineProperty;var _h=(e,t,n)=>t in e?jh(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var le=(e,t,n)=>(_h(e,typeof t!="symbol"?t+"":t,n),n);function Ph(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const o in r)if(o!=="default"&&!(o in e)){const l=Object.getOwnPropertyDescriptor(r,o);l&&Object.defineProperty(e,o,l.get?l:{enumerable:!0,get:()=>r[o]})}}}return Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const l of o)if(l.type==="childList")for(const i of l.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(o){const l={};return o.integrity&&(l.integrity=o.integrity),o.referrerPolicy&&(l.referrerPolicy=

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.689703732199547
Encrypted:	false
SSDEEP:	3:YMb1gXMLQHY:YMeXFY
MD5:	5DA2A3FC880852D94D30E1C36942DA64
SHA1:	1FBA3A8452490F92741EAB2E2E264672459C25D7
SHA-256:	5BD3941594A0DB01B025F43A66AA85DEBFBC8EA6B708040095F388EE1656750C
SHA-512:	30640E214E98366335EF218FC14664D5EAFAEFEFD079904C77CE09109001AA90C793BCCE0E4505D1A6049AD39B11B4F9D3B3C76FF9302706C5D0B12BC3C176FC
Malicious:	false
Reputation:	low
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"8.46.123.175"}

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131835
Entropy (8bit):	5.376665898737896
Encrypted:	false
SSDEEP:	1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm
MD5:	7D4842A904E5D5D1B19240075998B111
SHA1:	FEB8DDC9D0566A4FA0971A6E1138658618CDACFE
SHA-256:	35F4F974F4B2BCD44DA73963347F8952E341F83909E4498227D4E26B98F66F0D
SHA-512:	E9AD75D3BAD3940E2062980702A6F02C0B719968A905D24572AF32E52FDA4E07B7069F95024940066D8B3BE2A0E75BCE591F49319AB53AF8E5E6DA65B8DA5379
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,zb){"object"===typeof exports&&"undefined"!==typeof module?zb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],zb):(Q=Q\|\|self,zb(Q.ReactDOM={},Q.React))})(this,function(Q,zb){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function mb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function bj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1089
Entropy (8bit):	4.941933023440703
Encrypted:	false
SSDEEP:	24:YydtBmCf205hNkHRuYDmSnfC3MLu2Y204/z:YmD205huH8OmSn63a
MD5:	3C86B80FE64A097437425DA3C6ABE4B8
SHA1:	59ED32368734BD5DBFFCD67F585EA09D7975F44D
SHA-256:	4674187050894318DEE6F80B8FE9D3CA9EC7F90C6F92BCDEE096810029D439F5
SHA-512:	AAD99C9FC2F36CA6DBCC68C0384973C57A601E3017AE5DDFED720F0C6E197905AFA425D7F82E9258E12A087CFF06A84737198C86A56AC1885E2DCFE04163FA48
Malicious:	false
Reputation:	low
Preview:	{"ipVersion":4,"ipAddress":"8.46.123.175","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,"continent":"Americas","continentCode":"AM","currency":{"code":"USD","name":"US Dollar"},"language":"English","timeZones":["America\/Adak","America\/Anchorage","America\/Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Beulah","America\/North_Dakota\/Center","America\/North_Dakota\/New_Salem","A

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
URL:	https://greettive-tke-783743.pages.dev/assets/banner-b1482d4c.webp
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 23, 2024 00:12:56.122700930 CEST	49675	443	192.168.2.4	173.222.162.32
May 23, 2024 00:12:57.247636080 CEST	49678	443	192.168.2.4	104.46.162.224
May 23, 2024 00:13:03.150059938 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.150088072 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.150604963 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.150624037 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.150682926 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.150933027 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.150945902 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.150973082 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.151180029 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.151218891 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.628782034 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.629125118 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.629138947 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.630012035 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.630074978 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.631314993 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.631371975 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.631553888 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.631561041 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.638976097 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.639540911 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.639602900 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.641058922 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.641135931 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.641549110 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.641638994 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.685005903 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.685069084 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.731297970 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.731313944 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.818778992 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.818872929 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.821686029 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.824233055 CEST	49735	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.824248075 CEST	443	49735	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.839293003 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.839370012 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.839452028 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.840121984 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.840421915 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:03.840457916 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:03.886497021 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.020750999 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.021703959 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.021740913 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.021909952 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.021971941 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.022030115 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.024290085 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.027012110 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.028157949 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.028173923 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.029670000 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.032125950 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.032171011 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.032208920 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.032208920 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.032227993 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.032250881 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.032274961 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.034635067 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.079994917 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.080025911 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.111354113 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.111390114 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.111418009 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.111449003 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.112909079 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.113620996 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.115928888 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.115958929 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.115987062 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.116013050 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.116070032 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.118221045 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.120652914 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.120678902 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.120707989 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.120728970 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.120839119 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.122349977 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.124133110 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.124167919 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.124211073 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.124238014 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.124291897 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.125979900 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.127801895 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.127839088 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.127863884 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.127875090 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.127922058 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.129436016 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.130856037 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.130894899 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.130909920 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.130920887 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.130976915 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.132468939 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.134032011 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.134079933 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.134088993 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.187040091 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.187068939 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.202682018 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.202739954 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.202785015 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.202811003 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.202843904 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.206093073 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.206176043 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.206187010 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.206216097 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.206233978 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.208601952 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.208687067 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.208702087 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.208765984 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.210370064 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.210458994 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.213077068 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.213152885 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.215825081 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.215917110 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.217531919 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.217618942 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.219584942 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.219672918 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.221976042 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.222062111 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.223182917 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.223270893 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.225023031 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.225119114 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.226593018 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.226682901 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.228207111 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.228290081 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.229716063 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.229799032 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.291520119 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.291630030 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.292042017 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.292121887 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.294203997 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.294291019 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.295798063 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.295885086 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.296849966 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.296916008 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.299669981 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.299745083 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.299998045 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.300070047 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.301532984 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.301613092 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.302462101 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.302552938 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.304122925 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.304208040 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.304965019 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.305041075 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.306711912 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.306787014 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.307545900 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.307620049 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.314537048 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.314613104 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.314635992 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.314706087 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.315598011 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.315674067 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.317040920 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.317131996 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.318016052 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.318090916 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.318761110 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.318842888 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.320308924 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.320391893 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.321059942 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.321140051 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.322678089 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.322747946 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.323452950 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.323525906 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.324911118 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.324979067 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.326499939 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.326574087 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.329735994 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.329756975 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.329797029 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.329824924 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.329842091 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.329869032 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.329888105 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.342325926 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.342685938 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.342711926 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.343034983 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.343446016 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.343517065 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.343636990 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.383320093 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.383351088 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.383426905 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.383451939 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.383486986 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.383511066 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.386533976 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.387774944 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.387821913 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.387870073 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.387885094 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.387921095 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.387939930 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.390686989 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.390732050 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.390791893 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.390805006 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.390836954 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.390861988 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.390872955 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.390985966 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.391052961 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.391185045 CEST	49736	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.391213894 CEST	443	49736	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.578793049 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.578982115 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.579005957 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.579039097 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.579041958 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.579092026 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.579123974 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.583955050 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.584027052 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.584043980 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.586879969 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.586941004 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.586954117 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.587033987 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:04.587090015 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.747513056 CEST	49737	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:04.747574091 CEST	443	49737	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.239278078 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.239343882 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.239418030 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.240035057 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.240076065 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.260633945 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:05.260720015 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:05.260879993 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:05.261042118 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:05.261076927 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:05.731976986 CEST	49675	443	192.168.2.4	173.222.162.32
May 23, 2024 00:13:05.754245996 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.754532099 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.754549026 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.755091906 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.756098032 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.756181002 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.756769896 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.792207956 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:05.792762995 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:05.792826891 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:05.793781042 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:05.793850899 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:05.796123981 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:05.796190977 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:05.796681881 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:05.796699047 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:05.802526951 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.839459896 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:05.970984936 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.973681927 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.973731041 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.973751068 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.976553917 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.976579905 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.976603031 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.976617098 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.976655006 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.984803915 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.990372896 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.990396023 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.990422964 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.990438938 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.990487099 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.994808912 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.994860888 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.994901896 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.994913101 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.999252081 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:05.999310970 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:05.999321938 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:06.004439116 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:06.004513979 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:06.004582882 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:06.005099058 CEST	49745	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:06.005136967 CEST	443	49745	104.26.12.205	192.168.2.4
May 23, 2024 00:13:06.039221048 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:06.087680101 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:06.087898016 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:06.087945938 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:06.088380098 CEST	49744	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:06.088393927 CEST	443	49744	172.66.47.121	192.168.2.4
May 23, 2024 00:13:06.462589025 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:06.462611914 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:13:06.462677002 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:06.463427067 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:06.463445902 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:13:06.466530085 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:06.466538906 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:06.466766119 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:06.467262030 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:06.467277050 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:06.532529116 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:06.532557011 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:06.532613039 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:06.544652939 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:06.544673920 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:06.544893980 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:06.564950943 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:06.565037966 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:06.565129995 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:06.571033955 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:06.571108103 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:06.571526051 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:06.571588993 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:06.571965933 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:06.571980953 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:07.006372929 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.041075945 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.041099072 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.041450024 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.080055952 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.080163002 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.080342054 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.090887070 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:07.092257977 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:07.092298031 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:07.093960047 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:07.094038010 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:07.095884085 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:07.095973015 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:07.096189022 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:07.096203089 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:07.098424911 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:07.098959923 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:07.098969936 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:07.100399017 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:07.100465059 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:07.100984097 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:07.101064920 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:07.101624012 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:07.101639032 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:07.102802038 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.103115082 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.103176117 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.104152918 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.104221106 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.104547024 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.104614019 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.104760885 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.104780912 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.122525930 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.136859894 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:07.152384043 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.153625965 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:07.189526081 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:13:07.189996958 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:07.190026045 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:13:07.190906048 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:13:07.191051960 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:07.191251993 CEST	49751	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:07.191333055 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:07.191406012 CEST	49751	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:07.193212032 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:07.193286896 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:13:07.195770979 CEST	49751	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:07.195811987 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:07.221172094 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.224004030 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.224026918 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.224158049 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.224190950 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.224248886 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.227121115 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.230314970 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.230442047 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.230451107 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.231897116 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.232032061 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.232062101 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.235071898 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.235120058 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.235130072 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.240091085 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.240144014 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.240153074 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.246623993 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:07.246651888 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:13:07.277455091 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.280205965 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.280237913 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.280272007 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.280335903 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.280385971 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.282921076 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.284248114 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.284296989 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.284313917 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.288382053 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.288403988 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.288430929 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.288446903 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.288496971 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.290549994 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.290601969 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.290647984 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.290662050 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.293484926 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.293484926 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:07.308661938 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.311604977 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.311671019 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.311702013 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.312880993 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.312907934 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.313020945 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.313051939 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.313102007 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.315316916 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.319029093 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.319051027 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.319082022 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.319092989 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.319138050 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.319144964 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.322444916 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.322467089 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.322496891 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.322505951 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.322547913 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.324450016 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.326626062 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:07.326714039 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:07.326788902 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:07.327359915 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.327398062 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.327406883 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.329325914 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.329365969 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.329374075 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.331317902 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.331348896 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.331371069 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.331378937 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.331419945 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.334007978 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.334064007 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.334116936 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.334125042 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.334615946 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.336570024 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.336623907 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.336632013 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.348292112 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:07.348599911 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:07.348669052 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:07.367398024 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.372752905 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.372812033 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.372829914 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.372873068 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.387160063 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.397414923 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.401119947 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.401259899 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.401289940 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.401343107 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.402777910 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.402784109 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.402831078 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.406629086 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.406692028 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.406699896 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.406734943 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.406776905 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.415636063 CEST	49750	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.415695906 CEST	443	49750	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.417826891 CEST	49748	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:07.417856932 CEST	443	49748	188.114.97.3	192.168.2.4
May 23, 2024 00:13:07.417915106 CEST	49749	443	192.168.2.4	104.26.12.205
May 23, 2024 00:13:07.417929888 CEST	443	49749	104.26.12.205	192.168.2.4
May 23, 2024 00:13:07.419744968 CEST	49747	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:07.419775009 CEST	443	49747	172.66.47.121	192.168.2.4
May 23, 2024 00:13:07.839812040 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:07.839939117 CEST	49751	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:07.842843056 CEST	49751	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:07.842869043 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:07.843112946 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:07.880964994 CEST	49751	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:07.922568083 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:08.135812044 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:08.135896921 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:08.135966063 CEST	49751	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:08.573894978 CEST	49751	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:08.573894978 CEST	49751	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:08.573928118 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:08.573946953 CEST	443	49751	2.19.104.72	192.168.2.4
May 23, 2024 00:13:09.045026064 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.045063972 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.045121908 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.045790911 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.045824051 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.063879013 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.063961029 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.064042091 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.067904949 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.067984104 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.110419035 CEST	49755	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:09.110466957 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:09.110544920 CEST	49755	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:09.111135006 CEST	49755	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:09.111149073 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:09.534261942 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.534519911 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.534535885 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.534909010 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.535315990 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.535384893 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.535523891 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.567612886 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.568176031 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.568234921 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.571805000 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.571885109 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.573015928 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.573191881 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.573201895 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.582499027 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.618511915 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.626827955 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.626883984 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.673825026 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.769613028 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.773101091 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.773153067 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.773160934 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.773175001 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.773215055 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.780577898 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.791858912 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.791879892 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.791994095 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.792018890 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.792062998 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.799467087 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.799503088 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.799537897 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.799542904 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.808876038 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.808896065 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.808921099 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.808926105 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.808962107 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.816703081 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.817028999 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.817202091 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.825449944 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:09.825573921 CEST	49755	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:09.842468023 CEST	49755	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:09.842492104 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:09.842891932 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:09.844176054 CEST	49755	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:09.845447063 CEST	49754	443	192.168.2.4	188.114.97.3
May 23, 2024 00:13:09.845510006 CEST	443	49754	188.114.97.3	192.168.2.4
May 23, 2024 00:13:09.854469061 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.858805895 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.858848095 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.858942032 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.858968973 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.859016895 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.863334894 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.865602016 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.865673065 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.865688086 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.870196104 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.870250940 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.870256901 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.874691963 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.874737978 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.874743938 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.883323908 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.883372068 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.883379936 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.886362076 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.886420012 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.886425972 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.888434887 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.888478994 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.888484001 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.890496969 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:09.895535946 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.895580053 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.895584106 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.898751020 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.898778915 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.898802996 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.898819923 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.898869038 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.902837992 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.906004906 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.906059027 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.906070948 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.942759037 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.942781925 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.942821026 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.942827940 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.942867041 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.949261904 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.949326038 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.952517986 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.952579021 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.955601931 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.957144976 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.957204103 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.957216024 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.957237959 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:09.957268000 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:09.957300901 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:10.014338970 CEST	49753	443	192.168.2.4	172.66.47.121
May 23, 2024 00:13:10.014360905 CEST	443	49753	172.66.47.121	192.168.2.4
May 23, 2024 00:13:10.090723991 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:10.090797901 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:10.090838909 CEST	49755	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:10.091816902 CEST	49755	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:10.091835976 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:10.091845989 CEST	49755	443	192.168.2.4	2.19.104.72
May 23, 2024 00:13:10.091850996 CEST	443	49755	2.19.104.72	192.168.2.4
May 23, 2024 00:13:17.099029064 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:13:17.099215984 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:13:17.099282980 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:18.273690939 CEST	49746	443	192.168.2.4	216.58.206.36
May 23, 2024 00:13:18.273719072 CEST	443	49746	216.58.206.36	192.168.2.4
May 23, 2024 00:14:06.493546963 CEST	49764	443	192.168.2.4	216.58.206.36
May 23, 2024 00:14:06.493577003 CEST	443	49764	216.58.206.36	192.168.2.4
May 23, 2024 00:14:06.493776083 CEST	49764	443	192.168.2.4	216.58.206.36
May 23, 2024 00:14:06.494502068 CEST	49764	443	192.168.2.4	216.58.206.36
May 23, 2024 00:14:06.494512081 CEST	443	49764	216.58.206.36	192.168.2.4
May 23, 2024 00:14:07.155481100 CEST	443	49764	216.58.206.36	192.168.2.4
May 23, 2024 00:14:07.155790091 CEST	49764	443	192.168.2.4	216.58.206.36
May 23, 2024 00:14:07.155807018 CEST	443	49764	216.58.206.36	192.168.2.4
May 23, 2024 00:14:07.156137943 CEST	443	49764	216.58.206.36	192.168.2.4
May 23, 2024 00:14:07.156461954 CEST	49764	443	192.168.2.4	216.58.206.36
May 23, 2024 00:14:07.156527996 CEST	443	49764	216.58.206.36	192.168.2.4
May 23, 2024 00:14:07.200710058 CEST	49764	443	192.168.2.4	216.58.206.36
May 23, 2024 00:14:17.086594105 CEST	443	49764	216.58.206.36	192.168.2.4
May 23, 2024 00:14:17.086671114 CEST	443	49764	216.58.206.36	192.168.2.4
May 23, 2024 00:14:17.086868048 CEST	49764	443	192.168.2.4	216.58.206.36
May 23, 2024 00:14:18.171125889 CEST	49764	443	192.168.2.4	216.58.206.36
May 23, 2024 00:14:18.171152115 CEST	443	49764	216.58.206.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 23, 2024 00:13:01.984220028 CEST	53	61582	1.1.1.1	192.168.2.4
May 23, 2024 00:13:02.025002956 CEST	53	62438	1.1.1.1	192.168.2.4
May 23, 2024 00:13:03.075891972 CEST	53	58272	1.1.1.1	192.168.2.4
May 23, 2024 00:13:03.109122038 CEST	52043	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:03.109332085 CEST	56438	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:03.126895905 CEST	53	56438	1.1.1.1	192.168.2.4
May 23, 2024 00:13:03.149418116 CEST	53	52043	1.1.1.1	192.168.2.4
May 23, 2024 00:13:03.836201906 CEST	61855	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:03.836508036 CEST	58045	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:03.880001068 CEST	53	58045	1.1.1.1	192.168.2.4
May 23, 2024 00:13:05.245318890 CEST	58686	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:05.245723009 CEST	52656	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:05.253568888 CEST	53	58686	1.1.1.1	192.168.2.4
May 23, 2024 00:13:05.258316040 CEST	53	52656	1.1.1.1	192.168.2.4
May 23, 2024 00:13:06.447057009 CEST	58970	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:06.447190046 CEST	51107	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:06.454452038 CEST	53	58970	1.1.1.1	192.168.2.4
May 23, 2024 00:13:06.461419106 CEST	53	51107	1.1.1.1	192.168.2.4
May 23, 2024 00:13:06.465614080 CEST	52029	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:06.465902090 CEST	52329	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:06.477957010 CEST	62985	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:06.478323936 CEST	63192	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:06.484047890 CEST	57108	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:06.484627962 CEST	50374	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:06.524893045 CEST	53	50374	1.1.1.1	192.168.2.4
May 23, 2024 00:13:06.530729055 CEST	53	52029	1.1.1.1	192.168.2.4
May 23, 2024 00:13:06.530738115 CEST	53	57108	1.1.1.1	192.168.2.4
May 23, 2024 00:13:06.530745983 CEST	53	52329	1.1.1.1	192.168.2.4
May 23, 2024 00:13:06.536115885 CEST	53	63192	1.1.1.1	192.168.2.4
May 23, 2024 00:13:06.536175966 CEST	53	62985	1.1.1.1	192.168.2.4
May 23, 2024 00:13:09.043062925 CEST	55680	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:09.043653965 CEST	53825	53	192.168.2.4	1.1.1.1
May 23, 2024 00:13:09.050668001 CEST	53	55680	1.1.1.1	192.168.2.4
May 23, 2024 00:13:09.062549114 CEST	53	53825	1.1.1.1	192.168.2.4
May 23, 2024 00:13:20.418654919 CEST	53	49248	1.1.1.1	192.168.2.4
May 23, 2024 00:13:27.770328999 CEST	138	138	192.168.2.4	192.168.2.255
May 23, 2024 00:13:39.182240009 CEST	53	57356	1.1.1.1	192.168.2.4
May 23, 2024 00:14:01.545361042 CEST	53	54977	1.1.1.1	192.168.2.4
May 23, 2024 00:14:01.582652092 CEST	53	55489	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 23, 2024 00:13:06.461630106 CEST	192.168.2.4	1.1.1.1	c1fd	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 23, 2024 00:13:03.109122038 CEST	192.168.2.4	1.1.1.1	0x9ab	Standard query (0)	greettive-tke-783743.pages.dev	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:03.109332085 CEST	192.168.2.4	1.1.1.1	0x67be	Standard query (0)	greettive-tke-783743.pages.dev	65	IN (0x0001)	false
May 23, 2024 00:13:03.836201906 CEST	192.168.2.4	1.1.1.1	0xc11	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:03.836508036 CEST	192.168.2.4	1.1.1.1	0x40d9	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 23, 2024 00:13:05.245318890 CEST	192.168.2.4	1.1.1.1	0x1e3b	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:05.245723009 CEST	192.168.2.4	1.1.1.1	0x5f9e	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
May 23, 2024 00:13:06.447057009 CEST	192.168.2.4	1.1.1.1	0x6aec	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.447190046 CEST	192.168.2.4	1.1.1.1	0x49d2	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 23, 2024 00:13:06.465614080 CEST	192.168.2.4	1.1.1.1	0xe294	Standard query (0)	freeipapi.com	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.465902090 CEST	192.168.2.4	1.1.1.1	0x5da5	Standard query (0)	freeipapi.com	65	IN (0x0001)	false
May 23, 2024 00:13:06.477957010 CEST	192.168.2.4	1.1.1.1	0x5945	Standard query (0)	greettive-tke-783743.pages.dev	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.478323936 CEST	192.168.2.4	1.1.1.1	0x7335	Standard query (0)	greettive-tke-783743.pages.dev	65	IN (0x0001)	false
May 23, 2024 00:13:06.484047890 CEST	192.168.2.4	1.1.1.1	0x74ec	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.484627962 CEST	192.168.2.4	1.1.1.1	0x532a	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
May 23, 2024 00:13:09.043062925 CEST	192.168.2.4	1.1.1.1	0x832a	Standard query (0)	freeipapi.com	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:09.043653965 CEST	192.168.2.4	1.1.1.1	0x1976	Standard query (0)	freeipapi.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 23, 2024 00:13:03.126895905 CEST	1.1.1.1	192.168.2.4	0x67be	No error (0)	greettive-tke-783743.pages.dev			65	IN (0x0001)	false
May 23, 2024 00:13:03.149418116 CEST	1.1.1.1	192.168.2.4	0x9ab	No error (0)	greettive-tke-783743.pages.dev		172.66.47.121	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:03.149418116 CEST	1.1.1.1	192.168.2.4	0x9ab	No error (0)	greettive-tke-783743.pages.dev		172.66.44.135	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:03.880001068 CEST	1.1.1.1	192.168.2.4	0x40d9	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 00:13:03.880013943 CEST	1.1.1.1	192.168.2.4	0xc11	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 00:13:05.253568888 CEST	1.1.1.1	192.168.2.4	0x1e3b	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:05.253568888 CEST	1.1.1.1	192.168.2.4	0x1e3b	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:05.253568888 CEST	1.1.1.1	192.168.2.4	0x1e3b	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:05.258316040 CEST	1.1.1.1	192.168.2.4	0x5f9e	No error (0)	api.ipify.org			65	IN (0x0001)	false
May 23, 2024 00:13:06.454452038 CEST	1.1.1.1	192.168.2.4	0x6aec	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.461419106 CEST	1.1.1.1	192.168.2.4	0x49d2	No error (0)	www.google.com			65	IN (0x0001)	false
May 23, 2024 00:13:06.524893045 CEST	1.1.1.1	192.168.2.4	0x532a	No error (0)	api.ipify.org			65	IN (0x0001)	false
May 23, 2024 00:13:06.530729055 CEST	1.1.1.1	192.168.2.4	0xe294	No error (0)	freeipapi.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.530729055 CEST	1.1.1.1	192.168.2.4	0xe294	No error (0)	freeipapi.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.530738115 CEST	1.1.1.1	192.168.2.4	0x74ec	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.530738115 CEST	1.1.1.1	192.168.2.4	0x74ec	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.530738115 CEST	1.1.1.1	192.168.2.4	0x74ec	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.530745983 CEST	1.1.1.1	192.168.2.4	0x5da5	No error (0)	freeipapi.com			65	IN (0x0001)	false
May 23, 2024 00:13:06.536115885 CEST	1.1.1.1	192.168.2.4	0x7335	No error (0)	greettive-tke-783743.pages.dev			65	IN (0x0001)	false
May 23, 2024 00:13:06.536175966 CEST	1.1.1.1	192.168.2.4	0x5945	No error (0)	greettive-tke-783743.pages.dev		172.66.47.121	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:06.536175966 CEST	1.1.1.1	192.168.2.4	0x5945	No error (0)	greettive-tke-783743.pages.dev		172.66.44.135	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:09.050668001 CEST	1.1.1.1	192.168.2.4	0x832a	No error (0)	freeipapi.com		188.114.97.3	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:09.050668001 CEST	1.1.1.1	192.168.2.4	0x832a	No error (0)	freeipapi.com		188.114.96.3	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:09.062549114 CEST	1.1.1.1	192.168.2.4	0x1976	No error (0)	freeipapi.com			65	IN (0x0001)	false
May 23, 2024 00:13:19.887785912 CEST	1.1.1.1	192.168.2.4	0xfb60	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 00:13:19.887785912 CEST	1.1.1.1	192.168.2.4	0xfb60	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:33.168755054 CEST	1.1.1.1	192.168.2.4	0xe730	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 00:13:33.168755054 CEST	1.1.1.1	192.168.2.4	0xe730	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 23, 2024 00:13:54.241813898 CEST	1.1.1.1	192.168.2.4	0xcc63	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 00:13:54.241813898 CEST	1.1.1.1	192.168.2.4	0xcc63	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

greettive-tke-783743.pages.dev

https:

api.ipify.org

freeipapi.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	172.66.47.121	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:03 UTC	700	OUT	GET /help/contact/95094729232531 HTTP/1.1 Host: greettive-tke-783743.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:03 UTC	770	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1154 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "8e7c4bea41065de4ccbb335583d7bc90" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jAbRKgiFziTpErDAQ02s%2BKgqGSzyWNLanPMGJ30%2FBjVz1Rcz2HQc1dvugIGG6gmGaXVqDIO99PA7aqQcDcYHBL3mSUtqHNr3XeR%2BCYVmfrtksfINWW6zeHuqDGJMzRqu6N9aWXRQbpj8PFL3VJQdo4s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888026ba3e3fc3f5-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 22:13:03 UTC	599	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 61 63 65 62 6f 6f 6b 5f 6c 6f 67 6f 5f 69 63 6f 6e 5f 31 34 37 32 39 31 2d 66 32 64 66 63 36 66 64 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e Data Ascii: <!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/assets/facebook_logo_icon_147291-f2dfc6fd.ico" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <lin
2024-05-22 22:13:03 UTC	555	IN	Data Raw: 2f 69 6e 64 65 78 2d 61 64 36 61 62 65 32 63 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 64 30 37 36 64 35 33 31 2e 63 73 73 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 72 65 61 63 74 2f 75 6d 64 2f 72 65 61 63 74 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 Data Ascii: /index-ad6abe2c.js"></script> <link rel="stylesheet" href="/assets/index-d076d531.css"> </head> <body> <div id="root"></div> </body> <script src="https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js" crossorigin></script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	172.66.47.121	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:03 UTC	641	OUT	GET /assets/index-ad6abe2c.js HTTP/1.1 Host: greettive-tke-783743.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://greettive-tke-783743.pages.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://greettive-tke-783743.pages.dev/help/contact/95094729232531 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:04 UTC	770	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:03 GMT Content-Type: application/javascript Content-Length: 278589 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "e7d921bb3fdc87abe8a9aa7a02b7842f" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2BoOnkYbawSN66H4aOdU2Sl3M2FiDgdtKaA3DkjgNQRP0w57n673Vc5VVLhfveUSl9LEHtovApGD6f3C2A%2BQxI5%2BcHDwXnDQI2h67bXrrSrCyAqiWk7TGwuOYNt6F73Wl46tyxFRXyDtd7a3oXI8dZ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888026bb7b2c8c2a-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 22:13:04 UTC	599	IN	Data Raw: 76 61 72 20 6a 68 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 5f 68 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 6a 68 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 6c 65 3d 28 65 2c 74 2c 6e 29 3d 3e 28 5f 68 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 50 68 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 6e 5d 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 73 74 72 69 6e 67 22 26 26 21 Data Ascii: var jh=Object.defineProperty;var _h=(e,t,n)=>t in e?jh(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var le=(e,t,n)=>(_h(e,typeof t!="symbol"?t+"":t,n),n);function Ph(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 6f 72 74 73 28 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 29 29 72 65 74 75 72 6e 3b 66 6f 72 28 63 6f 6e 73 74 20 6f 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 6c 69 6e 6b 5b 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 5d 27 29 29 72 28 6f 29 3b 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 6f 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 6c 20 6f 66 20 6f 29 69 66 28 6c 2e 74 79 70 65 3d 3d 3d 22 63 68 69 6c 64 4c 69 73 74 22 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 6c 2e 61 64 64 65 64 4e 6f 64 65 73 29 69 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 4c 49 4e 4b 22 26 26 69 2e 72 65 6c 3d 3d 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 26 26 72 28 69 29 7d 29 2e 6f 62 73 65 72 Data Ascii: orts("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const l of o)if(l.type==="childList")for(const i of l.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).obser
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 62 68 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 65 21 3d 22 6f 62 6a 65 63 74 22 3f 6e 75 6c 6c 3a 28 65 3d 66 75 26 26 65 5b 66 75 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3a 6e 75 6c 6c 29 7d 76 61 72 20 6f 64 3d 7b 69 73 4d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 52 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: l.iterator;function bh(e){return e===null\|\|typeof e!="object"?null:(e=fu&&e[fu]\|\|e["@@iterator"],typeof e=="function"?e:null)}var od={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 2e 63 68 69 6c 64 72 65 6e 3d 61 7d 69 66 28 65 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 72 20 69 6e 20 73 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 2c 73 29 6f 5b 72 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6f 5b 72 5d 3d 73 5b 72 5d 29 3b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 66 6f 2c 74 79 70 65 3a 65 2c 6b 65 79 3a 6c 2c 72 65 66 3a 69 2c 70 72 6f 70 73 3a 6f 2c 5f 6f 77 6e 65 72 3a 74 61 2e 63 75 72 72 65 6e 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 68 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 66 6f 2c 74 79 70 65 3a 65 2e 74 79 70 65 2c 6b 65 79 3a 74 2c 72 65 66 3a 65 2e 72 65 66 2c 70 72 6f 70 73 3a 65 2e 70 72 6f 70 73 2c 5f 6f 77 6e 65 72 3a 65 2e 5f 6f 77 6e 65 72 7d 7d 66 75 6e 63 74 69 6f Data Ascii: .children=a}if(e&&e.defaultProps)for(r in s=e.defaultProps,s)o[r]===void 0&&(o[r]=s[r]);return{$$typeof:fo,type:e,key:l,ref:i,props:o,_owner:ta.current}}function Hh(e,t){return{$$typeof:fo,type:e.type,key:t,ref:e.ref,props:e.props,_owner:e._owner}}functio
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 75 20 6d 65 61 6e 74 20 74 6f 20 72 65 6e 64 65 72 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 63 68 69 6c 64 72 65 6e 2c 20 75 73 65 20 61 6e 20 61 72 72 61 79 20 69 6e 73 74 65 61 64 2e 22 29 3b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 43 6f 28 65 2c 74 2c 6e 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 5b 5d 2c 6f 3d 30 3b 72 65 74 75 72 6e 20 55 6f 28 65 2c 72 2c 22 22 2c 22 22 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 6e 2c 6c 2c 6f 2b 2b 29 7d 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 56 68 28 65 29 7b 69 66 28 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 2d 31 29 7b 76 61 72 20 74 3d 65 2e 5f 72 65 73 75 6c 74 3b 74 3d 74 28 29 2c 74 2e 74 68 65 6e 28 66 75 6e 63 Data Ascii: u meant to render a collection of children, use an array instead.");return i}function Co(e,t,n){if(e==null)return e;var r=[],o=0;return Uo(e,r,"","",function(l){return t.call(n,l,o++)}),r}function Vh(e){if(e._status===-1){var t=e._result;t=t(),t.then(func
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 2e 74 79 70 65 26 26 65 2e 74 79 70 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 76 61 72 20 73 3d 65 2e 74 79 70 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3b 66 6f 72 28 61 20 69 6e 20 74 29 61 64 2e 63 61 6c 6c 28 74 2c 61 29 26 26 21 75 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 28 72 5b 61 5d 3d 74 5b 61 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 73 21 3d 3d 76 6f 69 64 20 30 3f 73 5b 61 5d 3a 74 5b 61 5d 29 7d 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 61 3d 3d 3d 31 29 72 2e 63 68 69 6c 64 72 65 6e 3d 6e 3b 65 6c 73 65 20 69 66 28 31 3c 61 29 7b 73 3d 41 72 72 61 79 28 61 29 3b 66 6f 72 28 76 61 72 20 75 3d 30 3b 75 3c 61 3b 75 2b 2b 29 73 5b 75 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 75 2b 32 5d 3b Data Ascii: .type&&e.type.defaultProps)var s=e.type.defaultProps;for(a in t)ad.call(t,a)&&!ud.hasOwnProperty(a)&&(r[a]=t[a]===void 0&&s!==void 0?s[a]:t[a])}var a=arguments.length-2;if(a===1)r.children=n;else if(1<a){s=Array(a);for(var u=0;u<a;u++)s[u]=arguments[u+2];
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 6e 74 2e 75 73 65 45 66 66 65 63 74 28 65 2c 74 29 7d 3b 7a 2e 75 73 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 64 28 29 7d 3b 7a 2e 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 4c 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 28 65 2c 74 2c 6e 29 7d 3b 7a 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4c 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 28 65 2c 74 29 7d 3b 7a 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: nt.useEffect(e,t)};z.useId=function(){return Le.current.useId()};z.useImperativeHandle=function(e,t,n){return Le.current.useImperativeHandle(e,t,n)};z.useInsertionEffect=function(e,t){return Le.current.useInsertionEffect(e,t)};z.useLayoutEffect=function(e
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 72 20 69 6e 20 74 29 4a 68 2e 63 61 6c 6c 28 74 2c 72 29 26 26 21 5a 68 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 6f 5b 72 5d 3d 74 5b 72 5d 29 3b 69 66 28 65 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 72 20 69 6e 20 74 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 2c 74 29 6f 5b 72 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6f 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 58 68 2c 74 79 70 65 3a 65 2c 6b 65 79 3a 6c 2c 72 65 66 3a 69 2c 70 72 6f 70 73 3a 6f 2c 5f 6f 77 6e 65 72 3a 71 68 2e 63 75 72 72 65 6e 74 7d 7d 49 6c 2e 46 72 61 67 6d 65 6e 74 3d 59 68 3b 49 6c 2e 6a 73 78 3d 64 64 3b 49 6c 2e 6a 73 78 73 3d 64 64 3b 6e 64 2e 65 78 70 6f 72 74 73 3d 49 6c 3b 76 61 72 20 6d 3d 6e 64 Data Ascii: r in t)Jh.call(t,r)&&!Zh.hasOwnProperty(r)&&(o[r]=t[r]);if(e&&e.defaultProps)for(r in t=e.defaultProps,t)o[r]===void 0&&(o[r]=t[r]);return{$$typeof:Xh,type:e,key:l,ref:i,props:o,_owner:qh.current}}Il.Fragment=Yh;Il.jsx=dd;Il.jsxs=dd;nd.exports=Il;var m=nd
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 75 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 73 65 74 54 69 6d 65 6f 75 74 3a 6e 75 6c 6c 2c 79 3d 74 79 70 65 6f 66 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 6e 75 6c 6c 2c 68 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3c 22 75 22 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 3c 22 75 22 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 21 3d 3d 76 6f 69 64 20 30 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 21 3d 3d 76 6f 69 64 20 30 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 Data Ascii: ut=="function"?setTimeout:null,y=typeof clearTimeout=="function"?clearTimeout:null,h=typeof setImmediate<"u"?setImmediate:null;typeof navigator<"u"&&navigator.scheduling!==void 0&&navigator.scheduling.isInputPending!==void 0&&navigator.scheduling.isInputP
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 4f 29 7b 52 3d 4f 2c 4e 7c 7c 28 4e 3d 21 30 2c 56 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 4f 2c 50 29 7b 6a 3d 43 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 28 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 28 29 29 7d 2c 50 29 7d 65 2e 75 6e 73 74 61 62 6c 65 5f 49 64 6c 65 50 72 69 6f 72 69 74 79 3d 35 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 49 6d 6d 65 64 69 61 74 65 50 72 69 6f 72 69 74 79 3d 31 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 4c 6f 77 50 72 69 6f 72 69 74 79 3d 34 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 4e 6f 72 6d 61 6c 50 72 69 6f 72 69 74 79 3d 33 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 50 72 6f 66 69 6c 69 6e 67 3d 6e 75 6c 6c 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 55 73 65 72 42 6c 6f 63 6b 69 6e 67 50 72 69 6f 72 69 74 79 3d 32 2c 65 2e 75 6e 73 74 61 62 Data Ascii: O){R=O,N\|\|(N=!0,V())}function se(O,P){j=C(function(){O(e.unstable_now())},P)}e.unstable_IdlePriority=5,e.unstable_ImmediatePriority=1,e.unstable_LowPriority=4,e.unstable_NormalPriority=3,e.unstable_Profiling=null,e.unstable_UserBlockingPriority=2,e.unstab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	172.66.47.121	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:04 UTC	611	OUT	GET /assets/index-d076d531.css HTTP/1.1 Host: greettive-tke-783743.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://greettive-tke-783743.pages.dev/help/contact/95094729232531 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:04 UTC	772	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:04 GMT Content-Type: text/css; charset=utf-8 Content-Length: 10139 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "b46365c677a01353b73be922ebf8d4d5" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zLq3O%2FLWx9XQ3tOl5BQGFicZq3gxhmlpWKObPwBbQiFJwIn3GSRfVH1u%2B71TlBQMYQ6ozPzZnAvYy85rGpzUsXmzwHHSmtzkRfmYNdkC1LJbWcde87qcHHI%2FJ2LYKMX%2FITMN97nzJNvuSV76UCT3cs4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888026befc5d43a0-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 22:13:04 UTC	597	IN	Data Raw: 2e 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 65 6d 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 66 69 6c 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 7d 2e 6c 6f 67 6f 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 34 36 63 66 66 61 61 29 7d 2e 6c 6f 67 6f 2e 72 65 61 63 74 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 31 64 61 66 62 61 61 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 67 6f 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 Data Ascii: .logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-re
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 20 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 72 65 69 67 68 74 20 53 61 6e 73 20 4c 46 20 50 72 6f 20 53 65 6d 69 62 6f 6c 64 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 72 65 6e 64 Data Ascii: ht:0;bottom:0;left:0;z-index:1;display:flex;justify-content:center;align-items:center;flex-direction:column;padding:0 20px;color:#fff!important}.banner-content h5{font-size:14px;font-family:Freight Sans LF Pro Semibold,Helvetica,Arial,sans-serif;text-rend
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2c 20 67 61 69 6e 73 62 6f 72 6f 29 29 3b 6d 61 72 67 69 6e 3a 30 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 61 63 6b Data Ascii: international-phone-country-selector-border-color, var(--react-international-phone-border-color, gainsboro));margin:0;-moz-appearance:button;appearance:button;-webkit-appearance:button;background-color:var(--react-international-phone-country-selector-back
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 61 72 72 6f 77 2d 73 69 7a 65 2c 20 34 70 78 29 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 6f 75 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 5f 5f 64 72 6f 70 64 6f 77 6e 2d 61 72 72 6f 77 2d 2d 61 63 74 69 76 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 58 28 31 38 30 64 65 67 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f Data Ascii: national-phone-country-selector-arrow-size, 4px) solid transparent;margin-right:4px;transition:all .1s ease-out}.react-international-phone-country-selector-button__dropdown-arrow--active{transform:rotateX(180deg)}.react-international-phone-country-selecto
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 6d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 77 68 69 74 65 29 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 73 68 61 64 6f 77 2c 20 32 70 78 20 32 70 78 20 31 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 32 35 29 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 Data Ascii: m-background-color, var(--react-international-phone-background-color, white));box-shadow:var(--react-international-phone-dropdown-shadow, 2px 2px 16px rgba(0, 0, 0, .25));color:var(--react-international-phone-dropdown-item-text-color, var(--react-internat
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 66 6f 63 75 73 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 73 65 6c 65 63 74 65 64 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 77 68 69 74 65 73 6d 6f 6b 65 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 73 65 6c 65 63 74 65 64 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 74 65 78 Data Ascii: ountry-selector-dropdown__list-item--focused{background-color:var(--react-international-phone-selected-dropdown-item-background-color, whitesmoke);color:var(--react-international-phone-selected-dropdown-item-text-color, var(--react-international-phone-tex
2024-05-22 22:13:04 UTC	1369	IN	Data Raw: 77 68 69 74 65 29 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 61 6c 2d 63 6f 64 65 2d 70 72 65 76 69 65 77 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 23 32 32 32 29 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 61 6c 2d 63 6f 64 65 2d 70 72 65 76 69 65 77 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 31 33 70 78 29 29 7d 2e 72 65 61 63 74 2d Data Ascii: white));color:var(--react-international-phone-dial-code-preview-text-color, var(--react-international-phone-text-color, #222));font-size:var(--react-international-phone-dial-code-preview-font-size, var(--react-international-phone-font-size, 13px))}.react-
2024-05-22 22:13:04 UTC	1328	IN	Data Raw: 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 23 32 32 32 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 31 33 70 78 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: t-international-phone-text-color, #222);font-family:inherit;font-size:var(--react-international-phone-font-size, 13px)}.react-international-phone-input-container .react-international-phone-input:focus{outline:none}.react-international-phone-input-containe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	172.66.47.121	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:05 UTC	657	OUT	GET /assets/banner-b1482d4c.webp HTTP/1.1 Host: greettive-tke-783743.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://greettive-tke-783743.pages.dev/assets/index-d076d531.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:05 UTC	767	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:05 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "a1e9b3e7e6cf7d7c8ecf642f00d3fbcb" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zthviBSuHW29iRYrXDrUyWSj%2BgBVH0hozlP%2FcMxxQaXA%2FRPXg7W%2B5Y4q0FyaiR%2FiipSBMV1VSg%2BWj5TaBcUO1wSpH%2By8hjTtUcq4tgAGMp1sVA0psBO6YVHLTNSUuVnZdx2FQHCQug3Rct%2FCe4rWybE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888026c79d538ce8-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 22:13:05 UTC	602	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2024-05-22 22:13:05 UTC	1369	IN	Data Raw: 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 77 0b f5 18 2d 62 80 0c 88 79 a4 8e fa c3 3e bb e5 15 1e 32 f5 14 be c3 51 e6 26 ba 62 16 92 43 9f d4 42 af d2 90 66 4f 7b 53 88 98 6c de 01 67 20 3c e1 12 9c 2e b2 df fc 24 68 01 8d ab d8 53 8f b9 eb b6 aa 37 2e 24 da f4 90 fb 04 6b 96 a2 72 c5 5d b1 3a 78 dd 7f bb ff de 91 d8 f6 10 44 25 f2 c0 e9 31 ac bd dd 78 7a 46 10 73 8a b9 bf ca 98 da ff e2 18 2d 57 a7 73 60 b9 41 1c 52 cb 8f e3 d1 86 0c 69 2f 34 5b 0a a5 32 ba 1d 30 54 1f dc 90 55 e8 f8 2b c2 81 78 1a 71 78 ce 3e d5 eb 5c b8 bd 1a a4 7b 30 19 66 a9 3a e8 11 42 a1 0c b9 6c 1a Data Ascii: k_I:&:_qx#H'Sl \c7GZqapX8w-by>2Q&bCBfO{Slg <.$hS7.$kr]:xD%1xzFs-Ws`ARi/4[20TU+xqx>\{0f:Bl
2024-05-22 22:13:05 UTC	1369	IN	Data Raw: 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa bd 6c 88 04 11 9d 16 5e 0c 17 cb d5 4c b8 4f 19 90 7c 57 da 67 78 96 4b a4 ff 90 f7 c6 5e d7 a7 7f d0 90 55 7d fb 8a a5 15 cb 08 a7 b4 2d c8 46 b5 ed eb e8 2b 34 72 13 b7 05 7f 2e 74 4e 28 e8 a6 da f0 2a d7 6b cd df d6 1c be 93 ee fd 75 25 4c 11 5b 81 c7 ef 67 f5 70 9b cf 14 56 8b 63 80 42 fd 54 95 77 f1 46 1b fc 4b c9 cd 16 98 6c 54 ef 3f fe 07 12 5c 42 51 35 78 69 15 8b 3e 08 1e 16 81 6b 49 1c c5 41 be f4 b1 cb 70 6a de e6 47 d7 85 4b 7b dc 7d 02 26 0f ff 46 e2 22 78 95 d4 a3 c0 e7 d9 57 e3 79 b1 0a ce f3 5e a1 9b 37 f8 31 e0 99 42 Data Ascii: E/XD!~9@%3k=[7!-gqVP!&ZR[Fy3l^LO\|WgxK^U}-F+4r.tN(*ku%L[gpVcBTwFKlT?\BQ5xi>kIApjGK{}&F"xWy^71B
2024-05-22 22:13:05 UTC	270	IN	Data Raw: f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 08 eb 61 a8 2c 51 24 62 ea 87 8e 37 90 74 2a 34 b2 0d 6f 5d 61 aa d0 4e 95 e8 bc 9f 2b 98 ba 9d 7a c4 95 8b 1a 81 29 fe 32 64 ea f2 33 c6 d8 37 ad 2c 42 a9 df fc 16 4d 2f bd 15 1c 40 a5 ab 95 b0 ee 33 f5 e5 f1 ee c0 5a c2 8e 0c 2a 2c 2c 6c f7 9d 51 60 70 9d f3 9a b6 82 5c 96 41 dd ff a2 f9 36 5f 9d 1a e8 94 23 b1 06 fa 8f db ee 1d 28 3a a6 2c 4d e3 4f 32 77 38 d0 a4 23 3c 82 b6 88 75 a6 34 7c 38 b3 81 f0 c0 08 68 4b c9 f0 b6 a4 88 53 56 58 60 4c 4f 29 1d 0d 0a 40 24 03 04 81 22 09 03 b5 3b 5c ad c8 a4 37 9b d8 9b 62 94 f4 76 95 7d e7 Data Ascii: pS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H`a,Q$b7t4o]aN+z)2d37,BM/@3Z,,lQ`p\A6_#(:,MO2w8#<u4\|8hKSVX`LO)@$";\7bv}
2024-05-22 22:13:05 UTC	1369	IN	Data Raw: 3d d2 44 ea 34 1b 39 9f 97 00 7e 4b f2 88 05 a7 97 e1 f2 84 1b f6 a6 8c 28 b2 4c e3 19 f1 ff 8d db 26 c8 38 dc 48 a8 32 62 45 39 4f 46 24 84 97 6c 33 96 85 77 11 fb d7 9a 8d 0f 8c 52 79 c3 60 20 93 8d ce 73 df bd 69 e7 cc 46 c6 31 c7 32 53 b3 05 93 8b 0d 73 c5 6a 7d 9c 85 80 5e d5 b4 6d be 35 0a e1 9d 25 81 1b ae 37 d9 9a 56 9e ec 2d 83 8c e2 b3 be 44 28 4e ff 8c 8f a4 c1 87 86 a7 2e 69 e6 2d 8f d2 3d 13 ab 36 da 75 1e e5 32 fe b5 b9 a7 e9 a7 65 99 8c fa e1 ef 79 c7 3b 59 a8 7c fc 73 d7 9a 9a a5 1c a1 63 77 6e 7b 34 f1 67 67 e4 22 e3 f5 a3 ff 62 fc bf dd f0 5e f3 b8 69 c3 b9 fd 6c bc ba 55 7e 10 ad 94 d9 70 9e 40 79 57 7b 38 f8 6c 63 97 0a 8c f2 b8 f7 3a aa ac dd c4 dd bd 1d f3 39 3d 51 2f f0 cf 09 3e a1 33 4f d4 36 bd 93 a7 23 d4 db 0e 7a 29 4f 06 80 fb Data Ascii: =D49~K(L&8H2bE9OF$l3wRy` siF12Ssj}^m5%7V-D(N.i-=6u2ey;Y\|scwn{4gg"b^ilU~p@yW{8lc:9=Q/>3O6#z)O
2024-05-22 22:13:05 UTC	1369	IN	Data Raw: b5 18 0c 70 95 c5 32 d4 b1 19 d7 c5 13 24 70 67 a8 c8 68 8e 7d 97 b3 cb 7b 52 fe 7d bf 81 31 09 ca 41 d7 55 30 5f 6a 83 77 f0 8f 4f 44 d4 d6 86 73 eb 3e 5d c0 5d d7 f9 28 a7 b4 68 ee 22 84 21 48 9b 32 94 8b e4 8b bf 6f f3 75 51 5d 21 dd c3 07 ee 76 84 a5 53 41 2a 75 d1 17 fe 9e 0e b9 97 ab fc 43 78 1e 38 f1 32 5d af 55 d2 cd 2e 8c ef 4b 0a 5e 71 b0 51 df a4 4a 35 5f d2 c1 5b 71 b3 7d 4e 9c fb c9 d1 aa d6 21 f3 ec d3 f5 e0 ee c2 55 13 2e 38 7a cd 38 4e 3a 75 58 f2 4a 0d 35 a5 10 90 6d 74 40 77 c2 d4 5b 6a 99 f4 ef c9 9c e4 93 17 0d 71 58 5b 10 bc 12 1c 21 4d 23 0f 3c 94 b2 8a a7 6e ec ad 6e 00 aa 6a 73 17 67 68 e3 1f e0 24 7a 82 c5 78 7e 55 9b 6a be 02 e2 10 cf cb 84 1a db 7a 7a 4a 88 bf b6 00 0c cc f6 57 79 97 39 d2 db 89 e6 fb 04 03 cd c7 45 b6 7f 5a 7c Data Ascii: p2$pgh}{R}1AU0_jwODs>]](h"!H2ouQ]!vSA*uCx82]U.K^qQJ5_[q}N!U.8z8N:uXJ5mt@w[jqX[!M#<nnjsgh$zx~UjzzJWy9EZ\|
2024-05-22 22:13:05 UTC	1369	IN	Data Raw: f0 e7 27 0b 25 48 34 3f 67 a7 bd 07 a1 32 7a 6f 98 dd ff eb 9f a0 b1 d4 62 fb a8 91 d8 5a 02 9d 67 43 2a c1 e8 09 56 d7 d9 90 43 22 9e af 6e db f6 79 8e 99 25 35 e1 72 43 57 f1 39 ed 11 a9 e3 10 f0 83 0e 0a ce 28 2f 7b 3f 45 ff c5 f6 45 66 de 2f 2c 37 f8 74 1f 31 53 aa d4 9f 30 5e 7b e5 98 2b 3a 43 d1 03 da da 8a 58 fe c5 d1 fe e1 90 1a 8d 03 c7 db 7a 49 ec b1 e8 3c 32 89 2b 81 0b 2d 90 76 8e bf f8 16 a6 c9 e4 0c 79 23 f5 24 90 7f b0 d1 b6 f5 c4 d3 73 6d c8 fa fa 2f 6e f5 da 3c d5 c8 e5 03 0b 4f 4a 06 50 da e7 c7 f2 94 47 89 d9 34 38 b2 40 48 e6 24 e6 3b 5f 47 f6 87 d2 5a 2a d8 f8 d2 98 83 41 3c 0e cf 7f 10 49 f3 ec 58 4a 84 0e 77 13 47 f2 ed c5 47 f8 b9 5d 8f 65 c9 1a a5 d2 bd 10 66 04 84 fe d9 d4 db c4 86 d3 fd ff e1 72 f4 8f 89 38 1d b5 74 99 de 3f 46 Data Ascii: '%H4?g2zobZgCVC"ny%5rCW9(/{?EEf/,7t1S0^{+:CXzI<2+-vy#$sm/n<OJPG48@H$;_GZA<IXJwGG]efr8t?F
2024-05-22 22:13:05 UTC	1369	IN	Data Raw: 9e 65 0c 7d 44 4e e8 f2 82 e1 aa 7b b3 be 49 51 3e 9d f7 e6 16 8b c5 7f b2 f4 3f 2c bc 14 aa b8 8a 4e 0e 8c 95 b4 f7 d0 60 7f a3 0c 1b a7 ac 58 96 da 5e 5a 96 c6 cd 35 34 56 37 31 46 90 96 5f c4 b3 92 4e 7f d5 f6 59 6f a2 0d 26 60 85 48 da 90 a1 54 87 ae af f7 28 5d fe 16 f2 c9 36 f3 1a 2d bd 21 fd 75 97 51 4d c6 8a 85 7a 4a 8d ae 73 2f fc cb 4c 14 31 05 bd cd e0 b4 e6 1b d5 74 14 57 db b9 db 04 7f 62 cb d0 c0 2e c0 94 e0 87 07 5c 49 74 75 59 22 b5 6c 1e 9a 6d ef ca 02 f1 36 15 86 62 44 2a 32 46 36 1f 94 d0 19 1e 1d 52 f5 67 88 bf 87 b7 dc 90 68 72 7a 6b e9 d0 b5 2d d0 95 e9 de 92 5c 8b d9 0e 3e a8 70 0b 68 71 72 57 50 e4 93 fa 25 69 84 57 45 aa 2d 2c 44 9e ce c4 0a 83 f1 c4 2c 9f 00 fa 2d cc fe 0a 74 0b 93 43 56 04 58 7c 6f d8 10 4c b8 27 cb 42 fa 23 17 Data Ascii: e}DN{IQ>?,N`X^Z54V71F_NYo&`HT(]6-!uQMzJs/L1tWb.\ItuY"lm6bD*2F6Rghrzk-\>phqrWP%iWE-,D,-tCVX\|oL'B#
2024-05-22 22:13:05 UTC	1369	IN	Data Raw: e7 70 e8 0b 46 22 f2 35 8c 1e 6a 92 91 24 e0 99 b9 13 d2 39 7d e8 48 c4 a9 51 c1 28 3d d5 58 aa 6d 0f 72 8c 65 ec a9 10 c5 fb 52 93 c2 37 6b 96 65 ef 90 12 f8 92 ee 09 9b d6 17 4b a9 ac ff f9 f6 2b 17 2c 74 9e 80 10 6f da 8b 16 11 37 f2 dc 9a b3 5a 11 da c2 6f b3 51 43 33 82 84 06 95 c8 78 d8 68 16 9d 59 18 b0 e2 c5 ff 21 59 c3 cb e2 d7 43 4e 8d 9b 2b eb 69 8c f4 66 86 54 de 7e 48 e8 28 bf ca ed 08 59 91 c0 19 db d4 e2 fb bc 31 c5 46 1a 31 46 63 d3 a2 05 7e 3b 1f d8 d0 98 3b f7 f1 c3 0a b6 a3 42 79 0a 95 f8 f6 44 47 c4 84 96 e0 b1 c3 52 fe c8 89 14 59 4a 2c 44 2c 80 1e 13 53 3a 75 9e b1 a3 5b 91 dd 33 93 9b d0 03 34 d9 07 cc f9 c6 51 2e c5 c0 e2 58 33 7f b1 bc e5 32 3b f7 7b c4 f0 a6 94 6f 27 74 29 73 78 05 04 15 2e f0 af 64 c4 5c 77 3d aa 1a 9b af fb f9 Data Ascii: pF"5j$9}HQ(=XmreR7keK+,to7ZoQC3xhY!YCN+ifT~H(Y1F1Fc~;;ByDGRYJ,D,S:u[34Q.X32;{o't)sx.d\w=
2024-05-22 22:13:05 UTC	1369	IN	Data Raw: 1b 38 3f c2 93 4d 65 ce c7 72 e8 9b a4 c6 7c bc 20 fa 55 f1 db f5 20 d1 ca cb 11 df 0f 1a 7d cf 0d 3a 2f 61 a8 a5 89 8e b7 9a 8f 4a 91 ec 2e 7e fa 56 c8 e8 99 61 d1 89 95 ea 4a 10 b6 67 8b a8 e7 0e 03 82 8d 3e 02 25 bf ad 18 23 51 68 a0 5a 6d a4 85 1f f1 2f da fb 97 d3 76 8b ab 76 f2 96 96 f1 43 f4 86 93 96 0a 97 32 86 86 1b 3f db 42 09 27 7b 3f 13 ab 22 14 3c 5d 01 40 bd e9 ce 30 51 0a e2 d9 d9 8a 95 8b 75 98 aa b4 3e 40 ee b0 75 45 88 5d 13 2d e5 58 bc 65 82 78 a5 bc 9f 3e 24 b5 41 50 a0 e8 9e cd 88 86 ac 56 10 3f ef 14 2e 65 b2 b5 80 4a c1 e1 ac 94 6a 53 52 41 75 9b a9 e1 b3 c3 02 6b 6b 1b 1e 2d ba 2e aa b7 a1 a5 2e 7f 6a 50 cb 22 98 fa 49 1e 67 51 fc 69 c4 b1 50 88 7e 6d 7e 08 00 01 03 79 13 d9 80 96 8a 5f 18 b4 bf 90 39 6d 4e ab 89 33 3c 11 af b3 a7 Data Ascii: 8?Mer\| U }:/aJ.~VaJg>%#QhZm/vvC2?B'{?"<]@0Qu>@uE]-Xex>$APV?.eJjSRAukk-..jP"IgQiP~m~y_9mN3<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	104.26.12.205	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:05 UTC	583	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://greettive-tke-783743.pages.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://greettive-tke-783743.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:06 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:05 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: * Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888026c7a9424231-EWR
2024-05-22 22:13:06 UTC	21	IN	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 7d Data Ascii: {"ip":"8.46.123.175"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	172.66.47.121	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:07 UTC	677	OUT	GET /assets/facebook_logo_icon_147291-f2dfc6fd.ico HTTP/1.1 Host: greettive-tke-783743.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://greettive-tke-783743.pages.dev/help/contact/95094729232531 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:07 UTC	755	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:07 GMT Content-Type: null Content-Length: 67646 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "0ce70d7a4746dfe57b6742a6942dacfa" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rRx0dzaFUSbNfZubVLm0cvx%2FrLg7MQT%2FUDh1%2FblCW0S4fed8j669O6HoVkJ2G6ZedsojaKIWfSXV4xXmnjtxG%2F9mHevmhMZRSUKkANWChzKjet16y%2BHMQ9wFZ4AwPzmOFnScv2Xhbc2ws7h5l9gpZ48%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888026cfaa367d16-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 22:13:07 UTC	614	IN	Data Raw: 00 00 01 00 01 00 80 80 00 00 01 00 20 00 28 08 01 00 16 00 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 20 00 00 00 00 00 00 00 01 00 7b 9d 00 00 7b 9d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 78 1c 00 f1 78 17 00 f5 75 19 00 ed 7b 18 00 f2 77 18 01 f2 77 18 03 f2 77 18 04 f3 77 18 01 f2 Data Ascii: (( {{xxu{wwww
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 80 20 00 f3 78 19 00 f1 76 18 00 ef 75 19 00 f2 78 19 01 f2 77 18 03 f2 77 18 03 f6 73 1d 00 f0 77 19 00 ec 77 21 00 ef 78 1d 02 f2 77 18 23 f2 77 18 54 f2 77 18 8d f2 78 19 be f2 74 14 e0 f3 80 27 fa fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 Data Ascii: xvuxwwsww!xw#wTwxt'
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 78 18 00 Data Ascii: x
2024-05-22 22:13:07 UTC	264	IN	Data Raw: f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fd f2 77 18 fb f2 77 18 fe f2 77 18 ff f2 77 18 ff f2 77 18 c9 f2 77 18 50 f2 75 1c 02 f2 75 1d 00 f2 77 18 03 f2 77 18 02 f1 76 18 00 f1 76 18 00 f2 77 18 00 ff 80 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwPuuwwvvw+
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 76 19 00 f2 77 18 00 f2 77 18 00 f2 77 18 01 f2 77 18 03 f0 76 16 01 ef 75 11 00 f2 77 18 42 f2 77 18 c8 f2 77 18 ff f2 77 18 fe f2 77 18 fd f2 77 18 fc f2 77 18 fe f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff Data Ascii: vwwwwvuwBwwwwwwwwwwwwwwwwwxu'
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fc f2 77 18 fc f2 77 18 ff f2 77 18 f8 f2 77 18 8a f2 77 18 0b f2 77 18 00 f2 77 18 03 f2 77 18 01 f2 77 18 00 f2 77 18 00 f1 77 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwwwwwwwwwwwwwwwwwwwwwwww
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fd f2 77 18 fb f2 77 18 Data Ascii: wwwwwwwwwwwwwwxu''uxwwwwwwwwwwwwwwwwwwwwwwww
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 77 18 00 f2 77 18 00 f2 77 18 00 f2 77 18 03 f0 76 18 00 f2 77 18 0a f2 77 18 ad f2 77 18 ff f2 77 18 fb f2 77 18 fe f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff Data Ascii: wwwwvwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwxu'
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 d5 f2 77 18 1e f2 77 18 00 f2 77 18 03 f2 77 18 00 f2 77 18 00 f2 77 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f3 79 18 00 f2 77 18 00 f2 77 18 00 f2 77 18 03 f2 Data Ascii: wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwywww
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 Data Ascii: wwwwwwwwwwwxu''uxwwwwwwwwwwwwwwwwwwwwwwwwwww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	188.114.97.3	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:07 UTC	592	OUT	GET /api/json/8.46.123.175 HTTP/1.1 Host: freeipapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://greettive-tke-783743.pages.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://greettive-tke-783743.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:07 UTC	742	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:07 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 59 Access-Control-Allow-Origin: * X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bOSsnLN3tgnq%2B9wLH%2FWUC7cCFQyZK6hFH8J%2FzPI0pq3%2BaoP08kM4S5ggbTLVDb2Jc%2BU38QQCrK9QqimBDkj3Q903Pa94WQu0EcCtDNr97SR6crH3a2r1zkB21XxNkyGr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888026cfea29422d-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 22:13:07 UTC	627	IN	Data Raw: 34 34 31 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 35 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 Data Ascii: 441{"ipVersion":4,"ipAddress":"8.46.123.175","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false
2024-05-22 22:13:07 UTC	469	IN	Data Raw: 6c 6c 5f 43 69 74 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 6d 61 63 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4a 75 6e 65 61 75 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4c 6f 75 69 73 76 69 6c 6c 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4d 6f 6e 74 69 63 65 6c 6c 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 6e 6f 6d 69 6e 65 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 74 6c 61 6b 61 74 6c 61 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f Data Ascii: ll_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_
2024-05-22 22:13:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	104.26.12.205	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:07 UTC	349	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:07 UTC	217	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:07 GMT Content-Type: application/json Content-Length: 21 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888026cffcff19e7-EWR
2024-05-22 22:13:07 UTC	21	IN	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 7d Data Ascii: {"ip":"8.46.123.175"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	172.66.47.121	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:07 UTC	381	OUT	GET /assets/banner-b1482d4c.webp HTTP/1.1 Host: greettive-tke-783743.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:07 UTC	757	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:07 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "a1e9b3e7e6cf7d7c8ecf642f00d3fbcb" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y4rusLRc6y4zax1MavpgY5Jo0q8j8yoRQgasJLbxVtraOZq8J%2F3Z0BTmxzs1Vc4nOqaszm4wSXw7D4rB1p5caK7rt9twQ%2Fi4iIWFAH3JrPjxJeLklWeK82PmEULe970mTa70%2FBBhcirc1FpBXLG1bvc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888026cfd89e8cc5-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 22:13:07 UTC	612	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 77 0b f5 18 2d 62 80 0c 88 79 a4 8e fa c3 3e bb e5 15 1e 32 f5 14 be c3 51 e6 26 ba 62 16 92 43 9f d4 42 af d2 90 66 4f 7b 53 88 98 6c de 01 67 20 3c e1 12 9c 2e b2 df fc 24 68 01 8d ab d8 53 8f b9 eb b6 aa 37 2e 24 da f4 90 fb 04 6b 96 a2 72 c5 5d b1 3a 78 dd 7f bb ff de 91 d8 f6 10 44 25 f2 c0 e9 31 ac bd dd 78 7a 46 10 73 8a b9 bf ca 98 da ff e2 18 2d 57 a7 73 60 b9 41 1c 52 cb 8f e3 d1 86 0c 69 2f 34 5b 0a a5 32 ba 1d 30 54 1f dc 90 55 e8 f8 2b c2 81 78 1a 71 78 ce 3e d5 eb 5c b8 bd 1a a4 7b 30 19 66 a9 3a e8 11 42 a1 0c b9 6c 1a 41 0f ba f6 67 6a 72 bd cd 67 Data Ascii: &:_qx#H'Sl \c7GZqapX8w-by>2Q&bCBfO{Slg <.$hS7.$kr]:xD%1xzFs-Ws`ARi/4[20TU+xqx>\{0f:BlAgjrg
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa bd 6c 88 04 11 9d 16 5e 0c 17 cb d5 4c b8 4f 19 90 7c 57 da 67 78 96 4b a4 ff 90 f7 c6 5e d7 a7 7f d0 90 55 7d fb 8a a5 15 cb 08 a7 b4 2d c8 46 b5 ed eb e8 2b 34 72 13 b7 05 7f 2e 74 4e 28 e8 a6 da f0 2a d7 6b cd df d6 1c be 93 ee fd 75 25 4c 11 5b 81 c7 ef 67 f5 70 9b cf 14 56 8b 63 80 42 fd 54 95 77 f1 46 1b fc 4b c9 cd 16 98 6c 54 ef 3f fe 07 12 5c 42 51 35 78 69 15 8b 3e 08 1e 16 81 6b 49 1c c5 41 be f4 b1 cb 70 6a de e6 47 d7 85 4b 7b dc 7d 02 26 0f ff 46 e2 22 78 95 d4 a3 c0 e7 d9 57 e3 79 b1 0a ce f3 5e a1 9b 37 f8 31 e0 99 42 2e 0b 7b 3f 24 46 fc a4 24 59 Data Ascii: !~9@%3k=[7!-gqVP!&ZR[Fy3l^LO\|WgxK^U}-F+4r.tN(*ku%L[gpVcBTwFKlT?\BQ5xi>kIApjGK{}&F"xWy^71B.{?$F$Y
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 08 eb 61 a8 2c 51 24 62 ea 87 8e 37 90 74 2a 34 b2 0d 6f 5d 61 aa d0 4e 95 e8 bc 9f 2b 98 ba 9d 7a c4 95 8b 1a 81 29 fe 32 64 ea f2 33 c6 d8 37 ad 2c 42 a9 df fc 16 4d 2f bd 15 1c 40 a5 ab 95 b0 ee 33 f5 e5 f1 ee c0 5a c2 8e 0c 2a 2c 2c 6c f7 9d 51 60 70 9d f3 9a b6 82 5c 96 41 dd ff a2 f9 36 5f 9d 1a e8 94 23 b1 06 fa 8f db ee 1d 28 3a a6 2c 4d e3 4f 32 77 38 d0 a4 23 3c 82 b6 88 75 a6 34 7c 38 b3 81 f0 c0 08 68 4b c9 f0 b6 a4 88 53 56 58 60 4c 4f 29 1d 0d 0a 40 24 03 04 81 22 09 03 b5 3b 5c ad c8 a4 37 9b d8 9b 62 94 f4 76 95 7d e7 ab 76 61 3b 4f 08 fd 05 0e 7c Data Ascii: _YxqP> 18\|y`XT~2mRk&}.&<4H`a,Q$b7t4o]aN+z)2d37,BM/@3Z,,lQ`p\A6_#(:,MO2w8#<u4\|8hKSVX`LO)@$";\7bv}va;O\|
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c 95 f1 07 88 71 c0 fb e2 f0 f1 fe e5 82 8e 37 1b ff 14 77 df fd 88 e4 42 f3 11 e4 5b 55 8e 5c 04 4c fb 48 c7 e8 29 38 30 3b 20 71 2d ed c8 18 f0 8d a0 0f 62 3c 31 a4 4b 22 60 0b 9c 6d c2 02 1c 4a ab 25 62 42 b8 08 ac 16 cc 06 2d 59 89 2c 68 07 f3 fc bf 3b 70 11 03 15 4b 74 5c 52 7c 7b ac 5c c3 a6 8f 35 d6 55 ea 6c 40 7a 6d 92 a9 4b 96 77 a8 bc 80 53 53 d6 81 76 c4 94 ac 63 06 0d f7 8d 6a b2 d4 73 f9 59 6f b0 96 3b 32 00 3f d9 3a 7f 50 d6 87 3c fd 0f 58 59 ea 10 6f 64 6d f2 1d 3f 9c 22 2c 4b ef 84 6c 5e 55 83 26 18 02 b4 0a e5 8a 6b d9 47 89 1d a9 f1 c3 97 cb eb e0 81 74 Data Ascii: ?GR`EoF&4H\3pLdP(OXpn\[Q,q7wB[U\LH)80; q-b<1K"`mJ%bB-Y,h;pKt\R\|{\5Ul@zmKwSSvcjsYo;2?:P<XYodm?",Kl^U&kGt
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c ec c6 3c 92 43 97 76 d4 a0 52 b9 0b 95 40 3c 16 b6 0d b7 f5 e8 1c a4 a9 ea a2 70 e7 c9 05 6c 0e 84 07 dc e4 5b 60 9d 54 86 e6 98 ea 90 fa a6 5f 97 87 30 23 ed 5a ae 3f c2 e1 5a 29 4d 9e 34 5a 37 96 60 a0 f8 3f 56 b5 2c f6 a9 2a a7 86 7f fb fc 6a 33 4b 30 37 a0 20 50 9a 52 7a 78 bd 82 11 f1 85 fa 8d 01 87 c2 70 06 4d d0 25 b6 57 33 8b f9 df 80 bf 47 62 67 24 ec ea 35 1b 64 53 42 ef 3d 85 bb 93 92 a4 46 71 05 57 33 58 41 a3 f6 53 5b 1d cf 24 e8 5f 9f 09 9c 23 73 55 ef 40 39 03 e4 3f 63 55 95 84 39 f2 a4 a4 a1 44 1b 15 c0 f0 9a 6f 46 1f 6c f1 65 cb b2 3e 90 01 de db f9 8c Data Ascii: QziKa5_zmdP~fJS{?=k=\<CvR@<pl[`T_0#Z?Z)M4Z7`?V,*j3K07 PRzxpM%W3Gbg$5dSB=FqW3XAS[$_#sU@9?cU9DoFle>
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e c0 82 84 62 b3 91 05 db 77 e4 5b 88 9e 87 3c a3 fd d1 2c 13 5e fc ca b7 aa 1e 07 d8 75 42 07 47 28 6c 03 39 f9 68 0e 3f 2f 8c e8 d8 94 47 c9 7b f4 da ec bc dd 2b a8 f3 b1 7c 29 e4 66 e8 42 6a b9 8e be 74 26 e1 a5 b2 34 63 8f e9 f0 c0 64 b7 cb 33 5b 54 6d d6 fb aa dc 78 3d 24 a9 0d 73 a2 f5 ae 25 85 56 45 c4 e3 ef bd 56 b5 09 5c 87 39 f4 1c 3f 45 fd 69 ee 82 b6 e5 06 c6 23 04 8d 97 af fb d7 29 91 88 83 d3 ab 9f 20 ad 5d 5a c1 d4 b6 bb 17 17 64 88 1d 49 61 7f 1e 94 ca 36 ee 2e 59 d5 3a 56 ae 6d 84 8f ca 09 5e 3f d7 6c bc 48 44 75 ca 4d bd c4 1f 61 9b 4e 2d 3b c4 13 79 b6 Data Ascii: =idvg.3R^%Zm3p@#fM#O.bw[<,^uBG(l9h?/G{+\|)fBjt&4cd3[Tmx=$s%VEV\9?Ei#) ]ZdIa6.Y:Vm^?lHDuMaN-;y
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 e4 38 00 3e e8 08 90 b7 04 53 d8 da 28 82 07 2f c0 36 81 1f 62 3d d3 ea f3 74 67 61 2b 04 ff c4 38 3d e9 c9 cb 87 64 2e 04 93 a2 50 38 e7 ab 99 75 d6 94 71 84 e5 da 3e 1d b5 09 88 4b 09 66 3a 7e 24 5a 73 b2 3e 1b b1 14 ed a1 95 93 5d e5 c0 b5 85 7e 8a ff cb 90 e9 29 e8 8c 7f 82 c8 37 64 00 20 3e f6 a6 12 7d a7 2d ad 4a 6f 66 dd e4 0e 95 e8 77 24 2b 2f 06 7f 69 5c 6f f1 a6 70 6c 01 db 06 92 40 d9 d0 ca d4 4f 9c 61 12 a5 12 4d d1 6e 03 29 4f e8 da b2 77 fd ac f9 f6 ec 39 bd e9 d5 e4 e0 69 70 e7 e3 c8 44 c4 a0 34 0d 68 86 c6 be ce 78 18 31 f5 59 34 ce c1 a0 ff b3 5e ef 1f Data Ascii: (aM\|~iZ"gP_cl,C#`'\|{@8>S(/6b=tga+8=d.P8uq>Kf:~$Zs>]~)7d >}-Jofw$+/i\opl@OaMn)Ow9ipD4hx1Y4^
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 05 59 85 04 8d 14 db ff 4f 2e b2 14 62 f9 c0 d5 4a 9c 11 e3 40 70 7a 4b 10 37 68 09 27 b4 96 b8 25 e2 c6 f6 c8 75 62 fe 50 26 b6 6c c6 b2 61 0e f4 94 19 0b b9 2a 06 a5 f6 ac 79 d0 81 1a b3 aa 9a b8 77 7d 44 26 65 15 a2 68 01 75 61 a5 4e de 7e 2b 43 27 6b 51 ea 06 9d d8 0e 39 07 75 56 e5 d2 dd 4b fc b5 35 63 bc 7c d3 5e f8 64 e1 93 7c 07 a8 f6 0d 15 cc 11 a6 9b fe 4d 78 e1 6b 8b 36 9d 6b ba 80 8f 6f d6 f7 3b 8e 37 91 e2 a0 02 54 54 1a 30 f1 3f 20 30 b9 03 68 61 63 e1 0c 00 32 b8 7f 46 73 5d 5c bb a0 01 72 67 c9 7d 2e e2 d9 fc c3 fa 7f 5e 95 ea e1 ea 93 3c 48 8a 53 ab 23 Data Ascii: #qk"HdcDF-8\iRu#go{2C}^YO.bJ@pzK7h'%ubP&layw}D&ehuaN~+C'kQ9uVK5c\|^d\|Mxk6ko;7TT0? 0hac2Fs]\rg}.^<HS#
2024-05-22 22:13:07 UTC	1369	IN	Data Raw: 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba cc 17 87 65 fb 84 03 b8 8b 39 88 3d af 1a 59 04 6b b7 c4 5d f9 01 af 29 41 51 72 38 a5 fc d4 aa 7f cb c0 a1 d0 d4 03 2b f6 3e 55 89 54 30 4a 0a 72 ea 06 b1 a0 b6 e9 f1 7f 92 0d 6d 36 e3 70 8d 1c 0d 83 ad ea 82 5d 65 e4 d9 e0 96 dd 67 6e 95 1e 4d 4d a7 ce 9e ba 03 4b 27 f9 40 19 09 ab 11 70 9e 32 d7 41 21 5d d5 c5 9a 82 32 3d 18 2d df 3f 54 3c 6c 4d 75 6f 7d 8e f0 f7 64 3a 9d 79 d7 6c 20 7f 2f 0f 40 c7 91 7f fa 62 9a 8d 25 20 95 97 36 80 af 92 23 8a 8d 7c 48 a0 56 a9 6e 88 d0 29 39 e3 c8 e6 4b 67 0c 02 42 83 8d 6a 9b d3 c1 37 96 f2 0f 76 18 13 52 c3 ce 04 6a bc de 1d 49 Data Ascii: T' }6/lpfQL%7Pmx[KqEM;l!43e9=Yk])AQr8+>UT0Jrm6p]egnMMK'@p2A!]2=-?T<lMuo}d:yl /@b% 6#\|HVn)9KgBj7vRjI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-22 22:13:08 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=64551 Date: Wed, 22 May 2024 22:13:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49753	172.66.47.121	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:09 UTC	399	OUT	GET /assets/facebook_logo_icon_147291-f2dfc6fd.ico HTTP/1.1 Host: greettive-tke-783743.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:09 UTC	753	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:09 GMT Content-Type: null Content-Length: 67646 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "0ce70d7a4746dfe57b6742a6942dacfa" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QsSGEqx5ox%2FQylmE5QZekoNzb6buFkZREK8UM0qTWXV7wmylhhZ5B7nWDrocQ3tQuOBnZ42JO9s%2FaXUui9EdeXw%2F%2FuP3HWoU3NzKgo3oNnJu0SPH8Mq0t0KNMl8FZVaQ3LyXkxMe34QvYKAus9t02WI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888026df39e74352-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 22:13:09 UTC	616	IN	Data Raw: 00 00 01 00 01 00 80 80 00 00 01 00 20 00 28 08 01 00 16 00 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 20 00 00 00 00 00 00 00 01 00 7b 9d 00 00 7b 9d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 78 1c 00 f1 78 17 00 f5 75 19 00 ed 7b 18 00 f2 77 18 01 f2 77 18 03 f2 77 18 04 f3 77 18 01 f2 Data Ascii: (( {{xxu{wwww
2024-05-22 22:13:09 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 80 20 00 f3 78 19 00 f1 76 18 00 ef 75 19 00 f2 78 19 01 f2 77 18 03 f2 77 18 03 f6 73 1d 00 f0 77 19 00 ec 77 21 00 ef 78 1d 02 f2 77 18 23 f2 77 18 54 f2 77 18 8d f2 78 19 be f2 74 14 e0 f3 80 27 fa fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 Data Ascii: xvuxwwsww!xw#wTwxt'
2024-05-22 22:13:09 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 78 18 00 f2 77 Data Ascii: xw
2024-05-22 22:13:09 UTC	1369	IN	Data Raw: ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fd f2 77 18 fb f2 77 18 fe f2 77 18 ff f2 77 18 ff f2 77 18 c9 f2 77 18 50 f2 75 1c 02 f2 75 1d 00 f2 77 18 03 f2 77 18 02 f1 76 18 00 f1 76 18 00 f2 77 18 00 ff 80 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwPuuwwvvw+
2024-05-22 22:13:09 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 76 18 00 f2 77 18 00 f2 77 18 00 f2 77 18 01 f2 77 18 03 f2 76 18 00 f2 76 18 0b f2 77 18 88 f2 77 18 f8 f2 77 18 ff f2 77 18 fc f2 77 18 fc f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff Data Ascii: vwwwwvvwwwwwwwwwwwwwwwwwwwwwxu''ux
2024-05-22 22:13:09 UTC	1369	IN	Data Raw: 18 ff f2 77 18 91 f1 77 18 08 f2 79 19 00 f2 77 18 03 f2 78 17 00 f2 78 17 00 f2 77 17 00 ff 71 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 76 17 00 f2 77 18 00 f2 77 18 00 f2 77 18 01 f2 77 18 04 f2 77 18 00 f2 77 18 2b f2 77 18 cf f2 77 18 ff f2 77 18 fc f2 77 18 fd f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 Data Ascii: wwywxxwqvwwwwww+wwwwwwwww
2024-05-22 22:13:09 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fc f2 77 18 fd f2 77 18 ff f2 77 18 8b eb 71 18 00 f1 76 18 02 f2 77 18 02 f2 77 18 00 f2 77 18 00 f2 77 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwwwwwwwwwwwwwqvwwww
2024-05-22 22:13:09 UTC	1369	IN	Data Raw: f2 77 18 00 f2 77 18 03 f2 77 18 00 f2 77 18 1d f2 77 18 d4 f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 Data Ascii: wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwxu''uxwww
2024-05-22 22:13:09 UTC	1369	IN	Data Raw: 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 dc f2 77 18 1e f2 77 18 00 f2 77 18 03 f2 77 18 00 f2 77 18 00 f2 78 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 77 18 00 f2 77 18 00 f2 77 18 02 f2 77 18 00 f2 78 18 16 f2 77 18 d5 f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff Data Ascii: wwwwwwwwwwwwwxwwwwxwwwwwwwwwwwwwwwwwwwww
2024-05-22 22:13:09 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 af f0 7b 1a 00 f2 78 18 02 f2 77 18 01 f6 76 1c 00 f2 78 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww{xwvx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	188.114.97.3	443	5840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:09 UTC	358	OUT	GET /api/json/8.46.123.175 HTTP/1.1 Host: freeipapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 22:13:09 UTC	742	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 22:13:09 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 58 Access-Control-Allow-Origin: * X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GcyrTJyD%2BrGp44LXng4QlfPWN757HUw%2BF5tJQ4VtWp6x4EqmTOT2S%2BeWnz00VtNik8hhDdntSkg2%2BFqNJOrmioO1yHfkzXXST7yvfIe6UpXzoJjm9PQYeE%2FhNMjClLyy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 888026df4f367c90-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 22:13:09 UTC	627	IN	Data Raw: 34 34 31 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 35 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 Data Ascii: 441{"ipVersion":4,"ipAddress":"8.46.123.175","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false
2024-05-22 22:13:09 UTC	469	IN	Data Raw: 6c 6c 5f 43 69 74 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 6d 61 63 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4a 75 6e 65 61 75 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4c 6f 75 69 73 76 69 6c 6c 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4d 6f 6e 74 69 63 65 6c 6c 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 6e 6f 6d 69 6e 65 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 74 6c 61 6b 61 74 6c 61 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f Data Ascii: ll_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_
2024-05-22 22:13:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49755	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-22 22:13:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-22 22:13:10 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=64652 Date: Wed, 22 May 2024 22:13:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-22 22:13:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5236, Parent PID: 2568

General

Target ID:	0
Start time:	18:12:58
Start date:	22/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5840, Parent PID: 5236

General

Target ID:	2
Start time:	18:13:00
Start date:	22/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2020,i,15421412117725282426,509490215148233789,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6368, Parent PID: 2568

General

Target ID:	3
Start time:	18:13:02
Start date:	22/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://greettive-tke-783743.pages.dev/help/contact/95094729232531"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://greettive-tke-783743.pages.dev/help/contact/95094729232531

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
https://greettive-tke-783743.pages.dev/help/contact/95094729232531