Edit tour

Windows Analysis Report
https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&ott=-ojzkuprwmac3&stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j

Overview

General Information

Sample URL:	https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&
Analysis ID:	1447535
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3664 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2740 --field-trial-handle=2708,i,3800012782922441957,2484468132831615815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6388 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA HTTP/1.1Host: offer.housebuyernetwork.comConnection: keep-aliveContent-Length: 257Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: application/jsonsec-ch-ua-mobile: ?0x-lead-id: 503374439User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://offer.housebuyernetwork.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dt_68990.lead=j%3A%7B%22id%22%3A503374439%7D; ndp_session_id=6df83656-8e9e-4007-9c54-4a550320ab69

Source: chromecache_69.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_68.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_75.2.dr	String found in binary or memory: https://google.com
Source: chromecache_75.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_69.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_69.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_69.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_69.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_66.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_75.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_79.2.dr, chromecache_66.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_66.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_75.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_79.2.dr, chromecache_66.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_66.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/39@48/21

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2740 --field-trial-handle=2708,i,3800012782922441957,2484468132831615815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2740 --field-trial-handle=2708,i,3800012782922441957,2484468132831615815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://lodash.com/	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://static.ads-twitter.com/uwt.js	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://www.youtube.com/iframe_api	0%	URL Reputation	safe
https://td.doubleclick.net	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://lodash.com/license	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://api.trustedform.com/certs/5235a708b9f558a39975d7026faf9f01b8b396c2/events	0%	Avira URL Cloud	safe
https://ads.nextdoor.com/public/pixel/ndp.js	0%	Avira URL Cloud	safe
https://static.leadshook.io/upload/pl/house-buyer-network-logo-75-op-pad-1709820635520.png	0%	Avira URL Cloud	safe
https://api.trustedform.com/certs/5235a708b9f558a39975d7026faf9f01b8b396c2/fingerprints	0%	Avira URL Cloud	safe
https://browser.sentry-cdn.com/7.113.0/bundle.tracing.replay.min.js	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://api.trustedform.com/certs/5235a708b9f558a39975d7026faf9f01b8b396c2/snapshot	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk	0%	Avira URL Cloud	safe
https://smartresourceguide.com/EasyKnock	0%	Avira URL Cloud	safe
https://browser.sentry-cdn.com/7.113.0/bundle.tracing.replay.min.js	0%	Virustotal		Browse
https://ads.nextdoor.com/public/pixel/ndp.js	0%	Virustotal		Browse
https://flask.nextdoor.com/pixel?pid=f5c0ed47-4065-463c-9ffd-c892cbcbb4b3&vrs=8.3&ev=PAGE_VIEW&pl=https%3A%2F%2Foffer.housebuyernetwork.com%2Fs%2FbQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA%3Fsource%3D1051%26sub_id_1%3D10000%26sub_id_2%3D57a5e1a860dd499298d62e4351284653%26sub_id_3%3D%26transaction_id%3D563730799%26p%3D45.0&ndclid=&ndclid_src=0&rf=&sem=&tm=Manual&iid=de98b290-485d-47ef-be34-4b92210c900a&pageid=eccf3837-426c-43ef-a67f-d462a0c59bb6&sessionid=6df83656-8e9e-4007-9c54-4a550320ab69&cd=%7B%7D	0%	Avira URL Cloud	safe
https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk	1%	Virustotal		Browse
https://googleads.g.doubleclick.net	0%	Virustotal		Browse
https://api.trustedform.com/trustedform.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002	0%	Avira URL Cloud	safe
https://ferradurai.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=	0%	Avira URL Cloud	safe
https://quiz-live.s3.amazonaws.com/upload/pl/house-buyers-1707763198483.png	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
https://smartresourceguide.com/EasyKnock	0%	Virustotal		Browse
https://www.d0qwtrk.com/28KL61/5NWWWN/?sub1=10000&sub2=563730799&sub3=	0%	Avira URL Cloud	safe
https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA	0%	Virustotal		Browse
https://sonziuq.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0&ckmguid=9fc97d00-6f34-4575-8508-5b5f753af5f3	0%	Avira URL Cloud	safe
https://cdn.trustedform.com/trustedform-1.9.15.js	0%	Avira URL Cloud	safe
https://www.google.com	0%	Virustotal		Browse
https://static.leadshook.io/upload/pl/house-buyer-network-hero-1709820479367.jpg	0%	Avira URL Cloud	safe
https://api.trustedform.com/certs	0%	Avira URL Cloud	safe
https://github.com/getsentry/sentry-javascript	0%	Avira URL Cloud	safe
https://google.com	0%	Avira URL Cloud	safe
https://cdn.trustedform.com/bootstrap.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002	0%	Avira URL Cloud	safe
https://ferradurai.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0	0%	Avira URL Cloud	safe
https://github.com/getsentry/sentry-javascript	0%	Virustotal		Browse
https://sentry.leadshook.io/api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0	0%	Avira URL Cloud	safe
https://api.trustedform.com/certs	0%	Virustotal		Browse
https://google.com	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
447b0cd8.ongageroute.net	44.195.255.76	true	false	unknown
flask.us.nextdoor.com	54.200.211.8	true	false	unknown
browser.sentry-cdn.com	151.101.194.217	true	false	unknown
team-tools-1121285548.us-east-1.elb.amazonaws.com	3.232.98.97	true	false	unknown
smartresourceguide.com	192.124.249.138	true	false	unknown
www.d0qwtrk.com	35.244.245.136	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
static.leadshook.io	108.156.60.79	true	false	unknown
s3-w.us-east-1.amazonaws.com	3.5.27.156	true	false	unknown
network.leadshook.io	3.213.181.94	true	false	unknown
ads.us.nextdoor.com	52.35.252.245	true	false	unknown
www.google.com	142.250.185.164	true	false	unknown
api.trustedform.com	44.205.67.127	true	false	unknown
ferradurai.com	3.80.229.104	true	false	unknown
cdn.trustedform.com	3.162.38.8	true	false	unknown
sonziuq.com	34.209.92.5	true	false	unknown
flask.nextdoor.com	unknown	unknown	false	unknown
ads.nextdoor.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
offer.housebuyernetwork.com	unknown	unknown	false	unknown
sentry.leadshook.io	unknown	unknown	false	unknown
quiz-live.s3.amazonaws.com	unknown	unknown	false	unknown
analytics.tiktok.com	unknown	unknown	false	unknown
clickers.smartresourceguide.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0	false		unknown
https://browser.sentry-cdn.com/7.113.0/bundle.tracing.replay.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://static.leadshook.io/upload/pl/house-buyer-network-logo-75-op-pad-1709820635520.png	false	Avira URL Cloud: safe	unknown
https://api.trustedform.com/certs/5235a708b9f558a39975d7026faf9f01b8b396c2/fingerprints	false	Avira URL Cloud: safe	unknown
https://api.trustedform.com/certs/5235a708b9f558a39975d7026faf9f01b8b396c2/events	false	Avira URL Cloud: safe	unknown
https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j	false		unknown
https://ads.nextdoor.com/public/pixel/ndp.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.trustedform.com/certs/5235a708b9f558a39975d7026faf9f01b8b396c2/snapshot	false	Avira URL Cloud: safe	unknown
https://smartresourceguide.com/EasyKnock	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://flask.nextdoor.com/pixel?pid=f5c0ed47-4065-463c-9ffd-c892cbcbb4b3&vrs=8.3&ev=PAGE_VIEW&pl=https%3A%2F%2Foffer.housebuyernetwork.com%2Fs%2FbQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA%3Fsource%3D1051%26sub_id_1%3D10000%26sub_id_2%3D57a5e1a860dd499298d62e4351284653%26sub_id_3%3D%26transaction_id%3D563730799%26p%3D45.0&ndclid=&ndclid_src=0&rf=&sem=&tm=Manual&iid=de98b290-485d-47ef-be34-4b92210c900a&pageid=eccf3837-426c-43ef-a67f-d462a0c59bb6&sessionid=6df83656-8e9e-4007-9c54-4a550320ab69&cd=%7B%7D	false	Avira URL Cloud: safe	unknown
https://api.trustedform.com/trustedform.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002	false	Avira URL Cloud: safe	unknown
https://ferradurai.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=	false	Avira URL Cloud: safe	unknown
https://quiz-live.s3.amazonaws.com/upload/pl/house-buyers-1707763198483.png	false	Avira URL Cloud: safe	unknown
https://www.d0qwtrk.com/28KL61/5NWWWN/?sub1=10000&sub2=563730799&sub3=	false	Avira URL Cloud: safe	unknown
https://sonziuq.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0&ckmguid=9fc97d00-6f34-4575-8508-5b5f753af5f3	false	Avira URL Cloud: safe	unknown
https://cdn.trustedform.com/trustedform-1.9.15.js	false	Avira URL Cloud: safe	unknown
https://static.leadshook.io/upload/pl/house-buyer-network-hero-1709820479367.jpg	false	Avira URL Cloud: safe	unknown
https://api.trustedform.com/certs	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.trustedform.com/bootstrap.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002	false	Avira URL Cloud: safe	unknown
https://ferradurai.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0	false	Avira URL Cloud: safe	unknown
https://sentry.leadshook.io/api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://npms.io/search?q=ponyfill.	chromecache_69.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_79.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://lodash.com/	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://googleads.g.doubleclick.net	chromecache_75.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk	chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://static.ads-twitter.com/uwt.js	chromecache_75.2.dr	false	URL Reputation: safe	unknown
http://underscorejs.org/LICENSE	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_66.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.youtube.com/iframe_api	chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://td.doubleclick.net	chromecache_75.2.dr, chromecache_79.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://www.merchant-center-analytics.goog	chromecache_79.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://lodash.com/license	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://github.com/getsentry/sentry-javascript	chromecache_68.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://google.com	chromecache_75.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_69.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
44.195.255.76	447b0cd8.ongageroute.net	United States	14618	AMAZON-AESUS	false
3.5.27.156	s3-w.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.217.203.121	unknown	United States	16509	AMAZON-02US	false
192.124.249.138	smartresourceguide.com	United States	30148	SUCURI-SECUS	false
54.200.211.8	flask.us.nextdoor.com	United States	16509	AMAZON-02US	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
52.35.252.245	ads.us.nextdoor.com	United States	16509	AMAZON-02US	false
151.101.194.217	browser.sentry-cdn.com	United States	54113	FASTLYUS	false
18.233.135.95	unknown	United States	14618	AMAZON-AESUS	false
3.232.98.97	team-tools-1121285548.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.162.38.8	cdn.trustedform.com	United States	16509	AMAZON-02US	false
18.244.18.79	unknown	United States	16509	AMAZON-02US	false
3.213.181.94	network.leadshook.io	United States	14618	AMAZON-AESUS	false
3.218.204.205	unknown	United States	14618	AMAZON-AESUS	false
35.244.245.136	www.d0qwtrk.com	United States	15169	GOOGLEUS	false
34.209.92.5	sonziuq.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
108.156.60.79	static.leadshook.io	United States	16509	AMAZON-02US	false
44.205.67.127	api.trustedform.com	United States	14618	AMAZON-AESUS	false
3.80.229.104	ferradurai.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1447535
Start date and time:	2024-05-25 21:11:46 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/39@48/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.186.142, 74.125.133.84, 34.104.35.123, 142.250.184.202, 2.18.64.15, 2.18.64.26, 216.58.206.35, 104.18.186.31, 104.18.187.31, 172.217.16.136, 142.250.185.238, 20.114.59.183, 93.184.221.240, 192.229.221.95, 20.3.187.198, 13.85.23.206
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, analytics.tiktok.com.edgekey.net, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, e35058.a.akamaiedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Input	Output
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is for Google Tag Manager, which is a legitimate tool used for managing marketing tags on websites. It does not contain any malicious elements." }
(function (w, d, s, l, i) { w[l] = w[l] \|\| [] w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }) var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : '' j.async = true j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl f.parentNode.insertBefore(j, f) })(window, document, 'script', 'dataLayer', 'GTM-5ZJ5HVV9')
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The code is a standard implementation of Google Tag Manager, which is used for tracking and managing tags on a website. It does not exhibit any malicious behavior." }
(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-5ZJ5HVV9');
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is a standard implementation of TikTok's analytics tracking pixel. It does not exhibit any malicious behavior and is used for tracking and analytics purposes. No phishing or harmful activities are detected." }
!function (w, d, t) { w.TiktokAnalyticsObject=t;var ttq=w[t]=w[t]\|\|[];ttq.methods=["page","track","identify","instances","debug","on","off","once","ready","alias","group","enableCookie","disableCookie"],ttq.setAndDefer=function(t,e){t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}};for(var i=0;i<ttq.methods.length;i++)ttq.setAndDefer(ttq,ttq.methods[i]);ttq.instance=function(t){for(var e=ttq._i[t]\|\|[],n=0;n<ttq.methods.length;n++)ttq.setAndDefer(e,ttq.methods[n]);return e},ttq.load=function(e,n){var i="https://analytics.tiktok.com/i18n/pixel/events.js";ttq._i=ttq._i\|\|{},ttq._i[e]=[],ttq._i[e]._u=i,ttq._t=ttq._t\|\|{},ttq._t[e]=+new Date,ttq._o=ttq._o\|\|{},ttq._o[e]=n\|\|{};var o=document.createElement("script");o.type="text/javascript",o.async=!0,o.src=i+"?sdkid="+e+"&lib="+t;var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(o,a)}; ttq.load('CLL4FUBC77U60H56AFP0'); ttq.page(); }(window, document, 'ttq');
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any form fields for a username or password.", "The text does not contain any language indicating that it is a login form.", "The text is promoting a service for selling houses for cash, not for logging into an account." ] }
"House Buyer Network Get Cash For Your House! Fill out The Form TO Get started on your FREE CASH OFFER Today! NO Repairs. NO Agents. NO Fees. Do you want to sell your house for cash? Yes No Terms of servi
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to handle form validation, consent checks, and some graphical effects like confetti. There are no obvious signs of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code primarily manipulates the DOM and handles user interactions. Therefore, it is considered low risk." }
function validateMaxMinLength(e){e.target.value.length<e.target.minLength?document.getElementById("length-errors").innerHTML=e.target.dataset.min:e.target.value.length>e.target.dataset.maxlength&&""!==e.target.dataset.maxlength?(document.getElementById("length-errors").innerHTML=e.target.dataset.max,document.getElementById("forward-button").style.display="none"):(document.getElementById("length-errors").innerHTML="",document.getElementById("forward-button").style.display="")}function consentCheck(e){let t=document.getElementById("tooltip-consent"),n=document.getElementsByClassName("consent-section-class"),a=!1;t&&(e&&t.classList.add("hidden"),n&&(Array.from(n).map(e=>{e.checked&&(t.classList.add("hidden"),a=!0)}),a\|\|e\|\|t.classList.remove("hidden")))}function leaveConsentCheck(){let e=document.getElementById("tooltip-consent");e&&e.classList.add("hidden")}class Path{constructor(e,t,n,a,i){this.top=e,this.left=t,this.velocity=n,this.friction=.8,this.gravity=a,this.style=i}update(){this.top=this.top+this.gravity+this.velocity.y,this.left=this.left+this.velocity.x("rightPop"===this.style?-1:1),this.velocity.x=this.velocity.xthis.friction,this.velocity.y=this.velocity.ythis.friction}}class FireWorksPath extends Path{constructor(e,t,n,a,i){super(e,t,n,a,null),this.firstFrame=i\|\|!1}update(e,t){this.firstFrame?(this.top=t,this.left=e,this.firstFrame=!1):(this.top=this.top+this.gravity+this.velocity.y,this.left=this.left+this.velocity.x,this.velocity.x=this.velocity.xthis.friction,this.velocity.y=this.velocity.ythis.friction)}}function getShapeMap(e){const t=e?'filter="drop-shadow(3px 5px 4px rgb(0 0 0 / 0.3))"':"";return{star:`<svg width="20" height="20" viewBox="0 0 24 24" ${t}> `+'<path d="M12 .587l3.668 7.568 8.332 1.151-6.064 5.828 1.48 8.279-7.416-3.967-7.417 3.967 1.481-8.279-6.064-5.828 8.332-1.151z" /> </svg>',circle:`<svg width="16" height="16" viewBox="0 0 20 20" ${t}>`+'<circle cx="8" cy="8" r="8" /></svg>',diamond:`<svg width="15" height="15" viewBox="0 0 15 15" ${t}>`+'<polygon points="0,-50 35,0 0,50 -35,0 " /></svg>',rectangle:`<svg width="6" height="30" ${t}>`+'<rect width="6" height="30"></svg>',squiggly:`<svg version="1.1" width="35" height="35" viewBox="0 0 489.932 489.932" ${t}>`+'<path d="M234.971,398.156l45.9-35.6c15.2-10.7,35.8-51.2,1-78.6l-48-37.7c-4.2-2.5-4.9-8.6,1-12.6l44.9-32.5c22.5-16.5,32.5-53.7,0-79.7l-44.8-33.6c-5-3.7-4.6-8.9,1-12.6l52.2-38.8c9.4-6.3,10.4-18.9,4.2-28.3s-18.8-10.5-28.1-4.2l-52.2,38.8c-30.5,24.7-29.8,56.3,0,79.7l44.9,33.5c5.8,3.8,4.1,10.2,0,12.6l-45.9,33.5c-28.7,21.6-29.8,58-1,78.6l48,37.7c4.9,3.1,3.7,9.5-1,12.6l-47.1,34.7c-29.8,23.2-25.3,58.9-1,78.6l54.2,41.9c4.2,3.1,18.8,8.7,28.2-5.2c7.3-8.4,6.3-21-3.1-28.3l-54.3-41.9C229.571,407.356,229.771,401.856,234.971,398.156z"/></svg>'}}function showConfetti(){const e=document.querySelector(".node-container.node-active"),t=e.dataset.confettiEnabled;if(!t\|\|"false"===t)return;const n={popDelay:1e3parseFloat(e.dataset.confettiDdelay)\|\|500,style:e.dataset.confettiS
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is primarily concerned with tracking events using Google Tag Manager (GTM). It does not exhibit any malicious behavior such as data exfiltration, unauthorized access, or manipulation of user data. The hexadecimal string is used as a token for tracking purposes and poses no risk." }
const messageKey = 'cfa69734cfd2525e6a7626c0397d072c' /** * * @param eventName * @param data */ const trackGtmEvent = function (eventName, data) { let eventData = { event: 'LH_' + eventName, leadsHookData: data, incomingToken: messageKey } console.log('GTM Event data', eventData) dataLayer.push(eventData) } const sendCustomGTMEvent = function (eventName, data) { eventEmitter.emit('dt:reset-gtm-data') trackGtmEvent(eventName, { customEvent: data }) }
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The script dynamically loads an external script from 'api.trustedform.com' and sets custom fields based on the success or failure of loading the script. While dynamically loading external scripts can pose a risk, the domain 'trustedform.com' is known for providing certification services for lead forms, which is generally considered legitimate. There are no obvious signs of malicious activity in the provided code." }
(function() { var field = 'xxCertUrl'; var tf = document.createElement('script'); tf.type = 'text/javascript'; tf.async = true; tf.onload = function() { console.log("TrustedForm script loaded."); DT.setField('trustedformfired', 'yes'); // Set the custom field to indicate script firing console.log("Custom field 'trustedformfired' set to 'yes'."); }; tf.onerror = function() { console.log("Failed to load the TrustedForm script."); DT.setField('trustedformfired', 'no'); // Set the custom field in case of error }; tf.src = ("https:" == document.location.protocol ? 'https://' : 'http://') + "api.trustedform.com/trustedform.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=" + new Date().getTime() + Math.random(); var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(tf, s); })();
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily consists of configuration settings and data validation rules. It does not contain any obvious malicious behavior such as data exfiltration, unauthorized access, or harmful operations. The presence of tracking and advertisement functionality is noted but considered no risk as per the given instructions. The code appears to be part of a legitimate web application setup." }
window.account = JSON.parse('{"id":3462,"tenantId":3612,"name":"PL","subdomain":"pl","usedStorage":0,"settings":{},"state":"active","stateUpdatedAt":"2023-11-23T00:00:00.000Z","tos":true,"createdAt":"2023-11-09T02:01:30.000Z","updatedAt":"2024-03-16T02:48:03.000Z"}') window.config = JSON.parse('{"baseUrl":"https://offer.housebuyernetwork.com/","s3BaseUrl":"https://quiz-live.s3.amazonaws.com/","cdnBaseUrl":"https://static.leadshook.io/"}') window.gtmSettings = JSON.parse('{"token":"cfa69734cfd2525e6a7626c0397d072c","tiktok":{"enabled":false,"pixelId":""},"enabled":true,"twitter":{"enabled":false,"pixelId":null,"leadEventId":null,"viewEventId":null},"facebook":{"enabled":false,"pixelId":null},"microsoft":{"enabled":false,"UETTagId":null},"conainerId":"GTM-5ZJ5HVV9","conversions":{"googleConversions":[],"microsoftConversions":[]},"googleAnalytics4":{"enabled":true,"measurementId":"G-GC0X5B869E"}}') window.dtData = JSON.parse('{"dataValidation":{"email":false,"phone":false,"address":true,"phoneOptions":{"countryRestrictionsErrorMessage":"Please enter number from .","rejectOnPhoneIsOffErrorMessage":"The number is switched off. Please try another one.","rejectOnMissingCarrierErrorMessage":"This number is not associated with a telecom. Please try another one.","rejectOnNotFoundErrorMessage":"We can not validate this number. Please try another one.","rejectOnDeadNumberErrorMessage":"Please try another number.","rejectOnDoesNotSupportSMSErrorMessage":"Please try another number.","rejectOnClosedUserGroupErrorMessage":"Please try another number.","rejectOnTemporaryErrorsErrorMessage":"Temporary error. Please try another number.","rejectOnAccountIssuesErrorMessage":"Please try again later.","rejectOnInactiveErrorMessage":"Please try another number.","rejectOnTPSErrorMessage":"Please try another number.","rejectOnCTPSErrorMessage":"Please try another number.","rejectOnDNCErrorMessage":"Please try another number.","type":null,"countryRestrictions":["US","CA"],"defaultCountry":"US"},"emailOptions":{"rejectOnSpamTrapErrorMessage":"We cannot accept this email address. Please try another one.","rejectOnDisposableErrorMessage":"We cannot accept disposable email address. Please try another one.","rejectOnAcceptAllErrorMessage":"We cannot accept this email address. Please try another one.","rejectOnRoleErrorMessage":"We cannot accept this email address. Please try another one.","type":null},"addressOptions":{"fieldmappings":{"place_id":"place_id","name":"street_adr","formatted_address":"form_addr","administrative_area_level_1":"state","country":"country","postal_code":"zipcode","route":"street_nam","street_number":"street_num","locality":"city"},"type":"google_places","id":3138,"restrictByCountries":true,"countryRestrictions":["US","CA"],"enableFieldmapping":true},"emailIpquality":{"rejectOnDisposableErrorMessage":"We cannot accept disposable email address. Please try another one.","rejectOnMidDeliverabilityErrorMessage":"We cannot accept mid de
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any form fields for a username or password.", "The text does not contain any language indicating that it is a login form.", "The text is promoting a service for selling houses for cash, not requesting login credentials." ] }
"House Buyer Network Get Cash For Your House! Fill out The Form TO Get started on your FREE CASH OFFER Today! NO Repairs. NO Agents. NO Fees. Do you want to sell your house for cash? Yes No Terms of servi
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code initializes Sentry for error tracking and performance monitoring. It includes configurations for tracing and session replay, which are standard practices for monitoring application performance and errors. There is no indication of malicious behavior. The use of a DSN and integrations for Sentry is typical for legitimate applications. The only potential risk is the exposure of the 'account' subdomain, but this is minimal." }
Sentry.init({ dsn: "https://a16b093dbf1efc0121e044c4c8c7afeb@sentry.leadshook.io/6", integrations: [ Sentry.browserTracingIntegration({ // Set 'tracePropagationTargets' to control for which URLs distributed tracing should be enabled tracePropagationTargets: ["localhost", /^https:\/\/leadshook\.io\/api/], }), Sentry.replayIntegration({ maskAllText: false, blockAllMedia: false, }), ], // Performance Monitoring tracesSampleRate: 1, // Capture 10% of the transactions // Session Replay replaysSessionSampleRate: 1, // This sets the sample rate at 10%. You may want to change it to 100% while in development and then sample at a lower rate in production. replaysOnErrorSampleRate: 1, // If you're not already sampling the entire session, change the sample rate to 100% when sampling sessions where errors occur. }); Sentry.setTag("account", window.account.subdomain)
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code listens for messages and processes them based on tokens. While this could be used for legitimate purposes such as cross-origin communication, it could also be exploited if not properly secured. The risk is low but present." }
var dataLayer=window.dataLayer\|\|(window.dataLayer=[]),tokens=google_tag_manager["rm"]["179593731"](327).split(", "),messages=[];function receiveMessage(a){a.data.messageID&&(event.source.postMessage(a.data.messageID,"*"),tokens.includes(a.data.messageKey)?messages.includes(a.data.messageID)\|\|dataLayer.push({event:a.data.event,leadsHookData:a.data.data,incomingToken:a.data.messageKey}):console.log("LH token does not match, Expecting token 095d3681d7fdc1da4e72d354a1b6c747"),messages.push(a.data.messageID))} window.addEventListener("message",receiveMessage,!1);
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The script attempts to save the current URL to a custom field using a function DT.setField. This behavior is generally benign and could be part of legitimate functionality for tracking referrers or similar purposes. There are no indications of malicious activity such as data exfiltration, credential stealing, or unauthorized access." }
console.log("Script evaluation started. Preparing to check URL and save using DT.setField."); function saveUrlToCustomField() { let attempts = 0; console.log("1. Initializing URL save function."); // Check if DT and DT.setField are available if (typeof DT === "undefined" \|\| typeof DT.setField !== "function") { console.log("DT.setField is not available. Aborting script."); return; // Exit the function if DT.setField is not available } function trySetUrlField() { console.log(`2. Attempting to retrieve and save the URL. Current attempt: ${attempts + 1}`); const url = window.location.href; if (url !== "" && url !== undefined && url !== null) { console.log("3. URL retrieved successfully:", url); DT.setField("referrer", url); // Use the correct field name here console.log("4. URL saved to custom field successfully."); } else if (attempts < 10) { attempts++; console.log(`5. URL not found or is blank, retrying... Attempt ${attempts} of 10.`); setTimeout(trySetUrlField, 500); } else { console.log("6. Failed to retrieve URL after 10 attempts. Stopping execution."); } } trySetUrlField(); } // Directly call the function without waiting for the entire page to load saveUrlToCustomField();
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 1, "reasons": "The script attempts to retrieve the referral URL and save it using a function DT.setField. This behavior is generally benign and often used for analytics or tracking purposes. There is no indication of malicious activity such as data exfiltration, credential stealing, or unauthorized access." }
console.log("Script evaluation started. Preparing to check Referral URL and save using DT.setField."); function saveRefUrlToCustomField() { let attempts = 0; console.log("1. Initializing Ref URL save function."); // Check if DT and DT.setField are available if (typeof DT === "undefined" \|\| typeof DT.setField !== "function") { console.log("DT.setField is not available. Aborting script."); return; // Exit the function if DT.setField is not available } function trySetRefUrlField() { console.log(`2. Attempting to retrieve and save the Ref URL. Current attempt: ${attempts + 1}`); const refUrl = document.referrer; if (refUrl !== "" && refUrl !== undefined && refUrl !== null) { console.log("3. Ref URL retrieved successfully:", refUrl); DT.setField("ref_url", refUrl); // Use the correct field name here console.log("4. Ref URL saved to custom field successfully."); } else if (attempts < 10) { attempts++; console.log(`5. Ref URL not found or is blank, retrying... Attempt ${attempts} of 10.`); setTimeout(trySetRefUrlField, 500); } else { console.log("6. Failed to retrieve Ref URL after 10 attempts. Stopping execution."); } } trySetRefUrlField(); } // Directly call the function without waiting for the entire page to load saveRefUrlToCustomField();
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any form fields related to login credentials such as username or password.", "The text does not contain any prompts for existing user authentication or new user registration.", "The text is promoting a service for selling houses for cash, not soliciting user login information." ] }
"House Buyer Network Get Cash For Your House! Fill out The Form TO Get started on your FREE CASH OFFER Today! NO Repairs. NO Agents. NO Fees. Do you want to sell your house for cash? Yes No Terms of servi
URL: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is primarily for loading an external script related to tracking or advertisement functionality from 'https://ads.nextdoor.com/public/pixel/ndp.js'. It initializes and tracks a page view event. There are no indications of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access." }
(function(win, doc, sdk_url){ if(win.ndp) return; var tr=win.ndp=function(){ tr.handleRequest? tr.handleRequest.apply(tr, arguments):tr.queue.push(arguments); }; tr.queue = []; var s='script'; var new_script_section=doc.createElement(s); new_script_section.async=!0; new_script_section.src=sdk_url; var insert_pos=doc.getElementsByTagName(s)[0]; insert_pos.parentNode.insertBefore(new_script_section, insert_pos); })(window, document, 'https://ads.nextdoor.com/public/pixel/ndp.js'); ndp('init','f5c0ed47-4065-463c-9ffd-c892cbcbb4b3', {}) ndp('track','PAGE_VIEW'); console.log("Next Door Script has fired!!!");

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94670
Entropy (8bit):	5.692894346444635
Encrypted:	false
SSDEEP:	1536:1NkNjpYbutISvCJrgc1pu5CXpY90R7ViG+K+4:L+eSQgG4iHR7R
MD5:	D5F4304DEA6121D44398DA810B5A4106
SHA1:	2A14209564408932EC4B03CC93B1DC739E811BBF
SHA-256:	5C16612B76ACBAD337A38019FA67CB4733227A5ACF681D92471D5BBE0BAE121A
SHA-512:	76FEAFBDBD9482CB6AA4A61B580FCA5F5FA2CFEC5F2E67E44978F9ED256BE29F2FBC8E8F7E79DDB7A41506C022CD889DE9DC1D14C70CBF0764151A9334E58AA3
Malicious:	false
Reputation:	low
URL:	https://cdn.trustedform.com/trustedform-1.9.15.js
Preview:	!function(){"use strict";function n(n,t){return"function"==typeof n?function(t){return n.bind(t)}:function(n){return t.bind(null,n)}}var t=Array.from\|\|function(n){return Array.prototype.slice.call(n)};var r=n(Array.prototype.includes,e);function e(n,t){return-1!==n.indexOf(t)}var i=n(Array.prototype.flatMap,(function(n,t){for(var r=[],e=0;e<n.length;e++)Array.prototype.push.apply(r,t(n[e]));return r}));var o=n(Array.prototype.find,(function(n,t){for(var r=0;r<n.length;r++)if(t(n[r]))return n[r]}));var u=n(String.prototype.includes,e);window.trustedForm\|\|(window.trustedForm={id:1337});var a=window.trustedForm;a.startRecording=function(){return f.disabled.recording?"TrustedForm recording cannot be started once stopped.":(f.disabled.recording=!1,"TrustedForm recording has been started")},a.stopRecording=function(){return f.disabled.recording=!0,"TrustedForm recording has been stopped"},window.trustedFormStartRecording=a.startRecording,window.trustedFormStopRecording=a.stopRecording;var c=

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149973
Entropy (8bit):	5.600075316899329
Encrypted:	false
SSDEEP:	1536:pnxELzwdVX9OU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeilYkLWNmjTuV:pnxELkhOU03o4PwjhIBVT39FknurfJ
MD5:	7F5C51691BB26A0CD04D23BA28D6CE93
SHA1:	3439345E9A9486C3CB524D39741D9EFCD97C0D5B
SHA-256:	D891E16DBAF81B89F017B6516AFDEFFE602F8DF1D5E269429E7B6EAF63726A03
SHA-512:	019B32ED02F9BC39EF2920375925DB8A188ADC5FD1041069E75299E8535917F7FF854FADC58080AE08EFC3DC1C9C9916432FC8DDC9A4FB29BD8E8EC809FD9DF3
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/identify_ce1d8843.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new N(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	309170
Entropy (8bit):	5.567006560929961
Encrypted:	false
SSDEEP:	3072:vW44gMc0Iard8OdwDM1ba8tyCKqjysCBIQ+9agdDBqzGmRFFHxKb+dH54OQoD5AA:O44b8OdwDMnFz1zQ+9fdDBqzGald+ON
MD5:	29D647FCF3B59C094C8E425D86525A15
SHA1:	FE00C18851DB150E5FEE4987FC11BA0F07072AED
SHA-256:	312E9C99FA444F4689861A6EDEA47EDA16B576857A70F30D98D462C0DFD62455
SHA-512:	764FFCF444898C9921BB99A5BED15D09992BE154A407FE9E6496A88BEB97D0B0CB1B7D5ADCE33FC3BFE03429CEF758B16EB12F17296B85E40A75DAF7F826F0C7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-RSX33J420M&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9363
Entropy (8bit):	5.4129522250639655
Encrypted:	false
SSDEEP:	192:fLQyU3MgJMNF6NBNWNW3FN/NGYN+5NUpNWNVNs3mNkNifNBNnXNTNIND3cNTNzx+:JFAXckrVV4UvcbaMiyXndpGzqpDM
MD5:	EF60F704A24E2A1612057973BEA69BB0
SHA1:	394BBB91C03E93128A9173E71A0C18F699CFEBAE
SHA-256:	71E820A7C6450AA5349BC4FC28C89758BAED7D3EC3B9EFBEE72CEB1F5DCED366
SHA-512:	51FB009EA1D8756D6CF8739FCF8D214C2AC698C0A3BBA4500BB552EADC64D287C8CAD7D2065863E78D739ABA24E6BBB34B32F519C404F8CCDECD120F56CA7F28
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@400;500;700&family=Roboto:wght@400;500;700&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2) format('woff2

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65411)
Category:	downloaded
Size (bytes):	228088
Entropy (8bit):	5.270964304571663
Encrypted:	false
SSDEEP:	3072:RakDYpYvKTxbMWHmBT1fIBy6N2dC7oRQno8CynvRSNuqWRN5La:YkDYpYwgTohaino8CynvRjqWRNda
MD5:	1ACB5B810AD0B9D9F9EE23C1A2844967
SHA1:	03F58CBB227EC8E072F05F95F31A03B106AC387C
SHA-256:	4FC1B77C7E354BA09EA701445E7E309B58409DC36EDB20E6F33AC451A2F39E30
SHA-512:	20CC9F4FF4EC7FC5374DBAFC003FC65112BE654CBA802C4F6FBF99A4B0E90DCC35D71DF1A88DA9D1C2359FC18B41204617C2E579096A6EBAF5BA9CA1C4A4CC22
Malicious:	false
Reputation:	low
URL:	https://browser.sentry-cdn.com/7.113.0/bundle.tracing.replay.min.js
Preview:	/! @sentry/browser & @sentry/tracing & @sentry/replay 7.113.0 (29f5b8d) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const e=Object.prototype.toString;function n(t){switch(e.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return d(t,Error)}}function r(t,n){return e.call(t)===`[object ${n}]`}function s(t){return r(t,"ErrorEvent")}function i(t){return r(t,"DOMError")}function o(t){return r(t,"String")}function a(t){return"object"==typeof t&&null!==t&&"__sentry_template_string__"in t&&"__sentry_template_values__"in t}function c(t){return null===t\|\|a(t)\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return r(t,"Object")}function l(t){return"undefined"!=typeof Event&&d(t,Event)}function h(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function f(t){return"number"==typeof t&&t!=t}function d(t,e){try{return t instanceof e}catch(t){return!1}}function p(t){return!("object"!=typeof t\|\|null===t\|\|!

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4143)
Category:	downloaded
Size (bytes):	73015
Entropy (8bit):	5.342744191670081
Encrypted:	false
SSDEEP:	1536:X9ylPegosd1p8X4Kx2iiC0guaihfaZgb9pL/:X9cVaizgehfaZCX/
MD5:	9BECC40FB1D85D21D0CA38E2F7069511
SHA1:	AE854B04025DB8B7F48FDD6DEDF41E77EAE44394
SHA-256:	A9705DFC47C0763380D851AB1801BE6F76019F6B67E40E9B873F8B4A0603F7A9
SHA-512:	585374E3CE3AB1D28C20FE4B28DA6131A5B353B629332094DB8E5EB4ADE0FF601161B3CAF546F5F1E1BE96353DEAA29109687EAAE098EF279F4A6964430D4035
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/lodash@4.17.21/lodash.min.js
Preview:	/*. @license. * Lodash <https://lodash.com/>. * Copyright OpenJS Foundation and other contributors <https://openjsf.org/>. * Released under MIT license <https://lodash.com/license>. * Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>. * Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors. */.(function(){function n(n,t,r){switch(r.length){case 0:return n.call(t);case 1:return n.call(t,r[0]);case 2:return n.call(t,r[0],r[1]);case 3:return n.call(t,r[0],r[1],r[2])}return n.apply(t,r)}function t(n,t,r,e){for(var u=-1,i=null==n?0:n.length;++u<i;){var o=n[u];t(e,o,r(o),n)}return e}function r(n,t){for(var r=-1,e=null==n?0:n.length;++r<e&&t(n[r],r,n)!==!1;);return n}function e(n,t){for(var r=null==n?0:n.length;r--&&t(n[r],r,n)!==!1;);return n}function u(n,t){for(var r=-1,e=null==n?0:n.length;++r<e;)if(!t(n[r],r,n))return!1;.return!0}function i(n,t){for(var r=-1,e=null==n?0:n.length,u=0,i=[];++r<e;){var o=n[r];t(o,r,n)&&(i[u++]=o)}return i}function o(n

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x1151, components 3
Category:	dropped
Size (bytes):	28306
Entropy (8bit):	7.474214924177766
Encrypted:	false
SSDEEP:	768:KCIIu3MBdbrkRn650K6Yrek7rmECLlroepoBR:6TPRnsl7rm1LVoemBR
MD5:	29B7296A444481DDE0B4C614253B92E5
SHA1:	D8E5815912B391FAA4D779ACCADA1CBBF3C1761B
SHA-256:	4B2554B9BD5343A746B47EAF6853EBD85B1A8EA83083BC4BB1B4856A0AE601AE
SHA-512:	8771AF554CABD2FC8AC50E4CD52A8E075CDF736B20264AF5D4C7F60439E520CF6636D8ACA348D07F279AFAC3AC208FEAB247083633947F65FC5FA0049691C0EF
Malicious:	false
Reputation:	low
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222..........."..............................................O<........(.......P.@..@.....................@.@........(..QA@..........@5..............P....P.(.....@....................@....P....(......@........(..<....R(........(.@......(... ...........r.....(..(.P....P(....(.(...........[.<......(........P......@..............q.......P..........J.(..............[.. ..(".............(.................[.. ........P(...P.J....@.................0..(.P...P..RY@...P.(...........@.X.V.r...B......@.(.........@..P.......................P.R..P...(..(....@..........................H..@.....R............s......(...R....(..@.P...P.@.........o.3.(......(.@...P....P..............(..\|.T..(....(.....P.P..@..@..................P...@.......(..(....... .. ..m....X.P...P...@.P................*.....b@.........P..e....................-."................

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3150 x 803, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	45260
Entropy (8bit):	7.904388392859475
Encrypted:	false
SSDEEP:	768:AYrjT5hKd1zr/s8B+GT5STcMZSd9kCs/Ntt+dx0Mosyft7JqYRSUls52:HnTDKd13/s8+GT54cPbkCs1bAxJos2tR
MD5:	E447A763BCF48EE3009A17A4C17E5B36
SHA1:	1AE69CF144E9429D2AC8F80B1B143C1CAE33A921
SHA-256:	5DE98DAD469C39DFC6734D2727A6442B5E0805CD55DDF387D282ACD656D45E87
SHA-512:	8ADE8C032EA95CE63C303C86038B6117DFED47A72F2B7578F1FA43DCF5811F8AFE35646D78C28991B015D2CABBBF59CC5E18A8AEFA0274A5D38EC7E453C635FD
Malicious:	false
Reputation:	low
URL:	https://static.leadshook.io/upload/pl/house-buyer-network-logo-75-op-pad-1709820635520.png
Preview:	.PNG........IHDR...N...#.....6.D....CPLTE.....................GpL............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................kR6....tRNS... ........#..&......].....)c/.T.Q..,.K`..Wu.Z.i..8.....l25E........r.N!H...%...A.f...~>....{;x"[.$(.Ve..o.'..Y.._b..k^P0\dvUMIg.h..*JLq.F.j.XC...p-+sRS.O147....a3..n6.....<....}GDy:zmw\|=@t?B9y.... .IDATx........au..".%.J.6.n.%...L./ ..$..bt.nV6.{4.`..G...T....KI....N...v.........................`'...;...`'...;........N...v....N...v.........................`'...;

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52695)
Category:	downloaded
Size (bytes):	347466
Entropy (8bit):	5.426074559231229
Encrypted:	false
SSDEEP:	3072:lJV7SbHKAho0MtQVcn0k3QVXPq/p+sFoK+RahCZrTh3ELengKHsou5z4ZK77utd2:lJVANkQdmQVfq/pPoKo9ZrTh3MefQzoU
MD5:	1A8416AA675EA47C8AFEE6DC82D891FD
SHA1:	3479C005831DCC4271286A28127350CC7E53CB8F
SHA-256:	CE3A5FC52C3C9A83936B6BA3C6A3D0CB4FFCD847A998ABF0D5806243DE7E2D5A
SHA-512:	300534A919C18E080C82FCEB6C44330F18DE0CA716F668FE805F7F59F2B1DB27B7FB4884230C430713AE23C588EAB2A89ACDB36854C6922A966A6EC3FF849952
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/main.MWYzNGIxOWM4MQ.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",c=o.asyncIterator\|\|"@@asyncIterator",a=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function s(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),c=new S(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return N()}for(r.method=o,r.arg=i;;){var c=r.delegate;if(c){var a=g(c,r);if(a){if(a===l)continue;return a}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19942)
Category:	downloaded
Size (bytes):	314570
Entropy (8bit):	5.558951503008042
Encrypted:	false
SSDEEP:	3072:NqD2xc0IardQOdfMMba80qCiqjysCBIQO8R1prkH+dQWqzGmRmx4xKQQP1xWnN:N42xbQOdfMX9r1zQrzzdQWqzGa8w
MD5:	0835116E1A3969A4C52695B5572D64C5
SHA1:	1C292912F2E02895DF38A62622290CE0EAA16377
SHA-256:	5F3EF06BB51D08D39C24E4974144F8B5BFD8C4A202DA08639EA2E3BDC8174D92
SHA-512:	A9BF7B48907741A2799BF706E7B35ACC013B33F4C4388B238C493290DA584D75D34F5BAA2CCF1DB91FE98FC429D1F4C16DD49118C2C10DA5523645B702C63322
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5ZJ5HVV9
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"25",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"G-RSX33J420M"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__c","vtp_value":"095d3681d7fdc1da4e72d354a1b6c747"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"incomingToken"},{"function":"__jsm","vtp_javascript":["template","(function(){var a;return a=",["escape",["macro",4],8,16],".includes(",["escape",["macro",5],8,16],")?!0:!1})();"]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"leadsHookData.microsoftConversion.enabled"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefau

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x1151, components 3
Category:	downloaded
Size (bytes):	28306
Entropy (8bit):	7.474214924177766
Encrypted:	false
SSDEEP:	768:KCIIu3MBdbrkRn650K6Yrek7rmECLlroepoBR:6TPRnsl7rm1LVoemBR
MD5:	29B7296A444481DDE0B4C614253B92E5
SHA1:	D8E5815912B391FAA4D779ACCADA1CBBF3C1761B
SHA-256:	4B2554B9BD5343A746B47EAF6853EBD85B1A8EA83083BC4BB1B4856A0AE601AE
SHA-512:	8771AF554CABD2FC8AC50E4CD52A8E075CDF736B20264AF5D4C7F60439E520CF6636D8ACA348D07F279AFAC3AC208FEAB247083633947F65FC5FA0049691C0EF
Malicious:	false
Reputation:	low
URL:	https://static.leadshook.io/upload/pl/house-buyer-network-hero-1709820479367.jpg
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222..........."..............................................O<........(.......P.@..@.....................@.@........(..QA@..........@5..............P....P.(.....@....................@....P....(......@........(..<....R(........(.@......(... ...........r.....(..(.P....P(....(.(...........[.<......(........P......@..............q.......P..........J.(..............[.. ..(".............(.................[.. ........P(...P.J....@.................0..(.P...P..RY@...P.(...........@.X.V.r...B......@.(.........@..P.......................P.R..P...(..(....@..........................H..@.....R............s......(...R....(..@.P...P.@.........o.3.(......(.@...P....P..............(..\|.T..(....(.....P.P..@..@..................P...@.......(..(....... .. ..m....X.P...P...@.P................*.....b@.........P..e....................-."................

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 55 x 55, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1442
Entropy (8bit):	7.482875010290303
Encrypted:	false
SSDEEP:	24:J803HB0McqhpolYiIkfu6bPOaNLvHd9DTmMPy3uZ0VCGReDxA:f3B0fAY2r2hLPd9vz63uZ04/y
MD5:	D9021DDF8205D1CB00A3E2C086C6EBA1
SHA1:	90E8E5B324A701DE9ED3F353118C52DAB8D1B1A2
SHA-256:	71A330773DE45241F2609450912C8F100ECA301A03D33BA4BFD8330D5323B757
SHA-512:	D8300C15F7FBEB93656347DDD117F8DCAAA9065F51BB5CA654179D2E12B937B2A58322AC02A1401219DA3904FCE6EF458B0258E8004DD062EB54E03784A80F9D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...7...7......."t....PLTEGpL...+....."..Z.......................,..%..N.....s..\|..>........~..............}..p..I..9.....\|.....<..-.................v........6..H..q..j..y..H.._..M..=..q..e..X...........#.....}........~..\|..............V..b....Ux..n..b.....8..!.......................]..U.....<...3U...$... @............u....................~..............!..+..{.....n..c........g.....%..V..G../..z..(.....r..Z..D........2..u..k..>..]..K..S..P..A..;..4..8..w..M..6..`.._....u...dtRNS.7.G&J..=)P.!.A.Rw:b..[........\|3-..t..].........................i...h.V...Z....J..y...x...........IDATH..gW.a.F...D....{...{.5.XbzODP.D.h.F@.Q.....kd#,.x?r..s.g/.......S....r...q:.c...M..%j.J.V.$677......W..\/..........vWD.,\|&66D<M.ea.q8..=Y....s.....L.!........j..@'.N...Y.9.....[..?R.U..x...d.)cW0...\|.^.a....9oD5..x... ....J..c.w.....2..Z<.#..Z...{.e.C.+I3.A.0.#..N7...`&......d^I...]......k..Sx.;y.(...L..Tb...s\|.;y....h4..U.=..u.?....._Vm.f.A.%..H$.k....n.By......A/..E.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	222967
Entropy (8bit):	5.535229446535101
Encrypted:	false
SSDEEP:	3072:2Jc0Iard8OdweMDba8UyCKqjysCBIQi9a+dQWqzGmRFF4xKkjH5r45gA:6b8OdweMQFz1zQi9TdQWqzGa2po
MD5:	B5A8D8C1F45EE568F9666580B6B01BB8
SHA1:	ACFAD8E605C72DFD52A3741D127AEF3A7EFF9DA4
SHA-256:	BE90968CD482E46367339E07187969A9BF2FED70C0946198AA746B63378911A2
SHA-512:	70DE36CDE1CF9261025079B77997D9D86871F86FB20A7CAFB3566A65AE0D3DA5442BCE1010A82134C9A4EFC13C1B0804C892A6A8744597506604785D36DE1380
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-GC0X5B869E&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__gct","once_per_event":true,"vtp_trackingId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16554)
Category:	downloaded
Size (bytes):	16555
Entropy (8bit):	5.207269950821066
Encrypted:	false
SSDEEP:	192:Rzn+qIfEqGtnW8G8HT8c96XWVwIK5JKR5n71NweS7amyoFgSsPbu2SfUzT5XcJdz:fBVW8GEK5oDffS7vysR2mbD8lkOpM
MD5:	0F54ED54362C72F248B148A0F774D6C1
SHA1:	448D6A9685BC0F53D0734E9D7DED0BC3D53CD387
SHA-256:	C41763922DE088A739D13373593D2BC7569BB525E40FC762EF7D7518AF231D6C
SHA-512:	A6474D8A00B24AC74FA85066D368B1A6DAE3FAC31FA8F3E2D430D4AC2809428B33967286158FA95F10237F8D9CC8049149B45D74539D7FF742D1A71676D1FBBE
Malicious:	false
Reputation:	low
URL:	https://cdn.trustedform.com/bootstrap.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002
Preview:	!function(){"use strict";function t(t,n){return"function"==typeof t?function(n){return t.bind(n)}:function(t){return n.bind(null,t)}}var n=Array.from\|\|function(t){return Array.prototype.slice.call(t)};var e=t(Array.prototype.includes,r);function r(t,n){return-1!==t.indexOf(n)}var o=t(Array.prototype.find,(function(t,n){for(var e=0;e<t.length;e++)if(n(t[e]))return t[e]}));var i=Object.assign\|\|function(t,n){return Object.keys(n).forEach((function(e){t[e]=n[e]})),t};var c="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function u(t,n){return t(n={exports:{}},n.exports),n.exports}function f(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}var a,s=u((function(t){function n(e){return"function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?(t.exports=n=function(t){return typeof t},t.exports.default=t.exports,t.exports.__esModule=!0):(t.exports=n=functio

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3150 x 803, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	45260
Entropy (8bit):	7.904388392859475
Encrypted:	false
SSDEEP:	768:AYrjT5hKd1zr/s8B+GT5STcMZSd9kCs/Ntt+dx0Mosyft7JqYRSUls52:HnTDKd13/s8+GT54cPbkCs1bAxJos2tR
MD5:	E447A763BCF48EE3009A17A4C17E5B36
SHA1:	1AE69CF144E9429D2AC8F80B1B143C1CAE33A921
SHA-256:	5DE98DAD469C39DFC6734D2727A6442B5E0805CD55DDF387D282ACD656D45E87
SHA-512:	8ADE8C032EA95CE63C303C86038B6117DFED47A72F2B7578F1FA43DCF5811F8AFE35646D78C28991B015D2CABBBF59CC5E18A8AEFA0274A5D38EC7E453C635FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...N...#.....6.D....CPLTE.....................GpL............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................kR6....tRNS... ........#..&......].....)c/.T.Q..,.K`..Wu.Z.i..8.....l25E........r.N!H...%...A.f...~>....{;x"[.$(.Ve..o.'..Y.._b..k^P0\dvUMIg.h..*JLq.F.j.XC...p-+sRS.O147....a3..n6.....<....}GDy:zmw\|=@t?B9y.... .IDATx........au..".%.J.6.n.%...L./ ..$..bt.nV6.{4.`..G...T....KI....N...v.........................`'...;...`'...;........N...v....N...v.........................`'...;

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7510), with no line terminators
Category:	downloaded
Size (bytes):	7510
Entropy (8bit):	5.258051553225276
Encrypted:	false
SSDEEP:	192:CPEuilMac4HHgUIBHZwyD1v7S6yGV2XY+voLtwA2sjb2TY:C8LZcCgUIB5wyDx7SxKNVjaTY
MD5:	49F008C5BEF0242FF30D4D875C10FC12
SHA1:	D3D32B519EA22B7B00404333C16D1DF5A9C3113D
SHA-256:	E358AC9219C2BFDE08EBD2B62EFE991CC0E27671EC64BDC5B6B15A5C195107DE
SHA-512:	454B7F345100AE16AE9968536F007C8B9613D8A5BD99175FE06979C3394277BBB7402EC93EE10F89A52DC3ADDA6F9674339B54C072C6E2C88A5903F741B8BF3F
Malicious:	false
Reputation:	low
URL:	https://ads.nextdoor.com/public/pixel/ndp.js
Preview:	!function(e){var n={};function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var o in e)t.d(r,o,function(n){return e[n]}.bind(null,o));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="/dist",t(t.s=0)}([function(e,n,t){e.exports=t(1)},function(e,n,t){"use strict";t.r(n);var r=["order_v

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 55 x 55, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1442
Entropy (8bit):	7.482875010290303
Encrypted:	false
SSDEEP:	24:J803HB0McqhpolYiIkfu6bPOaNLvHd9DTmMPy3uZ0VCGReDxA:f3B0fAY2r2hLPd9vz63uZ04/y
MD5:	D9021DDF8205D1CB00A3E2C086C6EBA1
SHA1:	90E8E5B324A701DE9ED3F353118C52DAB8D1B1A2
SHA-256:	71A330773DE45241F2609450912C8F100ECA301A03D33BA4BFD8330D5323B757
SHA-512:	D8300C15F7FBEB93656347DDD117F8DCAAA9065F51BB5CA654179D2E12B937B2A58322AC02A1401219DA3904FCE6EF458B0258E8004DD062EB54E03784A80F9D
Malicious:	false
Reputation:	low
URL:	https://quiz-live.s3.amazonaws.com/upload/pl/house-buyers-1707763198483.png
Preview:	.PNG........IHDR...7...7......."t....PLTEGpL...+....."..Z.......................,..%..N.....s..\|..>........~..............}..p..I..9.....\|.....<..-.................v........6..H..q..j..y..H.._..M..=..q..e..X...........#.....}........~..\|..............V..b....Ux..n..b.....8..!.......................]..U.....<...3U...$... @............u....................~..............!..+..{.....n..c........g.....%..V..G../..z..(.....r..Z..D........2..u..k..>..]..K..S..P..A..;..4..8..w..M..6..`.._....u...dtRNS.7.G&J..=)P.!.A.Rw:b..[........\|3-..t..].........................i...h.V...Z....J..y...x...........IDATH..gW.a.F...D....{...{.5.XbzODP.D.h.F@.Q.....kd#,.x?r..s.g/.......S....r...q:.c...M..%j.J.V.$677......W..\/..........vWD.,\|&66D<M.ea.q8..=Y....s.....L.!........j..@'.N...Y.9.....[..?R.U..x...d.)cW0...\|.^.a....9oD5..x... ....J..c.w.....2..Z<.#..Z...{.e.C.+I3.A.0.#..N7...`&......d^I...]......k..Sx.;y.(...L..Tb...s\|.;y....h4..U.=..u.?....._Vm.f.A.%..H$.k....n.By......A/..E.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 25, 2024 21:12:29.497965097 CEST	49678	443	192.168.2.4	104.46.162.224
May 25, 2024 21:12:30.654114962 CEST	49675	443	192.168.2.4	173.222.162.32
May 25, 2024 21:12:39.573638916 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:39.573678017 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:39.573767900 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:39.574026108 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:39.574079990 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:39.574080944 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:39.574099064 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:39.574438095 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:39.574438095 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:39.574537992 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.263863087 CEST	49675	443	192.168.2.4	173.222.162.32
May 25, 2024 21:12:40.314835072 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.315236092 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.315264940 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.316895008 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.317032099 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.317990065 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.318053007 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.318065882 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.318099022 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.325606108 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.325901985 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.325931072 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.327613115 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.327689886 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.328463078 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.328552008 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.371987104 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.372004032 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.372014046 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.372030973 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.418193102 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.418210030 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.430721045 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.430927992 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.431004047 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.431287050 CEST	49735	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.431303978 CEST	443	49735	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.437983036 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.478533030 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.559531927 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.559735060 CEST	443	49736	44.195.255.76	192.168.2.4
May 25, 2024 21:12:40.560015917 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.560015917 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.560015917 CEST	49736	443	192.168.2.4	44.195.255.76
May 25, 2024 21:12:40.664242983 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:40.664329052 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:40.664417028 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:40.664710999 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:40.664748907 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:41.162836075 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:41.163218975 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:41.163278103 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:41.164330006 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:41.164413929 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:41.165340900 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:41.165410995 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:41.165489912 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:41.165505886 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:41.216486931 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:41.335897923 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:41.336045027 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:41.336211920 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:41.413336039 CEST	49738	443	192.168.2.4	192.124.249.138
May 25, 2024 21:12:41.413377047 CEST	443	49738	192.124.249.138	192.168.2.4
May 25, 2024 21:12:41.450958967 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:41.451040030 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:41.451359987 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:41.451359987 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:41.451478004 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.013884068 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.014321089 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.014379025 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.016052961 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.016233921 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.019287109 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.019480944 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.020117044 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.020173073 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.060271978 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.213054895 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.213227034 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.213428020 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.213921070 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.213921070 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.213983059 CEST	443	49740	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.214044094 CEST	49740	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.241803885 CEST	49741	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.241882086 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.241971970 CEST	49741	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.242506027 CEST	49741	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.242579937 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.894980907 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.895970106 CEST	49741	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.896028996 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.897506952 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.900557995 CEST	49741	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.900557995 CEST	49741	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.900646925 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.900840998 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:42.943873882 CEST	49741	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:42.979089975 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:42.979130030 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:42.979331970 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:42.981075048 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:42.981129885 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:43.077486992 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:43.077524900 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:43.078219891 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:43.079986095 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:43.080060005 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:43.116741896 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:43.116889000 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:43.117227077 CEST	49741	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:43.121362925 CEST	49741	443	192.168.2.4	3.80.229.104
May 25, 2024 21:12:43.121423006 CEST	443	49741	3.80.229.104	192.168.2.4
May 25, 2024 21:12:43.180197954 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:43.180283070 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:43.180646896 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:43.181345940 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:43.181380987 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:43.647594929 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:43.647792101 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:43.653297901 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:43.653350115 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:43.653873920 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:43.699460983 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:43.756979942 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:43.760729074 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:43.763542891 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:43.763602972 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:43.765208006 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:43.765425920 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:43.771967888 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:43.772191048 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:43.802571058 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:43.817184925 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:43.817739010 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:43.817801952 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:43.819459915 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:43.819529057 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:43.820918083 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:43.821197033 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:43.821620941 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:43.821638107 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:43.826252937 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:43.826309919 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:43.871211052 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:43.871217966 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:43.972079992 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:43.972239971 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:43.972419977 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:43.972774982 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:43.972774982 CEST	49742	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:43.972837925 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:43.972872019 CEST	443	49742	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.038088083 CEST	49745	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:44.038134098 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.038211107 CEST	49745	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:44.039024115 CEST	49745	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:44.039043903 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.325982094 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:44.326185942 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:44.326256037 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:44.326683044 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:44.326729059 CEST	443	49744	34.209.92.5	192.168.2.4
May 25, 2024 21:12:44.326756001 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:44.326793909 CEST	49744	443	192.168.2.4	34.209.92.5
May 25, 2024 21:12:44.512418985 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:44.512501001 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:44.512938023 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:44.513330936 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:44.513365030 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:44.697582006 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.697794914 CEST	49745	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:44.710509062 CEST	49745	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:44.710546017 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.710848093 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.715353012 CEST	49745	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:44.758586884 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.982846022 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.983012915 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.985696077 CEST	49745	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:44.985903025 CEST	49745	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:44.985903025 CEST	49745	443	192.168.2.4	2.19.104.72
May 25, 2024 21:12:44.985933065 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:44.985950947 CEST	443	49745	2.19.104.72	192.168.2.4
May 25, 2024 21:12:45.016913891 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:45.029364109 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:45.029402018 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:45.032860041 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:45.033005953 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:45.034493923 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:45.034493923 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:45.034518003 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:45.034836054 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:45.089462996 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:45.089483976 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:45.137346983 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:45.201514959 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:45.201708078 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:45.203485966 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:45.203509092 CEST	443	49746	35.244.245.136	192.168.2.4
May 25, 2024 21:12:45.203540087 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:45.203588009 CEST	49746	443	192.168.2.4	35.244.245.136
May 25, 2024 21:12:45.326245070 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:45.326283932 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:45.326555014 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:45.326555014 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:45.326591969 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:45.833679914 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:45.879656076 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:45.881958961 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:45.881985903 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:45.885879993 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:45.885941029 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:45.889234066 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:45.889633894 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:45.889651060 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:45.930594921 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:45.934583902 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:45.934592962 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:45.982008934 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.157062054 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.160866022 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.160931110 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.160959005 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.161000967 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.161006927 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.175338984 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.175376892 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.175405025 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.175412893 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.175438881 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.182245970 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.182282925 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.182317019 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.182323933 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.182346106 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.182360888 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.249577999 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.249612093 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.249654055 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.249691010 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.249712944 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.267250061 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.267283916 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.267308950 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.267317057 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.267333031 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.270925999 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.270987988 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.270994902 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.271029949 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.271035910 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.274846077 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.274912119 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.274918079 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.274960041 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.335314989 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.335350990 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.335402012 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.335434914 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.335453033 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.335459948 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.335485935 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.335508108 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.353321075 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.353423119 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.353450060 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.353514910 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.356204033 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.356451035 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.356477976 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.359137058 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.359330893 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.359359980 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.359411955 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.375855923 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.375920057 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.375942945 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.375968933 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.375998020 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.376019955 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.387176991 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.387260914 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.387269020 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.387322903 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.387327909 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.387362003 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.422681093 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.422749996 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.434273005 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.434319973 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.434344053 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.434350967 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.434386015 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.443607092 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.443671942 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.443679094 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.443730116 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.443734884 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.445437908 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.445506096 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.445512056 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.445555925 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.456053972 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.456115961 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.456125975 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.456155062 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.456173897 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.456183910 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.456198931 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.459650993 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:46.459675074 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:46.459728956 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:46.459980965 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:46.460005045 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:46.461210012 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.461278915 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.461286068 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.461297989 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.461328983 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.470128059 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.470227957 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.470233917 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.470283985 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.845597982 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.845633030 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.845681906 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.845711946 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.845731020 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.845736027 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.845767021 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.845792055 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.851280928 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.851365089 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.851371050 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.851423025 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.851428032 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.851582050 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.851588011 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.851624966 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.851685047 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.851821899 CEST	49747	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:46.851835012 CEST	443	49747	3.213.181.94	192.168.2.4
May 25, 2024 21:12:46.904119015 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:46.904148102 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:46.904241085 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:46.904423952 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:46.904431105 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:46.961877108 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:46.961956978 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:46.962044001 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:46.962374926 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:46.962455034 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.624965906 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.625317097 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.625376940 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.627067089 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.627424002 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.628297091 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.628298044 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.628380060 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.628485918 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.674554110 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.674611092 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.697298050 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:47.720494986 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.731007099 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.731021881 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:47.731338978 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.731982946 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.732198954 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.732259035 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.733025074 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.733242989 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.733303070 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.734939098 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:47.736036062 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.736042976 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:47.737406015 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.738117933 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.738445997 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.738534927 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.740849972 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.741400957 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.741460085 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.744182110 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.744390965 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.744450092 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.750428915 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.752789974 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.752849102 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.753993988 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.753993988 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.754010916 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:47.754368067 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:47.794099092 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.796308041 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:47.796916008 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:47.796945095 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:47.798405886 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:47.798567057 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:47.799554110 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:47.799554110 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:47.799572945 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:47.799638033 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:47.808927059 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.808940887 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:47.820095062 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.820128918 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:47.820344925 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.820349932 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.820679903 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.820692062 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:47.820878029 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.821028948 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.821074963 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.822638988 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.823172092 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.823916912 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.827231884 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.827312946 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.827403069 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.827470064 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.827698946 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.827851057 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.827923059 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.828311920 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.828821898 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.828959942 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.829200983 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.830111027 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.830377102 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.830405951 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.831120968 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.831667900 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.831711054 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.831731081 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.831929922 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.832048893 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.833013058 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.833095074 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.833134890 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.833153963 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.833640099 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.845093966 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:47.845123053 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:47.848356009 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:47.848442078 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:47.848721027 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:47.848721027 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:47.848804951 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:47.856585979 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:47.899590015 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:47.939237118 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.939299107 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.939378023 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.939471960 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.939523935 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.939546108 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.978971004 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.979012012 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.979197025 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.979197979 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:47.979259014 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:47.979981899 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.018475056 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.018543959 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.018776894 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.018776894 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.018838882 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.019357920 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.057585955 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:48.057626963 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:48.057657003 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:48.057676077 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:48.057739973 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:48.057739973 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:48.057770014 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:48.057796001 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:48.057816982 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:48.060650110 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:48.062638044 CEST	49752	443	192.168.2.4	52.35.252.245
May 25, 2024 21:12:48.062649965 CEST	443	49752	52.35.252.245	192.168.2.4
May 25, 2024 21:12:48.067167044 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.067215919 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.067471027 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.067471981 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.067533970 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.067825079 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.092102051 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.092143059 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.092364073 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.092365026 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.092427015 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.093477964 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.112021923 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.112061024 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.112229109 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.112287998 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.112351894 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.112881899 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.133717060 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.133760929 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.133915901 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.133989096 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.134030104 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.134304047 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.136974096 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:48.137006998 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:48.137141943 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:48.137674093 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:48.137687922 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:48.145761013 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.145803928 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.145988941 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.145988941 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.146050930 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.146819115 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.159555912 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.159596920 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.159785986 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.159785986 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.159847975 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.160310984 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.170232058 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.170270920 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.170442104 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.170510054 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.170582056 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.170860052 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.177385092 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.177432060 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.177465916 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.177501917 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.177537918 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.177573919 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.177803040 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.178101063 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.178144932 CEST	49754	443	192.168.2.4	151.101.194.217
May 25, 2024 21:12:48.178179026 CEST	443	49754	151.101.194.217	192.168.2.4
May 25, 2024 21:12:48.341420889 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:48.341500044 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:48.342441082 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:48.347839117 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:48.347919941 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:48.392151117 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.406919003 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.407004118 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.407052040 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.407074928 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.407095909 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.407313108 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.407336950 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.407401085 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.407442093 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.407442093 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.453365088 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.493392944 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.493429899 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.493451118 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.493469954 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.493508101 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.493531942 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.493566990 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.493566990 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.493577003 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.493664980 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:48.493710041 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.493797064 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.497361898 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:48.497397900 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:48.498393059 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:48.499367952 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:48.502569914 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:48.502640009 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:48.505223036 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.505280972 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.505285978 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:48.505300999 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:48.505327940 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.505333900 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.505372047 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.505378962 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.505429029 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.505518913 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.505878925 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.505904913 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.505904913 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.505918026 CEST	443	49753	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.507508993 CEST	49753	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.540627956 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:48.540704012 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:48.540775061 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:48.541311026 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:48.541399956 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:48.546320915 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:48.632627964 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:48.632738113 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:48.632791042 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:48.636195898 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.676932096 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.754057884 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.754110098 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.756567001 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.756895065 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.757100105 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.757105112 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.762135983 CEST	49758	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:48.762166977 CEST	443	49758	44.205.67.127	192.168.2.4
May 25, 2024 21:12:48.798521996 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:48.801321983 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:48.847223043 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:48.847268105 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:48.847332001 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:48.847762108 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:48.847789049 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:48.853462934 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:48.854841948 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:48.854902029 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:48.856019974 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:48.857217073 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:48.857343912 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:48.857371092 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:48.857433081 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:48.901588917 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:49.047683954 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:49.078885078 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:49.081234932 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:49.081310987 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:49.081327915 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:49.081361055 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:49.081418037 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:49.083162069 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:49.083180904 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:49.083369970 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:49.083369970 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:49.096662045 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:49.097049952 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:49.097070932 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:49.097253084 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:49.097358942 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:49.097440004 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:49.291893005 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:49.346822977 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:49.399769068 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.399807930 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.399893999 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.399952888 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.456162930 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.506189108 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.506212950 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.506392002 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.506392002 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.506401062 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.506424904 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.506477118 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.506562948 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.506582975 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.506582975 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.506583929 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.506613970 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.598174095 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.598195076 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.598231077 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.598287106 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.598345041 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.598383904 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:49.598407030 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.598438025 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:49.626718998 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:49.674921036 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.292284966 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.292361975 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.293987989 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.294068098 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.300148010 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.300225973 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.304203987 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.304231882 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:50.304243088 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.304249048 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:50.304294109 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.308053970 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:50.308053970 CEST	49763	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:50.308115005 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:50.308115005 CEST	443	49763	3.213.181.94	192.168.2.4
May 25, 2024 21:12:50.328797102 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.328946114 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.329346895 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.329395056 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.331011057 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:50.331131935 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:50.331140995 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:50.331211090 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:50.347791910 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.347851038 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.348172903 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.348172903 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.348675966 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.372345924 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.372503996 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:50.372510910 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:50.387126923 CEST	49756	443	192.168.2.4	108.156.60.79
May 25, 2024 21:12:50.387170076 CEST	443	49756	108.156.60.79	192.168.2.4
May 25, 2024 21:12:50.388392925 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.388451099 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.418592930 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:50.433717966 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.539719105 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.564305067 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.564340115 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.564364910 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.564414978 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.564438105 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.564505100 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.564506054 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.564506054 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.564506054 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.564574957 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.564623117 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.564667940 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.605542898 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.606659889 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.606748104 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.606826067 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.607103109 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.607137918 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.626182079 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:50.626365900 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:50.626482010 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:50.632906914 CEST	49762	443	192.168.2.4	54.200.211.8
May 25, 2024 21:12:50.632919073 CEST	443	49762	54.200.211.8	192.168.2.4
May 25, 2024 21:12:50.642688990 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.642719984 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.642765999 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.642786026 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.642879009 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.642879009 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.642879009 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.642879009 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.642952919 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.643011093 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.648581028 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:50.648660898 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:50.648735046 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:50.649126053 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:50.649158955 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:50.652446032 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.652478933 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.652520895 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.652540922 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.652564049 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.652594090 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.652594090 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.652628899 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.652677059 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.652709007 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.652776003 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.654444933 CEST	49764	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:50.654474020 CEST	443	49764	18.244.18.79	192.168.2.4
May 25, 2024 21:12:50.667268038 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.667298079 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.667309046 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.667351007 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.667362928 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.667411089 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.667448997 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.667469978 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.667495012 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.667495012 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.667525053 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.758212090 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.807068110 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.807133913 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.807142973 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:50.807197094 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.909662962 CEST	49765	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:50.909725904 CEST	443	49765	3.162.38.8	192.168.2.4
May 25, 2024 21:12:51.168390989 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.204165936 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.204226017 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.205250978 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.205316067 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.207209110 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.207273006 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.210863113 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.210879087 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.261864901 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.378082991 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:51.378160954 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:51.378261089 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:51.378766060 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:51.378808975 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:51.379592896 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.379894972 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.379952908 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.380326986 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.380964994 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.381033897 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.381547928 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.411132097 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.413130045 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.413194895 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.413254023 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.413337946 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.414253950 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.417552948 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.417561054 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.417606115 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.417623043 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.417650938 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.422122955 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.422175884 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.422193050 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.422249079 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.422293901 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.422491074 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.502734900 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.502746105 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.502849102 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.509361029 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.509368896 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.509433985 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.509468079 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.509526014 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.511104107 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.511178017 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.511193037 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.514584064 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.514652967 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.514667034 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.514719963 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.589199066 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.589257002 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.589276075 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.589339018 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.601058006 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.601149082 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.601160049 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.601222038 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.603256941 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.603308916 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.621988058 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.622008085 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.622071028 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.622087002 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.622113943 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.631011009 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.631069899 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.631089926 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.631150007 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.633430004 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.633502007 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.679321051 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.679338932 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.679377079 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.679392099 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.679420948 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.686268091 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.686322927 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.686336994 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.686392069 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.686563969 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.686610937 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.692017078 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.692032099 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.692074060 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.692089081 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.692135096 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.699760914 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.699822903 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.699836016 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.699892998 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.701061010 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.707694054 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.707741022 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.716305971 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.716324091 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.716358900 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.716372967 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.716403961 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.727104902 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.727154970 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.727204084 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.727241993 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.727274895 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.727298021 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.767978907 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.768099070 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.768125057 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.768188953 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.769674063 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.769753933 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.770389080 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.770462990 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.770498991 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.770548105 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.770596027 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.770688057 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.770708084 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.770754099 CEST	443	49772	3.213.181.94	192.168.2.4
May 25, 2024 21:12:51.770811081 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.770843983 CEST	49772	443	192.168.2.4	3.213.181.94
May 25, 2024 21:12:51.789968967 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.790079117 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.790118933 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.790198088 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:51.790216923 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.790246010 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.845474958 CEST	49770	443	192.168.2.4	18.244.18.79
May 25, 2024 21:12:51.845509052 CEST	443	49770	18.244.18.79	192.168.2.4
May 25, 2024 21:12:52.202789068 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:52.209662914 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:52.209747076 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:52.210629940 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:52.210710049 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:52.212724924 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:52.212798119 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:52.212872028 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:52.212949991 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:52.213004112 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:52.213107109 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:52.213139057 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:52.264868021 CEST	49778	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:52.264930010 CEST	443	49778	44.205.67.127	192.168.2.4
May 25, 2024 21:12:52.264996052 CEST	49778	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:52.265242100 CEST	49778	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:52.265264034 CEST	443	49778	44.205.67.127	192.168.2.4
May 25, 2024 21:12:52.434731007 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:52.439611912 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:52.439825058 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:52.870920897 CEST	443	49778	44.205.67.127	192.168.2.4
May 25, 2024 21:12:52.871252060 CEST	49775	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:52.871289968 CEST	443	49775	3.232.98.97	192.168.2.4
May 25, 2024 21:12:52.872746944 CEST	49778	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:52.872786045 CEST	443	49778	44.205.67.127	192.168.2.4
May 25, 2024 21:12:52.876326084 CEST	443	49778	44.205.67.127	192.168.2.4
May 25, 2024 21:12:52.876415968 CEST	49778	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:52.881545067 CEST	49778	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:52.881731987 CEST	443	49778	44.205.67.127	192.168.2.4
May 25, 2024 21:12:52.881735086 CEST	49778	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:52.926522017 CEST	443	49778	44.205.67.127	192.168.2.4
May 25, 2024 21:12:52.954641104 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:52.954720974 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:52.955008984 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:52.955113888 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:52.955141068 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:53.039623976 CEST	443	49778	44.205.67.127	192.168.2.4
May 25, 2024 21:12:53.039709091 CEST	49778	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:53.040831089 CEST	49778	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:53.040874004 CEST	443	49778	44.205.67.127	192.168.2.4
May 25, 2024 21:12:53.066863060 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:53.066900969 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:53.067158937 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:53.067310095 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:53.067327976 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:53.200301886 CEST	49781	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.200340033 CEST	443	49781	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.200460911 CEST	49781	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.200962067 CEST	49781	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.200982094 CEST	443	49781	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.492459059 CEST	49672	443	192.168.2.4	173.222.162.32
May 25, 2024 21:12:53.492537975 CEST	443	49672	173.222.162.32	192.168.2.4
May 25, 2024 21:12:53.580909014 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:53.581157923 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:53.581217051 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:53.582103014 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:53.582258940 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:53.679649115 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:53.679752111 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:53.679914951 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:53.811682940 CEST	49743	443	192.168.2.4	142.250.185.164
May 25, 2024 21:12:53.811743021 CEST	443	49743	142.250.185.164	192.168.2.4
May 25, 2024 21:12:53.812004089 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.812041998 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.812099934 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.812402010 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.812429905 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.818777084 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:53.819036007 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:53.819164038 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:53.819205999 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:53.821229935 CEST	443	49781	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.825263977 CEST	49781	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.825274944 CEST	443	49781	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.829881907 CEST	443	49781	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.829950094 CEST	49781	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.830517054 CEST	49781	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.830600977 CEST	443	49781	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.830758095 CEST	49781	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.830775023 CEST	443	49781	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.898933887 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:53.899452925 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:53.899482012 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:53.900171995 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:53.900702000 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:53.900791883 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:53.901062012 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:53.946494102 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:53.951282024 CEST	443	49781	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.951349020 CEST	49781	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.952267885 CEST	49781	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:53.952280045 CEST	443	49781	3.232.98.97	192.168.2.4
May 25, 2024 21:12:53.956340075 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:53.956388950 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:53.956484079 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:53.956484079 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:53.957458973 CEST	49779	443	192.168.2.4	3.5.27.156
May 25, 2024 21:12:53.957518101 CEST	443	49779	3.5.27.156	192.168.2.4
May 25, 2024 21:12:54.025325060 CEST	49784	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:54.031119108 CEST	53	49784	1.1.1.1	192.168.2.4
May 25, 2024 21:12:54.031313896 CEST	49784	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:54.031315088 CEST	49784	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:54.031315088 CEST	49784	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:54.051162004 CEST	53	49784	1.1.1.1	192.168.2.4
May 25, 2024 21:12:54.056272984 CEST	53	49784	1.1.1.1	192.168.2.4
May 25, 2024 21:12:54.308368921 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.313751936 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.313781977 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.314932108 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.327366114 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.327545881 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.328115940 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.328227997 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.328289986 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.328375101 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.328427076 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.439469099 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.478900909 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.478948116 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.478975058 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.478991032 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.479027987 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.479063988 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.529647112 CEST	53	49784	1.1.1.1	192.168.2.4
May 25, 2024 21:12:54.545993090 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:54.546083927 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:54.546161890 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:54.546166897 CEST	49784	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:54.546582937 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:54.546617985 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:54.553524971 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.553570032 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.553601027 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.553627968 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.553647041 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.565115929 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.565355062 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.565406084 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.565613985 CEST	49783	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.565625906 CEST	443	49783	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.567569017 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.567635059 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.567636967 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.567672014 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.567696095 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.567714930 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.570205927 CEST	49787	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.570281982 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.570348978 CEST	49787	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.570637941 CEST	49787	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:54.570669889 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:54.571611881 CEST	53	49784	1.1.1.1	192.168.2.4
May 25, 2024 21:12:54.571841955 CEST	49784	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:54.622836113 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.622874975 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.623027086 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.623028040 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.623059034 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.623117924 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.634340048 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.634382010 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.634443998 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.634473085 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.634500980 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.634548903 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.642014980 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.642054081 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.642105103 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.642113924 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.642143011 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.642164946 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.646974087 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.647133112 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.647206068 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.647337914 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.647361994 CEST	443	49780	3.162.38.8	192.168.2.4
May 25, 2024 21:12:54.647387028 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.647439957 CEST	49780	443	192.168.2.4	3.162.38.8
May 25, 2024 21:12:54.760361910 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:54.760441065 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:54.760755062 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:54.760862112 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:54.760890007 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:54.768884897 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:54.768961906 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:54.769057035 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:54.769241095 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:54.769279957 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.099759102 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:55.100008011 CEST	49787	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:55.100065947 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:55.100554943 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:55.101162910 CEST	49787	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:55.101250887 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:55.101450920 CEST	49787	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:55.146496058 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:55.176042080 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:55.176361084 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:55.176418066 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:55.177328110 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:55.177397013 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:55.177786112 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:55.177846909 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:55.177908897 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:55.177925110 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:55.224901915 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:55.231240034 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:55.231451988 CEST	49787	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:55.243813038 CEST	49787	443	192.168.2.4	3.232.98.97
May 25, 2024 21:12:55.243860006 CEST	443	49787	3.232.98.97	192.168.2.4
May 25, 2024 21:12:55.288676977 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:55.351130009 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.352247000 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.352307081 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.352797985 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.353102922 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.353198051 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.353236914 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.353317976 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.353367090 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.353444099 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.353466988 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.376063108 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:55.376097918 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:55.376152039 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:55.376163006 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:55.376204014 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:55.377059937 CEST	49786	443	192.168.2.4	52.217.203.121
May 25, 2024 21:12:55.377084017 CEST	443	49786	52.217.203.121	192.168.2.4
May 25, 2024 21:12:55.443744898 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.444251060 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.444310904 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.445425987 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.445955992 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.446072102 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.446088076 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.446141005 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.544718981 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.569298983 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.569909096 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.570038080 CEST	443	49788	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.570246935 CEST	49788	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.625112057 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.625319958 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.625396013 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.625508070 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.625549078 CEST	443	49789	44.205.67.127	192.168.2.4
May 25, 2024 21:12:55.625582933 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:12:55.625621080 CEST	49789	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:00.516479969 CEST	49795	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:00.516516924 CEST	443	49795	44.205.67.127	192.168.2.4
May 25, 2024 21:13:00.516585112 CEST	49795	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:00.517766953 CEST	49795	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:00.517780066 CEST	443	49795	44.205.67.127	192.168.2.4
May 25, 2024 21:13:01.087995052 CEST	443	49795	44.205.67.127	192.168.2.4
May 25, 2024 21:13:01.088278055 CEST	49795	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:01.088310957 CEST	443	49795	44.205.67.127	192.168.2.4
May 25, 2024 21:13:01.089440107 CEST	443	49795	44.205.67.127	192.168.2.4
May 25, 2024 21:13:01.090070009 CEST	49795	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:01.090152979 CEST	443	49795	44.205.67.127	192.168.2.4
May 25, 2024 21:13:01.090240955 CEST	49795	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:01.134491920 CEST	443	49795	44.205.67.127	192.168.2.4
May 25, 2024 21:13:01.255743027 CEST	443	49795	44.205.67.127	192.168.2.4
May 25, 2024 21:13:01.256062031 CEST	49795	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:01.256319046 CEST	443	49795	44.205.67.127	192.168.2.4
May 25, 2024 21:13:01.256382942 CEST	49795	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:04.882157087 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:04.882239103 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:04.882324934 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:04.883013010 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:04.883090019 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.360641956 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.393487930 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.393543959 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.395076036 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.395638943 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.395729065 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.395729065 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.395759106 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.395950079 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.396187067 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.437397003 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.553332090 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.558192968 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.558402061 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.559350967 CEST	49796	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.559410095 CEST	443	49796	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.587677956 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.587755919 CEST	443	49797	3.232.98.97	192.168.2.4
May 25, 2024 21:13:05.587845087 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.588238001 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:05.588294983 CEST	443	49797	3.232.98.97	192.168.2.4
May 25, 2024 21:13:06.127444983 CEST	443	49797	3.232.98.97	192.168.2.4
May 25, 2024 21:13:06.128094912 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:06.128154039 CEST	443	49797	3.232.98.97	192.168.2.4
May 25, 2024 21:13:06.129659891 CEST	443	49797	3.232.98.97	192.168.2.4
May 25, 2024 21:13:06.129971027 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:06.130091906 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:06.130311966 CEST	443	49797	3.232.98.97	192.168.2.4
May 25, 2024 21:13:06.173243999 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:06.301959038 CEST	443	49797	3.232.98.97	192.168.2.4
May 25, 2024 21:13:06.302131891 CEST	443	49797	3.232.98.97	192.168.2.4
May 25, 2024 21:13:06.302221060 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:06.302567005 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:06.302567005 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:06.302613020 CEST	443	49797	3.232.98.97	192.168.2.4
May 25, 2024 21:13:06.302791119 CEST	49797	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:13.657202005 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:13.657247066 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:13.657444954 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:13.658047915 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:13.658083916 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.163582087 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.163995028 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.164052010 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.165545940 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.166001081 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.166002035 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.166002035 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.166090012 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.166465044 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.214591026 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.319991112 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.325977087 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.326194048 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.326194048 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.329245090 CEST	49799	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.329324007 CEST	443	49799	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.329416990 CEST	49799	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.329849005 CEST	49799	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.329922915 CEST	443	49799	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.627424002 CEST	49798	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.627485037 CEST	443	49798	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.859255075 CEST	443	49799	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.859637976 CEST	49799	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.859694958 CEST	443	49799	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.860479116 CEST	443	49799	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.860955000 CEST	49799	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.861040115 CEST	49799	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:14.861239910 CEST	443	49799	3.232.98.97	192.168.2.4
May 25, 2024 21:13:14.902163982 CEST	49799	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:15.026001930 CEST	443	49799	3.232.98.97	192.168.2.4
May 25, 2024 21:13:15.030560017 CEST	443	49799	3.232.98.97	192.168.2.4
May 25, 2024 21:13:15.031212091 CEST	49799	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:15.031872988 CEST	49799	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:15.031932116 CEST	443	49799	3.232.98.97	192.168.2.4
May 25, 2024 21:13:26.015407085 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.015491009 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.015590906 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.016757965 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.016787052 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.609726906 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.610009909 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.610044003 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.611493111 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.611695051 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.611949921 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.612014055 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.612082958 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.654539108 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.654602051 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.654628038 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.697102070 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.779071093 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.779921055 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:26.780107021 CEST	443	49800	44.205.67.127	192.168.2.4
May 25, 2024 21:13:26.780232906 CEST	49800	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:30.473136902 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:30.473167896 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:30.473218918 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:30.475749016 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:30.475776911 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:30.960635900 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:30.961031914 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:30.961050987 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:30.962541103 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:30.963052034 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:30.963196039 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:30.963196039 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:30.963202953 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:30.963242054 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.003232002 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.135899067 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.142462015 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.142568111 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.142867088 CEST	49801	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.142899036 CEST	443	49801	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.145874023 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.145900011 CEST	443	49802	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.146245956 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.146420956 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.146436930 CEST	443	49802	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.714709997 CEST	443	49802	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.715059996 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.715080023 CEST	443	49802	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.716561079 CEST	443	49802	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.717012882 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.717150927 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.717412949 CEST	443	49802	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.763150930 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.878128052 CEST	443	49802	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.878364086 CEST	443	49802	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.878459930 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.878953934 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.878976107 CEST	443	49802	3.232.98.97	192.168.2.4
May 25, 2024 21:13:31.878988981 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:31.879026890 CEST	49802	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:34.264683962 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:34.264766932 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:34.264848948 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:34.266371965 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:34.266407967 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:34.848222971 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:34.854031086 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:34.854089022 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:34.855699062 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:34.855796099 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:34.856446981 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:34.856539965 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:34.856899977 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:34.856915951 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:34.904936075 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:35.014831066 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:35.015294075 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:35.015374899 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:35.015640020 CEST	443	49804	44.205.67.127	192.168.2.4
May 25, 2024 21:13:35.015677929 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:35.015726089 CEST	49804	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:38.775907993 CEST	49806	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:38.775969982 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:38.776720047 CEST	49806	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:38.777477980 CEST	49806	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:38.777498007 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.290976048 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.291445017 CEST	49806	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:39.291461945 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.291938066 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.292573929 CEST	49806	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:39.292660952 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.292696953 CEST	49806	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:39.292807102 CEST	49806	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:39.292829990 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.422214985 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.426985979 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.427659988 CEST	49806	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:39.513168097 CEST	49806	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:39.513200045 CEST	443	49806	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.516586065 CEST	49807	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:39.516627073 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:39.516841888 CEST	49807	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:39.517134905 CEST	49807	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:39.517163038 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:40.002100945 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:40.002353907 CEST	49807	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:40.002371073 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:40.002872944 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:40.003264904 CEST	49807	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:40.003344059 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:40.003381968 CEST	49807	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:40.049417019 CEST	49807	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:40.049427032 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:40.132045984 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:40.132107019 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:40.132155895 CEST	49807	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:40.132688046 CEST	49807	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:40.132702112 CEST	443	49807	3.232.98.97	192.168.2.4
May 25, 2024 21:13:43.094105005 CEST	49808	443	192.168.2.4	142.250.185.164
May 25, 2024 21:13:43.094144106 CEST	443	49808	142.250.185.164	192.168.2.4
May 25, 2024 21:13:43.097573042 CEST	49808	443	192.168.2.4	142.250.185.164
May 25, 2024 21:13:43.101392984 CEST	49808	443	192.168.2.4	142.250.185.164
May 25, 2024 21:13:43.101433992 CEST	443	49808	142.250.185.164	192.168.2.4
May 25, 2024 21:13:43.519402027 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:43.519442081 CEST	443	49809	44.205.67.127	192.168.2.4
May 25, 2024 21:13:43.519593954 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:43.520308018 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:43.520328045 CEST	443	49809	44.205.67.127	192.168.2.4
May 25, 2024 21:13:43.781125069 CEST	443	49808	142.250.185.164	192.168.2.4
May 25, 2024 21:13:43.781560898 CEST	49808	443	192.168.2.4	142.250.185.164
May 25, 2024 21:13:43.781622887 CEST	443	49808	142.250.185.164	192.168.2.4
May 25, 2024 21:13:43.782968998 CEST	443	49808	142.250.185.164	192.168.2.4
May 25, 2024 21:13:43.783382893 CEST	49808	443	192.168.2.4	142.250.185.164
May 25, 2024 21:13:43.783598900 CEST	443	49808	142.250.185.164	192.168.2.4
May 25, 2024 21:13:43.824424982 CEST	49808	443	192.168.2.4	142.250.185.164
May 25, 2024 21:13:44.111206055 CEST	443	49809	44.205.67.127	192.168.2.4
May 25, 2024 21:13:44.111521006 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:44.111552954 CEST	443	49809	44.205.67.127	192.168.2.4
May 25, 2024 21:13:44.112425089 CEST	443	49809	44.205.67.127	192.168.2.4
May 25, 2024 21:13:44.112478018 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:44.113105059 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:44.113164902 CEST	443	49809	44.205.67.127	192.168.2.4
May 25, 2024 21:13:44.113466024 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:44.113477945 CEST	443	49809	44.205.67.127	192.168.2.4
May 25, 2024 21:13:44.153353930 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:44.282011986 CEST	443	49809	44.205.67.127	192.168.2.4
May 25, 2024 21:13:44.282998085 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:44.283037901 CEST	443	49809	44.205.67.127	192.168.2.4
May 25, 2024 21:13:44.283109903 CEST	49809	443	192.168.2.4	44.205.67.127
May 25, 2024 21:13:47.926879883 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:47.926929951 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:47.926985979 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:47.927735090 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:47.927752018 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.403851986 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.404261112 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.404283047 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.404623032 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.457823992 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.528343916 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.528502941 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.529095888 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.529145956 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.529191971 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.529452085 CEST	49723	80	192.168.2.4	173.222.108.210
May 25, 2024 21:13:48.529515982 CEST	49724	80	192.168.2.4	173.222.108.210
May 25, 2024 21:13:48.545181990 CEST	80	49723	173.222.108.210	192.168.2.4
May 25, 2024 21:13:48.545196056 CEST	80	49724	173.222.108.210	192.168.2.4
May 25, 2024 21:13:48.545229912 CEST	49723	80	192.168.2.4	173.222.108.210
May 25, 2024 21:13:48.545258045 CEST	49724	80	192.168.2.4	173.222.108.210
May 25, 2024 21:13:48.646327972 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.695422888 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.695713997 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.695887089 CEST	49810	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.695909023 CEST	443	49810	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.699338913 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.699400902 CEST	443	49811	3.232.98.97	192.168.2.4
May 25, 2024 21:13:48.705493927 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.705660105 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:48.705687046 CEST	443	49811	3.232.98.97	192.168.2.4
May 25, 2024 21:13:49.262329102 CEST	443	49811	3.232.98.97	192.168.2.4
May 25, 2024 21:13:49.262723923 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:49.262746096 CEST	443	49811	3.232.98.97	192.168.2.4
May 25, 2024 21:13:49.263216019 CEST	443	49811	3.232.98.97	192.168.2.4
May 25, 2024 21:13:49.263638020 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:49.263638020 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:49.263696909 CEST	443	49811	3.232.98.97	192.168.2.4
May 25, 2024 21:13:49.317796946 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:49.395632982 CEST	443	49811	3.232.98.97	192.168.2.4
May 25, 2024 21:13:49.397119999 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:49.397167921 CEST	443	49811	3.232.98.97	192.168.2.4
May 25, 2024 21:13:49.397275925 CEST	443	49811	3.232.98.97	192.168.2.4
May 25, 2024 21:13:49.397300005 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:49.397342920 CEST	49811	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:52.551156998 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:52.551254034 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:52.551350117 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:52.551934004 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:52.552015066 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:53.178452015 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:53.179539919 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:53.179590940 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:53.181238890 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:53.181390047 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:53.181731939 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:53.181731939 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:53.181762934 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:53.181822062 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:53.233396053 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:53.233419895 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:53.279953957 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:53.343015909 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:53.343700886 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:53.343795061 CEST	443	49812	18.233.135.95	192.168.2.4
May 25, 2024 21:13:53.344158888 CEST	49812	443	192.168.2.4	18.233.135.95
May 25, 2024 21:13:53.691802979 CEST	443	49808	142.250.185.164	192.168.2.4
May 25, 2024 21:13:53.691886902 CEST	443	49808	142.250.185.164	192.168.2.4
May 25, 2024 21:13:53.692060947 CEST	49808	443	192.168.2.4	142.250.185.164
May 25, 2024 21:13:54.638215065 CEST	49808	443	192.168.2.4	142.250.185.164
May 25, 2024 21:13:54.638263941 CEST	443	49808	142.250.185.164	192.168.2.4
May 25, 2024 21:13:57.172476053 CEST	49813	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:57.172519922 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.172761917 CEST	49813	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:57.173170090 CEST	49813	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:57.173190117 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.653285980 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.653748989 CEST	49813	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:57.653781891 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.654269934 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.654947996 CEST	49813	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:57.655030966 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.655200958 CEST	49813	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:57.655236006 CEST	49813	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:57.655304909 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.822891951 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.827583075 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.827641964 CEST	49813	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:57.828088045 CEST	49813	443	192.168.2.4	3.232.98.97
May 25, 2024 21:13:57.828109980 CEST	443	49813	3.232.98.97	192.168.2.4
May 25, 2024 21:13:57.884336948 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:57.884363890 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:57.884429932 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:57.884666920 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:57.884680033 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:58.616338968 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:58.616832018 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:58.616846085 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:58.618302107 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:58.618386030 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:58.618812084 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:58.618890047 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:58.618989944 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:58.618999004 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:58.665355921 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:58.739361048 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:58.739455938 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:58.740971088 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:58.740981102 CEST	443	49814	3.218.204.205	192.168.2.4
May 25, 2024 21:13:58.741039038 CEST	49814	443	192.168.2.4	3.218.204.205
May 25, 2024 21:13:58.741149902 CEST	49814	443	192.168.2.4	3.218.204.205

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 25, 2024 21:12:38.415872097 CEST	53	53262	1.1.1.1	192.168.2.4
May 25, 2024 21:12:38.451750040 CEST	53	57330	1.1.1.1	192.168.2.4
May 25, 2024 21:12:39.506441116 CEST	53	59073	1.1.1.1	192.168.2.4
May 25, 2024 21:12:39.547733068 CEST	58707	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:39.547835112 CEST	50295	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:39.563554049 CEST	53	58707	1.1.1.1	192.168.2.4
May 25, 2024 21:12:39.591481924 CEST	53	50295	1.1.1.1	192.168.2.4
May 25, 2024 21:12:40.569128990 CEST	55520	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:40.569235086 CEST	59750	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:40.663527966 CEST	53	55520	1.1.1.1	192.168.2.4
May 25, 2024 21:12:40.663562059 CEST	53	59750	1.1.1.1	192.168.2.4
May 25, 2024 21:12:41.418869972 CEST	57745	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:41.418970108 CEST	50920	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:41.434525967 CEST	53	57745	1.1.1.1	192.168.2.4
May 25, 2024 21:12:41.852643967 CEST	53	50920	1.1.1.1	192.168.2.4
May 25, 2024 21:12:43.046154022 CEST	59552	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:43.046251059 CEST	64268	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:43.056204081 CEST	53	59552	1.1.1.1	192.168.2.4
May 25, 2024 21:12:43.086647034 CEST	53	64268	1.1.1.1	192.168.2.4
May 25, 2024 21:12:43.121393919 CEST	49769	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:43.124669075 CEST	51639	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:43.179461002 CEST	53	51639	1.1.1.1	192.168.2.4
May 25, 2024 21:12:43.179546118 CEST	53	49769	1.1.1.1	192.168.2.4
May 25, 2024 21:12:44.424787045 CEST	52869	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:44.424787045 CEST	61681	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:44.491236925 CEST	53	52869	1.1.1.1	192.168.2.4
May 25, 2024 21:12:44.519720078 CEST	53	61681	1.1.1.1	192.168.2.4
May 25, 2024 21:12:45.206290007 CEST	63145	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:45.206290007 CEST	52169	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:45.303469896 CEST	53	63145	1.1.1.1	192.168.2.4
May 25, 2024 21:12:45.451634884 CEST	53	52169	1.1.1.1	192.168.2.4
May 25, 2024 21:12:46.402018070 CEST	58157	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.402232885 CEST	52767	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.403253078 CEST	53764	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.403495073 CEST	61712	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.405057907 CEST	57780	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.405184031 CEST	58371	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.445077896 CEST	53	49538	1.1.1.1	192.168.2.4
May 25, 2024 21:12:46.445177078 CEST	53	62912	1.1.1.1	192.168.2.4
May 25, 2024 21:12:46.445204973 CEST	53	58371	1.1.1.1	192.168.2.4
May 25, 2024 21:12:46.446567059 CEST	53	58157	1.1.1.1	192.168.2.4
May 25, 2024 21:12:46.454435110 CEST	53	52767	1.1.1.1	192.168.2.4
May 25, 2024 21:12:46.854058981 CEST	53461	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.854361057 CEST	51297	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.854818106 CEST	60742	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.854969025 CEST	61148	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:46.903583050 CEST	53	53461	1.1.1.1	192.168.2.4
May 25, 2024 21:12:46.903620005 CEST	53	51297	1.1.1.1	192.168.2.4
May 25, 2024 21:12:46.909545898 CEST	53	61148	1.1.1.1	192.168.2.4
May 25, 2024 21:12:46.961333036 CEST	53	60742	1.1.1.1	192.168.2.4
May 25, 2024 21:12:47.820210934 CEST	59150	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:47.820508957 CEST	62416	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:47.831547022 CEST	53	51278	1.1.1.1	192.168.2.4
May 25, 2024 21:12:47.842369080 CEST	53	62416	1.1.1.1	192.168.2.4
May 25, 2024 21:12:47.847341061 CEST	53	59150	1.1.1.1	192.168.2.4
May 25, 2024 21:12:48.088176966 CEST	56857	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:48.088176966 CEST	51514	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:48.136415005 CEST	53	56857	1.1.1.1	192.168.2.4
May 25, 2024 21:12:48.136434078 CEST	53	51514	1.1.1.1	192.168.2.4
May 25, 2024 21:12:48.511419058 CEST	53262	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:48.511946917 CEST	50309	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:48.530858040 CEST	53	50309	1.1.1.1	192.168.2.4
May 25, 2024 21:12:48.540180922 CEST	53	53262	1.1.1.1	192.168.2.4
May 25, 2024 21:12:48.807805061 CEST	57229	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:48.807961941 CEST	60987	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:48.846101046 CEST	53	57229	1.1.1.1	192.168.2.4
May 25, 2024 21:12:48.846118927 CEST	53	60987	1.1.1.1	192.168.2.4
May 25, 2024 21:12:50.605084896 CEST	51374	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:50.605693102 CEST	60489	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:50.647490025 CEST	53	60489	1.1.1.1	192.168.2.4
May 25, 2024 21:12:50.647526026 CEST	53	51374	1.1.1.1	192.168.2.4
May 25, 2024 21:12:51.331151962 CEST	49995	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:51.331640005 CEST	51451	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:51.376966000 CEST	53	49995	1.1.1.1	192.168.2.4
May 25, 2024 21:12:51.376997948 CEST	53	51451	1.1.1.1	192.168.2.4
May 25, 2024 21:12:52.219108105 CEST	53	52135	1.1.1.1	192.168.2.4
May 25, 2024 21:12:52.870239019 CEST	56025	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:52.870510101 CEST	52659	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:52.953947067 CEST	53	52659	1.1.1.1	192.168.2.4
May 25, 2024 21:12:52.953969955 CEST	53	56025	1.1.1.1	192.168.2.4
May 25, 2024 21:12:53.113543987 CEST	55392	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:53.114063025 CEST	49764	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:53.141777039 CEST	53	49764	1.1.1.1	192.168.2.4
May 25, 2024 21:12:53.199388027 CEST	53	55392	1.1.1.1	192.168.2.4
May 25, 2024 21:12:53.965049028 CEST	51849	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:53.965631008 CEST	53946	53	192.168.2.4	1.1.1.1
May 25, 2024 21:12:54.024159908 CEST	53	53946	1.1.1.1	192.168.2.4
May 25, 2024 21:12:54.024172068 CEST	53	51849	1.1.1.1	192.168.2.4
May 25, 2024 21:12:56.523309946 CEST	53	62357	1.1.1.1	192.168.2.4
May 25, 2024 21:13:00.044750929 CEST	138	138	192.168.2.4	192.168.2.255
May 25, 2024 21:13:15.405467987 CEST	53	57706	1.1.1.1	192.168.2.4
May 25, 2024 21:13:38.216932058 CEST	53	60664	1.1.1.1	192.168.2.4
May 25, 2024 21:13:38.426887989 CEST	53	57801	1.1.1.1	192.168.2.4
May 25, 2024 21:13:52.516268015 CEST	53177	53	192.168.2.4	1.1.1.1
May 25, 2024 21:13:52.516817093 CEST	53813	53	192.168.2.4	1.1.1.1
May 25, 2024 21:13:52.536323071 CEST	53	53177	1.1.1.1	192.168.2.4
May 25, 2024 21:13:52.554529905 CEST	53	53813	1.1.1.1	192.168.2.4
May 25, 2024 21:13:57.018462896 CEST	62725	53	192.168.2.4	1.1.1.1
May 25, 2024 21:13:57.018698931 CEST	55887	53	192.168.2.4	1.1.1.1
May 25, 2024 21:13:57.114412069 CEST	53	55887	1.1.1.1	192.168.2.4
May 25, 2024 21:13:57.171577930 CEST	53	62725	1.1.1.1	192.168.2.4
May 25, 2024 21:13:57.831496954 CEST	60388	53	192.168.2.4	1.1.1.1
May 25, 2024 21:13:57.831612110 CEST	60858	53	192.168.2.4	1.1.1.1
May 25, 2024 21:13:57.883609056 CEST	53	60858	1.1.1.1	192.168.2.4
May 25, 2024 21:13:57.883655071 CEST	53	60388	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 25, 2024 21:12:38.451996088 CEST	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
May 25, 2024 21:12:39.591691017 CEST	192.168.2.4	1.1.1.1	c269	(Port unreachable)	Destination Unreachable
May 25, 2024 21:12:41.852741957 CEST	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable
May 25, 2024 21:12:43.086987972 CEST	192.168.2.4	1.1.1.1	c1fd	(Port unreachable)	Destination Unreachable
May 25, 2024 21:12:44.523935080 CEST	192.168.2.4	1.1.1.1	c23f	(Port unreachable)	Destination Unreachable
May 25, 2024 21:12:45.451837063 CEST	192.168.2.4	1.1.1.1	c265	(Port unreachable)	Destination Unreachable
May 25, 2024 21:12:52.219310999 CEST	192.168.2.4	1.1.1.1	c227	(Port unreachable)	Destination Unreachable
May 25, 2024 21:13:52.554605961 CEST	192.168.2.4	1.1.1.1	c23a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 25, 2024 21:12:39.547733068 CEST	192.168.2.4	1.1.1.1	0x5881	Standard query (0)	clickers.smartresourceguide.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:39.547835112 CEST	192.168.2.4	1.1.1.1	0x60b7	Standard query (0)	clickers.smartresourceguide.com	65	IN (0x0001)	false
May 25, 2024 21:12:40.569128990 CEST	192.168.2.4	1.1.1.1	0x45f	Standard query (0)	smartresourceguide.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:40.569235086 CEST	192.168.2.4	1.1.1.1	0xe6a3	Standard query (0)	smartresourceguide.com	65	IN (0x0001)	false
May 25, 2024 21:12:41.418869972 CEST	192.168.2.4	1.1.1.1	0x577	Standard query (0)	ferradurai.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:41.418970108 CEST	192.168.2.4	1.1.1.1	0x2630	Standard query (0)	ferradurai.com	65	IN (0x0001)	false
May 25, 2024 21:12:43.046154022 CEST	192.168.2.4	1.1.1.1	0x213b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:43.046251059 CEST	192.168.2.4	1.1.1.1	0xdbe2	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 25, 2024 21:12:43.121393919 CEST	192.168.2.4	1.1.1.1	0x35a	Standard query (0)	sonziuq.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:43.124669075 CEST	192.168.2.4	1.1.1.1	0xe0d	Standard query (0)	sonziuq.com	65	IN (0x0001)	false
May 25, 2024 21:12:44.424787045 CEST	192.168.2.4	1.1.1.1	0x3ce8	Standard query (0)	www.d0qwtrk.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:44.424787045 CEST	192.168.2.4	1.1.1.1	0xfd9a	Standard query (0)	www.d0qwtrk.com	65	IN (0x0001)	false
May 25, 2024 21:12:45.206290007 CEST	192.168.2.4	1.1.1.1	0x13ac	Standard query (0)	offer.housebuyernetwork.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:45.206290007 CEST	192.168.2.4	1.1.1.1	0x5b7c	Standard query (0)	offer.housebuyernetwork.com	65	IN (0x0001)	false
May 25, 2024 21:12:46.402018070 CEST	192.168.2.4	1.1.1.1	0x7cd0	Standard query (0)	ads.nextdoor.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.402232885 CEST	192.168.2.4	1.1.1.1	0x1842	Standard query (0)	ads.nextdoor.com	65	IN (0x0001)	false
May 25, 2024 21:12:46.403253078 CEST	192.168.2.4	1.1.1.1	0x336	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.403495073 CEST	192.168.2.4	1.1.1.1	0x2db9	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
May 25, 2024 21:12:46.405057907 CEST	192.168.2.4	1.1.1.1	0x8ecf	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.405184031 CEST	192.168.2.4	1.1.1.1	0xa4f7	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 25, 2024 21:12:46.854058981 CEST	192.168.2.4	1.1.1.1	0x9515	Standard query (0)	static.leadshook.io	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.854361057 CEST	192.168.2.4	1.1.1.1	0x9807	Standard query (0)	static.leadshook.io	65	IN (0x0001)	false
May 25, 2024 21:12:46.854818106 CEST	192.168.2.4	1.1.1.1	0x1e38	Standard query (0)	browser.sentry-cdn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.854969025 CEST	192.168.2.4	1.1.1.1	0x2a7a	Standard query (0)	browser.sentry-cdn.com	65	IN (0x0001)	false
May 25, 2024 21:12:47.820210934 CEST	192.168.2.4	1.1.1.1	0x4a9f	Standard query (0)	api.trustedform.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:47.820508957 CEST	192.168.2.4	1.1.1.1	0x5944	Standard query (0)	api.trustedform.com	65	IN (0x0001)	false
May 25, 2024 21:12:48.088176966 CEST	192.168.2.4	1.1.1.1	0xd90b	Standard query (0)	flask.nextdoor.com	65	IN (0x0001)	false
May 25, 2024 21:12:48.088176966 CEST	192.168.2.4	1.1.1.1	0x2d2b	Standard query (0)	flask.nextdoor.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.511419058 CEST	192.168.2.4	1.1.1.1	0x8b0d	Standard query (0)	static.leadshook.io	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.511946917 CEST	192.168.2.4	1.1.1.1	0xede9	Standard query (0)	static.leadshook.io	65	IN (0x0001)	false
May 25, 2024 21:12:48.807805061 CEST	192.168.2.4	1.1.1.1	0x9b2b	Standard query (0)	cdn.trustedform.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.807961941 CEST	192.168.2.4	1.1.1.1	0x76e	Standard query (0)	cdn.trustedform.com	65	IN (0x0001)	false
May 25, 2024 21:12:50.605084896 CEST	192.168.2.4	1.1.1.1	0x36cc	Standard query (0)	offer.housebuyernetwork.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:50.605693102 CEST	192.168.2.4	1.1.1.1	0xd279	Standard query (0)	offer.housebuyernetwork.com	65	IN (0x0001)	false
May 25, 2024 21:12:51.331151962 CEST	192.168.2.4	1.1.1.1	0x5275	Standard query (0)	sentry.leadshook.io	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:51.331640005 CEST	192.168.2.4	1.1.1.1	0x1638	Standard query (0)	sentry.leadshook.io	65	IN (0x0001)	false
May 25, 2024 21:12:52.870239019 CEST	192.168.2.4	1.1.1.1	0xd712	Standard query (0)	quiz-live.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:52.870510101 CEST	192.168.2.4	1.1.1.1	0x48a9	Standard query (0)	quiz-live.s3.amazonaws.com	65	IN (0x0001)	false
May 25, 2024 21:12:53.113543987 CEST	192.168.2.4	1.1.1.1	0xba83	Standard query (0)	sentry.leadshook.io	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:53.114063025 CEST	192.168.2.4	1.1.1.1	0xec27	Standard query (0)	sentry.leadshook.io	65	IN (0x0001)	false
May 25, 2024 21:12:53.965049028 CEST	192.168.2.4	1.1.1.1	0xf72c	Standard query (0)	quiz-live.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:53.965631008 CEST	192.168.2.4	1.1.1.1	0x9298	Standard query (0)	quiz-live.s3.amazonaws.com	65	IN (0x0001)	false
May 25, 2024 21:13:52.516268015 CEST	192.168.2.4	1.1.1.1	0x946f	Standard query (0)	api.trustedform.com	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:52.516817093 CEST	192.168.2.4	1.1.1.1	0xfde	Standard query (0)	api.trustedform.com	65	IN (0x0001)	false
May 25, 2024 21:13:57.018462896 CEST	192.168.2.4	1.1.1.1	0x3fe0	Standard query (0)	sentry.leadshook.io	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:57.018698931 CEST	192.168.2.4	1.1.1.1	0x3e12	Standard query (0)	sentry.leadshook.io	65	IN (0x0001)	false
May 25, 2024 21:13:57.831496954 CEST	192.168.2.4	1.1.1.1	0x31ef	Standard query (0)	sentry.leadshook.io	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:57.831612110 CEST	192.168.2.4	1.1.1.1	0x6277	Standard query (0)	sentry.leadshook.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 25, 2024 21:12:39.563554049 CEST	1.1.1.1	192.168.2.4	0x5881	No error (0)	clickers.smartresourceguide.com	447b0cd8.ongageroute.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:39.563554049 CEST	1.1.1.1	192.168.2.4	0x5881	No error (0)	447b0cd8.ongageroute.net		44.195.255.76	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:39.563554049 CEST	1.1.1.1	192.168.2.4	0x5881	No error (0)	447b0cd8.ongageroute.net		54.87.30.161	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:39.591481924 CEST	1.1.1.1	192.168.2.4	0x60b7	No error (0)	clickers.smartresourceguide.com	447b0cd8.ongageroute.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:40.663527966 CEST	1.1.1.1	192.168.2.4	0x45f	No error (0)	smartresourceguide.com		192.124.249.138	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:41.434525967 CEST	1.1.1.1	192.168.2.4	0x577	No error (0)	ferradurai.com		3.80.229.104	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:43.056204081 CEST	1.1.1.1	192.168.2.4	0x213b	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:43.086647034 CEST	1.1.1.1	192.168.2.4	0xdbe2	No error (0)	www.google.com			65	IN (0x0001)	false
May 25, 2024 21:12:43.179546118 CEST	1.1.1.1	192.168.2.4	0x35a	No error (0)	sonziuq.com		34.209.92.5	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:44.491236925 CEST	1.1.1.1	192.168.2.4	0x3ce8	No error (0)	www.d0qwtrk.com		35.244.245.136	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:45.303469896 CEST	1.1.1.1	192.168.2.4	0x13ac	No error (0)	offer.housebuyernetwork.com	network.leadshook.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:45.303469896 CEST	1.1.1.1	192.168.2.4	0x13ac	No error (0)	network.leadshook.io		3.213.181.94	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:45.303469896 CEST	1.1.1.1	192.168.2.4	0x13ac	No error (0)	network.leadshook.io		54.197.224.139	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:45.303469896 CEST	1.1.1.1	192.168.2.4	0x13ac	No error (0)	network.leadshook.io		52.1.160.159	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:45.451634884 CEST	1.1.1.1	192.168.2.4	0x5b7c	No error (0)	offer.housebuyernetwork.com	network.leadshook.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:46.445144892 CEST	1.1.1.1	192.168.2.4	0x2db9	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:46.445144892 CEST	1.1.1.1	192.168.2.4	0x2db9	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:46.445204973 CEST	1.1.1.1	192.168.2.4	0xa4f7	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:46.445233107 CEST	1.1.1.1	192.168.2.4	0x336	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:46.445233107 CEST	1.1.1.1	192.168.2.4	0x336	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:46.446567059 CEST	1.1.1.1	192.168.2.4	0x7cd0	No error (0)	ads.nextdoor.com	ads.us.nextdoor.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:46.446567059 CEST	1.1.1.1	192.168.2.4	0x7cd0	No error (0)	ads.us.nextdoor.com		52.35.252.245	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.446567059 CEST	1.1.1.1	192.168.2.4	0x7cd0	No error (0)	ads.us.nextdoor.com		52.39.41.112	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.446567059 CEST	1.1.1.1	192.168.2.4	0x7cd0	No error (0)	ads.us.nextdoor.com		52.13.122.131	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.446567059 CEST	1.1.1.1	192.168.2.4	0x7cd0	No error (0)	ads.us.nextdoor.com		35.166.196.49	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.446567059 CEST	1.1.1.1	192.168.2.4	0x7cd0	No error (0)	ads.us.nextdoor.com		54.218.12.213	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.446567059 CEST	1.1.1.1	192.168.2.4	0x7cd0	No error (0)	ads.us.nextdoor.com		35.165.133.132	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.446567059 CEST	1.1.1.1	192.168.2.4	0x7cd0	No error (0)	ads.us.nextdoor.com		54.200.211.8	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.446567059 CEST	1.1.1.1	192.168.2.4	0x7cd0	No error (0)	ads.us.nextdoor.com		44.232.82.226	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.446599960 CEST	1.1.1.1	192.168.2.4	0x8ecf	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:46.454435110 CEST	1.1.1.1	192.168.2.4	0x1842	No error (0)	ads.nextdoor.com	ads.us.nextdoor.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:46.903583050 CEST	1.1.1.1	192.168.2.4	0x9515	No error (0)	static.leadshook.io		108.156.60.79	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.903583050 CEST	1.1.1.1	192.168.2.4	0x9515	No error (0)	static.leadshook.io		108.156.60.19	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.903583050 CEST	1.1.1.1	192.168.2.4	0x9515	No error (0)	static.leadshook.io		108.156.60.112	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.903583050 CEST	1.1.1.1	192.168.2.4	0x9515	No error (0)	static.leadshook.io		108.156.60.96	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.961333036 CEST	1.1.1.1	192.168.2.4	0x1e38	No error (0)	browser.sentry-cdn.com		151.101.194.217	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.961333036 CEST	1.1.1.1	192.168.2.4	0x1e38	No error (0)	browser.sentry-cdn.com		151.101.2.217	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.961333036 CEST	1.1.1.1	192.168.2.4	0x1e38	No error (0)	browser.sentry-cdn.com		151.101.66.217	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:46.961333036 CEST	1.1.1.1	192.168.2.4	0x1e38	No error (0)	browser.sentry-cdn.com		151.101.130.217	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:47.847341061 CEST	1.1.1.1	192.168.2.4	0x4a9f	No error (0)	api.trustedform.com		44.205.67.127	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:47.847341061 CEST	1.1.1.1	192.168.2.4	0x4a9f	No error (0)	api.trustedform.com		34.199.160.159	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:47.847341061 CEST	1.1.1.1	192.168.2.4	0x4a9f	No error (0)	api.trustedform.com		44.206.194.94	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:47.847341061 CEST	1.1.1.1	192.168.2.4	0x4a9f	No error (0)	api.trustedform.com		23.20.117.134	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:47.847341061 CEST	1.1.1.1	192.168.2.4	0x4a9f	No error (0)	api.trustedform.com		3.209.45.234	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:47.847341061 CEST	1.1.1.1	192.168.2.4	0x4a9f	No error (0)	api.trustedform.com		34.198.240.109	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:47.847341061 CEST	1.1.1.1	192.168.2.4	0x4a9f	No error (0)	api.trustedform.com		107.21.240.60	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:47.847341061 CEST	1.1.1.1	192.168.2.4	0x4a9f	No error (0)	api.trustedform.com		34.204.240.197	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.136415005 CEST	1.1.1.1	192.168.2.4	0xd90b	No error (0)	flask.nextdoor.com	flask.us.nextdoor.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:48.136434078 CEST	1.1.1.1	192.168.2.4	0x2d2b	No error (0)	flask.nextdoor.com	flask.us.nextdoor.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:48.136434078 CEST	1.1.1.1	192.168.2.4	0x2d2b	No error (0)	flask.us.nextdoor.com		54.200.211.8	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.136434078 CEST	1.1.1.1	192.168.2.4	0x2d2b	No error (0)	flask.us.nextdoor.com		35.167.146.149	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.136434078 CEST	1.1.1.1	192.168.2.4	0x2d2b	No error (0)	flask.us.nextdoor.com		54.218.12.213	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.136434078 CEST	1.1.1.1	192.168.2.4	0x2d2b	No error (0)	flask.us.nextdoor.com		35.166.196.49	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.136434078 CEST	1.1.1.1	192.168.2.4	0x2d2b	No error (0)	flask.us.nextdoor.com		52.35.252.245	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.136434078 CEST	1.1.1.1	192.168.2.4	0x2d2b	No error (0)	flask.us.nextdoor.com		44.232.82.226	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.136434078 CEST	1.1.1.1	192.168.2.4	0x2d2b	No error (0)	flask.us.nextdoor.com		52.13.122.131	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.136434078 CEST	1.1.1.1	192.168.2.4	0x2d2b	No error (0)	flask.us.nextdoor.com		35.165.133.132	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.540180922 CEST	1.1.1.1	192.168.2.4	0x8b0d	No error (0)	static.leadshook.io		18.244.18.79	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.540180922 CEST	1.1.1.1	192.168.2.4	0x8b0d	No error (0)	static.leadshook.io		18.244.18.105	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.540180922 CEST	1.1.1.1	192.168.2.4	0x8b0d	No error (0)	static.leadshook.io		18.244.18.69	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.540180922 CEST	1.1.1.1	192.168.2.4	0x8b0d	No error (0)	static.leadshook.io		18.244.18.40	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.846101046 CEST	1.1.1.1	192.168.2.4	0x9b2b	No error (0)	cdn.trustedform.com		3.162.38.8	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.846101046 CEST	1.1.1.1	192.168.2.4	0x9b2b	No error (0)	cdn.trustedform.com		3.162.38.72	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.846101046 CEST	1.1.1.1	192.168.2.4	0x9b2b	No error (0)	cdn.trustedform.com		3.162.38.66	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:48.846101046 CEST	1.1.1.1	192.168.2.4	0x9b2b	No error (0)	cdn.trustedform.com		3.162.38.41	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:50.647490025 CEST	1.1.1.1	192.168.2.4	0xd279	No error (0)	offer.housebuyernetwork.com	network.leadshook.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:50.647526026 CEST	1.1.1.1	192.168.2.4	0x36cc	No error (0)	offer.housebuyernetwork.com	network.leadshook.io		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:50.647526026 CEST	1.1.1.1	192.168.2.4	0x36cc	No error (0)	network.leadshook.io		3.213.181.94	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:50.647526026 CEST	1.1.1.1	192.168.2.4	0x36cc	No error (0)	network.leadshook.io		54.197.224.139	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:50.647526026 CEST	1.1.1.1	192.168.2.4	0x36cc	No error (0)	network.leadshook.io		52.1.160.159	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:51.376966000 CEST	1.1.1.1	192.168.2.4	0x5275	No error (0)	sentry.leadshook.io	team-tools-1121285548.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:51.376966000 CEST	1.1.1.1	192.168.2.4	0x5275	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		3.232.98.97	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:51.376966000 CEST	1.1.1.1	192.168.2.4	0x5275	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		3.218.204.205	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:51.376966000 CEST	1.1.1.1	192.168.2.4	0x5275	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		52.6.42.143	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:51.376997948 CEST	1.1.1.1	192.168.2.4	0x1638	No error (0)	sentry.leadshook.io	team-tools-1121285548.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:52.953947067 CEST	1.1.1.1	192.168.2.4	0x48a9	No error (0)	quiz-live.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:52.953947067 CEST	1.1.1.1	192.168.2.4	0x48a9	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	quiz-live.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.27.156	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.89	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.20.19	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.169.73	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.232.33	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.193.113	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.162.57	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:52.953969955 CEST	1.1.1.1	192.168.2.4	0xd712	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.218.9	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:53.141777039 CEST	1.1.1.1	192.168.2.4	0xec27	No error (0)	sentry.leadshook.io	team-tools-1121285548.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:53.199388027 CEST	1.1.1.1	192.168.2.4	0xba83	No error (0)	sentry.leadshook.io	team-tools-1121285548.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:53.199388027 CEST	1.1.1.1	192.168.2.4	0xba83	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		3.232.98.97	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:53.199388027 CEST	1.1.1.1	192.168.2.4	0xba83	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		3.218.204.205	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:53.199388027 CEST	1.1.1.1	192.168.2.4	0xba83	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		52.6.42.143	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:54.024159908 CEST	1.1.1.1	192.168.2.4	0x9298	No error (0)	quiz-live.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:54.024159908 CEST	1.1.1.1	192.168.2.4	0x9298	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	quiz-live.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.203.121	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.103	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.104.148	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.210.201	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.48.60	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.146.219	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.3.211	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:54.529647112 CEST	1.1.1.1	192.168.2.4	0x7291	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.25.136	A (IP address)	IN (0x0001)	false
May 25, 2024 21:12:55.106307030 CEST	1.1.1.1	192.168.2.4	0x7793	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:12:55.106307030 CEST	1.1.1.1	192.168.2.4	0x7793	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:08.472587109 CEST	1.1.1.1	192.168.2.4	0xb53c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:13:08.472587109 CEST	1.1.1.1	192.168.2.4	0xb53c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:30.462145090 CEST	1.1.1.1	192.168.2.4	0x7cea	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:13:30.462145090 CEST	1.1.1.1	192.168.2.4	0x7cea	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:51.368324995 CEST	1.1.1.1	192.168.2.4	0xd8de	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:13:51.368324995 CEST	1.1.1.1	192.168.2.4	0xd8de	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:52.536323071 CEST	1.1.1.1	192.168.2.4	0x946f	No error (0)	api.trustedform.com		18.233.135.95	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:52.536323071 CEST	1.1.1.1	192.168.2.4	0x946f	No error (0)	api.trustedform.com		34.198.240.109	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:52.536323071 CEST	1.1.1.1	192.168.2.4	0x946f	No error (0)	api.trustedform.com		34.204.240.197	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:52.536323071 CEST	1.1.1.1	192.168.2.4	0x946f	No error (0)	api.trustedform.com		3.214.134.28	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:52.536323071 CEST	1.1.1.1	192.168.2.4	0x946f	No error (0)	api.trustedform.com		3.90.120.100	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:52.536323071 CEST	1.1.1.1	192.168.2.4	0x946f	No error (0)	api.trustedform.com		44.197.72.219	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:52.536323071 CEST	1.1.1.1	192.168.2.4	0x946f	No error (0)	api.trustedform.com		34.199.160.159	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:52.536323071 CEST	1.1.1.1	192.168.2.4	0x946f	No error (0)	api.trustedform.com		54.236.139.92	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:57.114412069 CEST	1.1.1.1	192.168.2.4	0x3e12	No error (0)	sentry.leadshook.io	team-tools-1121285548.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:13:57.171577930 CEST	1.1.1.1	192.168.2.4	0x3fe0	No error (0)	sentry.leadshook.io	team-tools-1121285548.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:13:57.171577930 CEST	1.1.1.1	192.168.2.4	0x3fe0	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		3.232.98.97	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:57.171577930 CEST	1.1.1.1	192.168.2.4	0x3fe0	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		3.218.204.205	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:57.171577930 CEST	1.1.1.1	192.168.2.4	0x3fe0	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		52.6.42.143	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:57.883609056 CEST	1.1.1.1	192.168.2.4	0x6277	No error (0)	sentry.leadshook.io	team-tools-1121285548.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:13:57.883655071 CEST	1.1.1.1	192.168.2.4	0x31ef	No error (0)	sentry.leadshook.io	team-tools-1121285548.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 21:13:57.883655071 CEST	1.1.1.1	192.168.2.4	0x31ef	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		3.218.204.205	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:57.883655071 CEST	1.1.1.1	192.168.2.4	0x31ef	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		3.232.98.97	A (IP address)	IN (0x0001)	false
May 25, 2024 21:13:57.883655071 CEST	1.1.1.1	192.168.2.4	0x31ef	No error (0)	team-tools-1121285548.us-east-1.elb.amazonaws.com		52.6.42.143	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clickers.smartresourceguide.com

smartresourceguide.com

ferradurai.com

sonziuq.com

fs.microsoft.com

www.d0qwtrk.com

offer.housebuyernetwork.com

https:

browser.sentry-cdn.com

static.leadshook.io

ads.nextdoor.com

api.trustedform.com

cdn.trustedform.com

flask.nextdoor.com

sentry.leadshook.io

quiz-live.s3.amazonaws.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	44.195.255.76	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:40 UTC	904	OUT	GET /?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j HTTP/1.1 Host: clickers.smartresourceguide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:40 UTC	527	IN	HTTP/1.1 302 Moved Temporarily Date: Sat, 25 May 2024 19:12:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx X-Powered-By: PHP/5.6.40 Accept-Ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Platform-Version Accept-Ch-Lifetime: 86400 Critical-Ch: Sec-Ch-Ua-Platform-Version Location: https://smartresourceguide.com/EasyKnock X-Permitted-Cross-Domain-Policies: None Strict-Transport-Security: max-age=86400 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block;
2024-05-25 19:12:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	44.195.255.76	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:40 UTC	942	OUT	GET /?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j HTTP/1.1 Host: clickers.smartresourceguide.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:40 UTC	527	IN	HTTP/1.1 302 Moved Temporarily Date: Sat, 25 May 2024 19:12:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx X-Powered-By: PHP/5.6.40 Accept-Ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Platform-Version Accept-Ch-Lifetime: 86400 Critical-Ch: Sec-Ch-Ua-Platform-Version Location: https://smartresourceguide.com/EasyKnock X-Permitted-Cross-Domain-Policies: None Strict-Transport-Security: max-age=86400 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block;
2024-05-25 19:12:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	192.124.249.138	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:41 UTC	712	OUT	GET /EasyKnock HTTP/1.1 Host: smartresourceguide.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:41 UTC	977	IN	HTTP/1.1 302 Found Server: Sucuri/Cloudproxy Date: Sat, 25 May 2024 19:12:41 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; age: 65 content-security-policy: upgrade-insecure-requests location: https://ferradurai.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1= referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=300 vary: User-Agent x-cache: cached x-cache-hit: HIT x-cacheable: YES:Forced x-cacheproxy-retries: 0/2 x-content-type-options: nosniff x-fawn-proc-count: 1,1,24 x-php-version: 8.0 x-redirect-by: Safe Redirect Manager x-safe-redirect-id: 1781 x-safe-redirect-manager: true x-xss-protection: 1; mode=block x-backend: varnish_ssl Strict-Transport-Security: max-age=31536000; includeSubDomains X-Sucuri-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	3.80.229.104	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:42 UTC	698	OUT	GET /?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1= HTTP/1.1 Host: ferradurai.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:42 UTC	464	IN	HTTP/1.1 302 Found date: Sat, 25 May 2024 19:12:42 GMT content-type: text/html; charset=utf-8 content-length: 501 cache-control: private location: https://ferradurai.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0 accept-ch: Sec-Ch-Ua, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Bitness, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Wow64 connection: close
2024-05-25 19:12:42 UTC	501	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 72 72 61 64 75 72 61 69 2e 63 6f 6d 2f 3f 45 3d 31 69 6f 48 25 32 62 65 50 34 38 64 52 75 4c 54 36 49 46 57 72 36 38 53 39 47 4f 6d 33 69 4a 55 30 54 26 61 6d 70 3b 73 31 3d 26 61 6d 70 3b 63 68 2d 72 65 64 69 72 3d 31 26 61 6d 70 3b 63 6b 6d 78 69 64 3d 63 70 39 33 67 61 68 71 30 30 30 31 75 69 37 6f 73 31 73 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://ferradurai.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0">here</a>.</h2></body></html><!DOCTYPE html PUBLIC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	3.80.229.104	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:42 UTC	988	OUT	GET /?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0 HTTP/1.1 Host: ferradurai.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:43 UTC	320	IN	HTTP/1.1 302 Found date: Sat, 25 May 2024 19:12:43 GMT content-type: text/html; charset=utf-8 content-length: 278 cache-control: private location: https://sonziuq.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0&ckmguid=9fc97d00-6f34-4575-8508-5b5f753af5f3 connection: close
2024-05-25 19:12:43 UTC	278	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 6f 6e 7a 69 75 71 2e 63 6f 6d 2f 3f 45 3d 31 69 6f 48 25 32 62 65 50 34 38 64 52 75 4c 54 36 49 46 57 72 36 38 53 39 47 4f 6d 33 69 4a 55 30 54 26 61 6d 70 3b 73 31 3d 26 61 6d 70 3b 63 68 2d 72 65 64 69 72 3d 31 26 61 6d 70 3b 63 6b 6d 78 69 64 3d 63 70 39 33 67 61 68 71 30 30 30 31 75 69 37 6f 73 31 73 30 26 61 6d 70 3b 63 6b 6d 67 75 69 64 3d 39 66 63 39 37 64 30 30 2d 36 66 33 34 2d 34 35 37 35 2d 38 35 30 38 2d 35 62 35 66 37 35 33 61 66 35 66 33 22 3e 68 65 72 65 3c 2f 61 3e 2e Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://sonziuq.com/?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0&ckmguid=9fc97d00-6f34-4575-8508-5b5f753af5f3">here</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-25 19:12:43 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=75428 Date: Sat, 25 May 2024 19:12:43 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	34.209.92.5	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:43 UTC	779	OUT	GET /?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0&ckmguid=9fc97d00-6f34-4575-8508-5b5f753af5f3 HTTP/1.1 Host: sonziuq.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:44 UTC	739	IN	HTTP/1.1 302 Found date: Sat, 25 May 2024 19:12:44 GMT content-type: text/html; charset=utf-8 content-length: 195 cache-control: private location: https://www.d0qwtrk.com/28KL61/5NWWWN/?sub1=10000&sub2=563730799&sub3= p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" set-cookie: sfd=aY9LtkewPEprEKfoF/SKP65GmjggEPew5pH44GCrH3E8UbqKzjlvVA==; domain=.sonziuq.com; path=/; HttpOnly set-cookie: tm=4Y+FH8lu++SMu4jjg2cQq65GmjggEPew5pH44GCrH3E8UbqKzjlvVA==; domain=.sonziuq.com; expires=Mon, 25-May-2026 19:12:44 GMT; path=/; HttpOnly set-cookie: c8074=aY9LtkewPEpVZMX9HgH7ffZQo1UDxFdU6Q1nKsShn6gj/880Y3zxXA==; domain=.sonziuq.com; expires=Mon, 24-Jun-2024 19:12:44 GMT; path=/; HttpOnly connection: close
2024-05-25 19:12:44 UTC	195	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 30 71 77 74 72 6b 2e 63 6f 6d 2f 32 38 4b 4c 36 31 2f 35 4e 57 57 57 4e 2f 3f 73 75 62 31 3d 31 30 30 30 30 26 61 6d 70 3b 73 75 62 32 3d 35 36 33 37 33 30 37 39 39 26 61 6d 70 3b 73 75 62 33 3d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.d0qwtrk.com/28KL61/5NWWWN/?sub1=10000&sub2=563730799&sub3=">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:44 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-25 19:12:44 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=75349 Date: Sat, 25 May 2024 19:12:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-25 19:12:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	35.244.245.136	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:45 UTC	704	OUT	GET /28KL61/5NWWWN/?sub1=10000&sub2=563730799&sub3= HTTP/1.1 Host: www.d0qwtrk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:45 UTC	837	IN	HTTP/1.1 302 Found Server: nginx Date: Sat, 25 May 2024 19:12:45 GMT Content-Type: text/html; charset=utf-8 Content-Length: 232 Accept-Ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model Location: https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 Set-Cookie: uniqueClick_5NWWWN=26da245e-277d-4e42-884a-850579c1945e:1716664365; Path=/; Expires=Sun, 26 May 2024 19:12:45 GMT; Secure; SameSite=None Set-Cookie: transaction_id=57a5e1a860dd499298d62e4351284653; Path=/; Expires=Fri, 23 Aug 2024 19:12:45 GMT; Secure; SameSite=None Vary: Origin X-Eflow-Request-Id: 85d81412-c55d-4a30-bab4-fc1d466f893a Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 19:12:45 UTC	232	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 66 66 65 72 2e 68 6f 75 73 65 62 75 79 65 72 6e 65 74 77 6f 72 6b 2e 63 6f 6d 2f 73 2f 62 51 64 74 65 4c 52 45 68 51 42 6f 76 37 53 36 77 67 46 42 4d 4f 43 66 70 79 77 53 34 67 32 51 77 4d 4c 71 34 44 41 41 3f 73 6f 75 72 63 65 3d 31 30 35 31 26 61 6d 70 3b 73 75 62 5f 69 64 5f 31 3d 31 30 30 30 30 26 61 6d 70 3b 73 75 62 5f 69 64 5f 32 3d 35 37 61 35 65 31 61 38 36 30 64 64 34 39 39 32 39 38 64 36 32 65 34 33 35 31 32 38 34 36 35 33 26 61 6d 70 3b 73 75 62 5f 69 64 5f 33 3d 26 61 6d 70 3b 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 3d 35 36 33 37 33 30 37 39 39 26 61 6d 70 3b 70 3d 34 35 2e 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	3.213.181.94	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:45 UTC	823	OUT	GET /s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 HTTP/1.1 Host: offer.housebuyernetwork.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:46 UTC	395	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store Content-Type: text/html; charset=utf-8 Date: Sat, 25 May 2024 19:12:46 GMT Etag: W/"2fc93-QpPEGnUNv4BjdtGVflTlaGENXgo" Server: Caddy Set-Cookie: dt_68990.lead=j%3A%7B%22id%22%3A503374439%7D; Path=/; Secure; SameSite=None Vary: Accept-Encoding X-Powered-By: Express Connection: close Transfer-Encoding: chunked
2024-05-25 19:12:46 UTC	791	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 53 65 6c 6c 20 4d 79 20 48 6f 75 73 65 20 46 61 73 74 20 46 6f 72 20 43 61 73 68 3c 2f 74 69 74 6c 65 3e 0a 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 71 75 69 7a 2d 6c 69 76 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f Data Ascii: 8000<!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, user-scalable=no"> <title>Sell My House Fast For Cash</title> <link rel="icon" href="https://quiz-live.s3.amazonaws.com/
2024-05-25 19:12:46 UTC	2372	IN	Data Raw: 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 63 6f 64 65 2c 6b 62 64 2c 73 61 6d 70 7b 66 6f Data Ascii: re{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{fo
2024-05-25 19:12:46 UTC	538	IN	Data Raw: 67 3a 61 75 74 6f 7d 2e 70 75 72 65 2d 67 20 5b 63 6c 61 73 73 2a 3d 70 75 72 65 2d 75 5d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 7d 2e 70 75 72 65 2d 75 2d 31 2c 2e 70 75 72 65 2d 75 2d 31 2d 31 2c 2e 70 75 72 65 2d 75 2d 31 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 31 2d 32 2c 2e 70 75 72 65 2d 75 2d 31 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 2d 33 2c 2e 70 75 72 65 2d 75 2d 31 2d 34 2c 2e 70 75 72 65 2d 75 2d 31 2d 35 2c 2e 70 75 72 65 2d 75 2d 31 2d 36 2c 2e 70 75 72 65 2d 75 2d 31 2d 38 2c 2e 70 75 72 65 2d 75 2d 31 30 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 31 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 31 31 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 32 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 33 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 34 2d Data Ascii: g:auto}.pure-g [class*=pure-u]{font-family:sans-serif}.pure-u-1,.pure-u-1-1,.pure-u-1-12,.pure-u-1-2,.pure-u-1-24,.pure-u-1-3,.pure-u-1-4,.pure-u-1-5,.pure-u-1-6,.pure-u-1-8,.pure-u-10-24,.pure-u-11-12,.pure-u-11-24,.pure-u-12-24,.pure-u-13-24,.pure-u-14-
2024-05-25 19:12:46 UTC	4744	IN	Data Raw: 72 65 2d 75 2d 35 2d 35 2c 2e 70 75 72 65 2d 75 2d 35 2d 36 2c 2e 70 75 72 65 2d 75 2d 35 2d 38 2c 2e 70 75 72 65 2d 75 2d 36 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 37 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 37 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 37 2d 38 2c 2e 70 75 72 65 2d 75 2d 38 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 39 2d 32 34 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 70 75 72 65 2d 75 2d 31 2d 32 34 7b 77 69 64 74 68 3a 34 2e 31 36 36 37 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 31 32 2c 2e 70 75 Data Ascii: re-u-5-5,.pure-u-5-6,.pure-u-5-8,.pure-u-6-24,.pure-u-7-12,.pure-u-7-24,.pure-u-7-8,.pure-u-8-24,.pure-u-9-24{display:inline-block;letter-spacing:normal;word-spacing:normal;vertical-align:top;text-rendering:auto}.pure-u-1-24{width:4.1667%}.pure-u-1-12,.pu
2024-05-25 19:12:46 UTC	5930	IN	Data Raw: 69 6e 65 3a 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 39 66 65 61 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 66 69 6c 65 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 73 6f 6c 69 64 20 23 31 32 39 46 45 41 3b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 61 75 74 6f 20 23 31 32 39 46 45 41 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 2e 70 75 72 65 2d 63 68 65 63 6b 62 6f 78 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 2e 70 75 72 65 2d 72 61 64 69 6f 7b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 30 3b 64 69 73 70 6c 61 Data Ascii: ine:0;border-color:#129fea}.pure-form input[type=checkbox]:focus,.pure-form input[type=file]:focus,.pure-form input[type=radio]:focus{outline:thin solid #129FEA;outline:1px auto #129FEA}.pure-form .pure-checkbox,.pure-form .pure-radio{margin:.5em 0;displa
2024-05-25 19:12:46 UTC	7116	IN	Data Raw: 75 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 70 75 72 65 2d 6d 65 6e 75 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 70 75 72 65 2d 6d 65 6e 75 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 70 75 72 65 2d 6d 65 6e 75 2d 68 65 61 64 69 6e 67 2c 2e 70 75 72 65 2d 6d 65 6e 75 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 70 75 72 65 2d 6d 65 6e 75 2d 69 74 65 6d 2c 2e 70 75 72 65 2d 6d 65 6e 75 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 70 75 72 65 2d 6d 65 6e 75 2d 73 65 70 61 72 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 70 75 72 65 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 70 75 72 65 2d 6d 65 6e 75 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a Data Ascii: u-horizontal .pure-menu-list{display:inline-block}.pure-menu-horizontal .pure-menu-heading,.pure-menu-horizontal .pure-menu-item,.pure-menu-horizontal .pure-menu-separator{display:inline-block;vertical-align:middle}.pure-menu-item .pure-menu-item{display:
2024-05-25 19:12:46 UTC	8302	IN	Data Raw: 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 32 34 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 33 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 33 2d 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 33 2d 35 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 33 2d 38 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 34 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 34 2d 35 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 35 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 36 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 38 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 36 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 37 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 37 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 37 2d 38 2c 2e 70 75 Data Ascii: 24,.pure-u-lg-24-24,.pure-u-lg-3-24,.pure-u-lg-3-4,.pure-u-lg-3-5,.pure-u-lg-3-8,.pure-u-lg-4-24,.pure-u-lg-4-5,.pure-u-lg-5-12,.pure-u-lg-5-24,.pure-u-lg-5-5,.pure-u-lg-5-6,.pure-u-lg-5-8,.pure-u-lg-6-24,.pure-u-lg-7-12,.pure-u-lg-7-24,.pure-u-lg-7-8,.pu
2024-05-25 19:12:46 UTC	2981	IN	Data Raw: 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 2d 69 6e 2d 64 69 61 67 2d 31 7b 30 Data Ascii: );-webkit-animation-timing-function:ease-in;animation-timing-function:ease-in}100%{-webkit-transform:translateY(0);transform:translateY(0);-webkit-animation-timing-function:ease-out;animation-timing-function:ease-out}}@-webkit-keyframes rotate-in-diag-1{0
2024-05-25 19:12:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-25 19:12:46 UTC	4096	IN	Data Raw: 38 30 30 30 0d 0a 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2d 62 6c 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 59 28 35 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 59 28 35 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 Data Ascii: 8000rm:translateX(0) translateY(0);transform:translateX(0) translateY(0);opacity:1}}@keyframes fade-in-bl{0%{-webkit-transform:translateX(-50px) translateY(50px);transform:translateX(-50px) translateY(50px);opacity:0}100%{-webkit-transform:translateX(0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	151.101.194.217	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:47 UTC	611	OUT	GET /7.113.0/bundle.tracing.replay.min.js HTTP/1.1 Host: browser.sentry-cdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://offer.housebuyernetwork.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:47 UTC	548	IN	HTTP/1.1 200 OK Connection: close Content-Length: 228088 Cache-Control: public, max-age=31536000 Expires: Sat, 03 May 2025 05:33:49 GMT Last-Modified: Thu, 02 May 2024 11:58:27 GMT ETag: W/"527b5b847ec9402ea03a1757d9486932" Content-Type: application/javascript; charset=utf-8 X-GUploader-Response-Body-Transformations: gunzipped Accept-Ranges: bytes Age: 1949938 Date: Sat, 25 May 2024 19:12:47 GMT Vary: Accept-Encoding Access-Control-Allow-Origin: * Server: Fastly Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 26 20 40 73 65 6e 74 72 79 2f 74 72 61 63 69 6e 67 20 26 20 40 73 65 6e 74 72 79 2f 72 65 70 6c 61 79 20 37 2e 31 31 33 2e 30 20 28 32 39 66 35 62 38 64 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 73 77 69 74 63 68 28 65 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 Data Ascii: /! @sentry/browser & @sentry/tracing & @sentry/replay 7.113.0 (29f5b8d) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const e=Object.prototype.toString;function n(t){switch(e.call(t)){case"[object Error]":case"[object Excepti
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 21 21 6f 28 65 29 26 26 28 6e 3f 74 3d 3d 3d 65 3a 74 2e 69 6e 63 6c 75 64 65 73 28 65 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 65 3d 5b 5d 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 2e 73 6f 6d 65 28 28 65 3d 3e 67 28 74 2c 65 2c 6e 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 74 2c 65 2c 6e 3d 32 35 30 2c 72 2c 73 2c 69 2c 6f 29 7b 69 66 28 21 28 69 2e 65 78 63 65 70 74 69 6f 6e 26 26 69 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 26 26 6f 26 26 64 28 6f 2e 6f 72 69 67 69 6e 61 6c 45 78 63 65 70 74 69 6f 6e 2c 45 72 72 6f 72 29 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 61 3d 69 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 2e 6c 65 6e 67 74 68 3e 30 3f 69 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 5b 69 2e 65 78 63 65 Data Ascii: !!o(e)&&(n?t===e:t.includes(e)))}function v(t,e=[],n=!1){return e.some((e=>g(t,e,n)))}function b(t,e,n=250,r,s,i,o){if(!(i.exception&&i.exception.values&&o&&d(o.originalException,Error)))return;const a=i.exception.values.length>0?i.exception.values[i.exce
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 45 4e 54 52 59 5f 5f 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 73 5b 74 5d 7c 7c 28 73 5b 74 5d 3d 65 28 29 29 7d 63 6f 6e 73 74 20 43 3d 78 28 29 3b 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 3d 7b 7d 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 22 3c 75 6e 6b 6e 6f 77 6e 3e 22 3b 74 72 79 7b 6c 65 74 20 6e 3d 74 3b 63 6f 6e 73 74 20 72 3d 35 2c 73 3d 5b 5d 3b 6c 65 74 20 69 3d 30 2c 6f 3d 30 3b 63 6f 6e 73 74 20 61 3d 22 20 3e 20 22 2c 63 3d 61 2e 6c 65 6e 67 74 68 3b 6c 65 74 20 75 3b 63 6f 6e 73 74 20 6c 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 65 2e 6b 65 79 41 74 74 72 73 2c 68 3d 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 26 26 65 2e 6d 61 78 53 74 72 69 6e 67 4c 65 6e 67 74 68 7c 7c 38 30 3b 66 6f 72 28 3b 6e 26 26 69 2b 2b 3c 72 Data Ascii: ENTRY__\|\|{};return s[t]\|\|(s[t]=e())}const C=x();function E(t,e={}){if(!t)return"<unknown>";try{let n=t;const r=5,s=[];let i=0,o=0;const a=" > ",c=a.length;let u;const l=Array.isArray(e)?e:e.keyAttrs,h=!Array.isArray(e)&&e.maxStringLength\|\|80;for(;n&&i++<r
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4d 29 3b 72 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 4d 5b 74 5d 3b 6e 5b 74 5d 3d 65 5b 74 5d 2c 65 5b 74 5d 3d 72 7d 29 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 28 29 7d 66 69 6e 61 6c 6c 79 7b 72 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 65 5b 74 5d 3d 6e 5b 74 5d 7d 29 29 7d 7d 63 6f 6e 73 74 20 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 21 31 3b 63 6f 6e 73 74 20 65 3d 7b 65 6e 61 62 6c 65 3a 28 29 3d 3e 7b 74 3d 21 30 7d 2c 64 69 73 61 62 6c 65 3a 28 29 3d 3e 7b 74 3d 21 31 7d 2c 69 73 45 6e 61 62 6c 65 64 3a 28 29 3d 3e 74 7d 3b 72 65 74 75 72 6e 20 41 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 65 5b 74 5d 3d 28 29 3d 3e 7b 7d 7d 29 29 2c 65 7d 28 29 2c 4c 3d 2f 5e 28 Data Ascii: r=Object.keys(M);r.forEach((t=>{const r=M[t];n[t]=e[t],e[t]=r}));try{return t()}finally{r.forEach((t=>{e[t]=n[t]}))}}const D=function(){let t=!1;const e={enable:()=>{t=!0},disable:()=>{t=!1},isEnabled:()=>t};return A.forEach((t=>{e[t]=()=>{}})),e}(),L=/^(
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 29 7b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 65 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 7b 7d 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 2c 55 28 74 2c 22 5f 5f 73 65 6e 74 72 79 5f 6f 72 69 67 69 6e 61 6c 5f 5f 22 2c 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 73 65 6e 74 72 79 5f 6f 72 69 67 69 6e 61 6c 5f 5f 7d 66 75 6e 63 74 69 6f 6e 20 71 28 74 29 7b 69 66 28 6e 28 74 29 29 72 65 74 75 72 6e 7b 6d 65 73 73 61 67 65 3a 74 2e 6d 65 73 73 61 67 65 2c 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 73 74 61 63 6b 3a 74 2e Data Ascii: le:!0,configurable:!0})}catch(t){}}function z(t,e){try{const n=e.prototype\|\|{};t.prototype=e.prototype=n,U(t,"__sentry_original__",e)}catch(t){}}function H(t){return t.__sentry_original__}function q(t){if(n(t))return{message:t.message,name:t.name,stack:t.
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 63 6f 6e 73 74 20 6e 3d 73 5b 74 5d 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 30 32 34 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 69 3d 47 2e 74 65 73 74 28 6e 29 3f 6e 2e 72 65 70 6c 61 63 65 28 47 2c 22 24 31 22 29 3a 6e 3b 69 66 28 21 69 2e 6d 61 74 63 68 28 2f 5c 53 2a 45 72 72 6f 72 3a 20 2f 29 29 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 65 29 7b 63 6f 6e 73 74 20 65 3d 74 28 69 29 3b 69 66 28 65 29 7b 72 2e 70 75 73 68 28 65 29 3b 62 72 65 61 6b 7d 7d 69 66 28 72 2e 6c 65 6e 67 74 68 3e 3d 35 30 29 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 5b 5d 3b 63 6f 6e 73 74 20 65 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 Data Ascii: length;t++){const n=s[t];if(n.length>1024)continue;const i=G.test(n)?n.replace(G,"$1"):n;if(!i.match(/\S*Error: /)){for(const t of e){const e=t(i);if(e){r.push(e);break}}if(r.length>=50)break}}return function(t){if(!t.length)return[];const e=Array.from(t)
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 76 61 6c 75 65 73 3f 74 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 5b 30 5d 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 74 29 7b 63 6f 6e 73 74 7b 6d 65 73 73 61 67 65 3a 65 2c 65 76 65 6e 74 5f 69 64 3a 6e 7d 3d 74 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 3b 63 6f 6e 73 74 20 72 3d 61 74 28 74 29 3b 72 65 74 75 72 6e 20 72 3f 72 2e 74 79 70 65 26 26 72 2e 76 61 6c 75 65 3f 60 24 7b 72 2e 74 79 70 65 7d 3a 20 24 7b 72 2e 76 61 6c 75 65 7d 60 3a 72 2e 74 79 70 65 7c 7c 72 2e 76 61 6c 75 65 7c 7c 6e 7c 7c 22 3c 75 6e 6b 6e 6f 77 6e 3e 22 3a 6e 7c 7c 22 3c 75 6e 6b 6e 6f 77 6e 3e 22 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 74 2c 65 2c 6e 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 65 78 63 65 70 74 69 6f 6e 3d 74 2e 65 78 63 65 70 74 69 6f 6e Data Ascii: values?t.exception.values[0]:void 0}function ct(t){const{message:e,event_id:n}=t;if(e)return e;const r=at(t);return r?r.type&&r.value?`${r.type}: ${r.value}`:r.type\|\|r.value\|\|n\|\|"<unknown>":n\|\|"<unknown>"}function ut(t,e,n){const r=t.exception=t.exception
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 69 66 28 22 63 6c 69 63 6b 22 3d 3d 3d 65 7c 7c 22 6b 65 79 70 72 65 73 73 22 3d 3d 65 29 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2c 73 3d 6e 2e 5f 5f 73 65 6e 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 7c 7c 7b 7d 2c 69 3d 73 5b 65 5d 3b 69 26 26 28 69 2e 72 65 66 43 6f 75 6e 74 2d 2d 2c 69 2e 72 65 66 43 6f 75 6e 74 3c 3d 30 26 26 28 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 69 2e 68 61 6e 64 6c 65 72 2c 72 29 2c 69 2e 68 61 6e 64 6c 65 72 3d 76 6f 69 64 20 30 2c 64 65 6c 65 74 65 20 73 5b 65 5d 29 2c 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 Data Ascii: oveEventListener",(function(t){return function(e,n,r){if("click"===e\|\|"keypress"==e)try{const n=this,s=n.__sentry_instrumentation_handlers__\|\|{},i=s[e];i&&(i.refCount--,i.refCount<=0&&(t.call(this,e,i.handler,r),i.handler=void 0,delete s[e]),0===Object.ke
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 65 74 75 72 6e 21 30 3b 6c 65 74 20 74 3d 21 31 3b 63 6f 6e 73 74 20 65 3d 6b 74 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 6e 2e 68 69 64 64 65 6e 3d 21 30 2c 65 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 26 26 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 66 65 74 63 68 26 26 28 74 3d 53 74 28 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 66 65 74 63 68 29 29 2c 65 2e 68 65 61 64 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 Data Ascii: eturn!0;let t=!1;const e=kt.document;if(e&&"function"==typeof e.createElement)try{const n=e.createElement("iframe");n.hidden=!0,e.head.appendChild(n),n.contentWindow&&n.contentWindow.fetch&&(t=St(n.contentWindow.fetch)),e.head.removeChild(n)}catch(t){}ret
2024-05-25 19:12:47 UTC	1379	IN	Data Raw: 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 3b 72 65 74 75 72 6e 20 73 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 65 29 2c 21 28 52 74 26 26 21 52 74 2e 5f 5f 53 45 4e 54 52 59 5f 4c 4f 41 44 45 52 5f 5f 29 7c 7c 52 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 5f 2e 6f 6e 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 2e 5f 5f 53 45 4e 54 52 59 5f 49 4e 53 54 52 55 4d 45 4e 54 45 44 5f 5f 3d 21 30 7d 63 6f 6e 73 74 20 24 74 3d 78 28 29 3b 63 6f 6e 73 74 20 44 74 3d 5f 3b 6c 65 74 20 4c 74 3b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 22 68 69 73 74 6f 72 79 22 3b 6e 74 28 65 2c 74 29 2c 72 74 28 65 2c 46 Data Ascii: ndledrejection=function(t){const e=t;return st("unhandledrejection",e),!(Rt&&!Rt.__SENTRY_LOADER__)\|\|Rt.apply(this,arguments)},_.onunhandledrejection.__SENTRY_INSTRUMENTED__=!0}const $t=x();const Dt=_;let Lt;function jt(t){const e="history";nt(e,t),rt(e,F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	108.156.60.79	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:47 UTC	652	OUT	GET /upload/pl/house-buyer-network-logo-75-op-pad-1709820635520.png HTTP/1.1 Host: static.leadshook.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:48 UTC	514	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 45260 Connection: close Last-Modified: Thu, 07 Mar 2024 14:10:40 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 19:12:49 GMT ETag: "e447a763bcf48ee3009a17a4c17e5b36" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 d46464e02ca4f5540906664a2cfbcce2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P2 X-Amz-Cf-Id: qXim-Ddaj2ztp2-bVTjt0ytDn1CZTRwsDJ__qm8kRs9z2oH8XRCUTQ==
2024-05-25 19:12:48 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0c 4e 00 00 03 23 08 03 00 00 00 36 ec 44 f1 00 00 02 43 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRN#6DCPLTEGpL
2024-05-25 19:12:48 UTC	16384	IN	Data Raw: 3b 42 00 5a 40 c6 b6 a2 a3 87 da 72 56 79 1c 8b 4f 94 1f d7 28 2a 22 76 a8 57 b7 c2 b3 7c 11 1c 55 3f 76 8b c3 df 95 7c a6 7e c6 04 6e c0 d6 01 32 eb 6d 97 fc c3 98 05 2b 11 e2 20 b7 1b 1d c1 67 c6 b2 97 ad b2 b9 04 e3 af 24 bf fe 89 1f 7f 21 69 6f 4c 93 02 9c 28 ce 32 a9 47 8d e2 33 af 6b 88 fd 51 4e df 3e 4e e2 9e e8 e0 84 f9 a5 2a 3b 7b ed e9 d2 95 a5 27 ee fb f6 6e e5 2c 71 ac 77 22 a0 0e a2 e5 26 ce d8 7f fe 79 57 c3 89 09 10 ff 10 72 27 6c 14 ff bf fa 79 84 13 4f 5a 29 96 35 36 36 35 62 70 76 9f 7b 18 30 9c 90 dd a4 c1 f2 a6 39 ee 81 64 43 42 7e 97 02 20 5f cd 04 05 38 21 5d a9 2b d0 c9 3c c0 cc 81 71 65 fc 82 02 46 29 3f ae 51 e4 4e 74 dc 1d 45 e1 39 ac 14 f7 42 f6 ae 53 c8 be b0 e9 04 ed 31 51 8b 76 72 e4 4e 8f 67 d6 eb 10 e7 8a e9 43 cf fe 70 ea Data Ascii: ;BZ@rVyO("vW\|U?v\|~n2m+ g$!ioL(2G3kQN>N;{'n,qw"&yWr'lyOZ)5665bpv{09dCB~ _8!]+<qeF)?QNtE9BS1QvrNgCp
2024-05-25 19:12:48 UTC	12492	IN	Data Raw: 8c 29 72 08 eb ff dd c4 29 92 2b 60 f3 22 1a 18 7a ff 4e 2c 42 9b bf a5 9d a5 99 b1 c2 89 36 9b 13 a8 c4 8c f5 ae c1 59 a8 7e aa 23 60 fb d7 b5 99 a0 c5 16 c0 60 a7 11 a4 94 0a 9e 48 6e 1b c8 59 2f c1 81 c6 92 2b 89 5e e1 08 d4 ac fb 3b 01 98 c0 2b c2 b0 1a 99 6d ab 0e bd b1 8e b8 ac b8 80 cf aa a6 37 b3 35 97 1c 9e 6e aa 4c f9 a4 be 61 18 11 bf 52 19 6c 60 06 95 17 2f 9c 40 ad 35 87 94 f6 96 3f 91 ee 25 48 a1 9b c2 89 76 f2 c6 9a a2 be 2b 05 84 8b 29 d8 29 53 ec c4 ce 48 ad 5f 19 9f b3 56 3c 7e f5 f2 38 08 36 ff 98 b4 c1 cd ed dc 18 2d 9a 50 c7 1a 52 95 e6 67 c1 e6 1d f4 4e d6 72 fe a5 c6 08 9e 08 a1 c3 09 87 f4 f0 fc 97 2e 2b e3 58 4a 1b fb d1 7f 48 3d c0 95 3a c1 49 a9 e0 da 1d ac 8a ad 57 e3 84 a3 32 f6 06 17 9e 46 ea ca 99 9d e6 65 60 f3 80 d4 4c 07 Data Ascii: )r)+`"zN,B6Y~#``HnY/+^;+m75nLaRl`/@5?%Hv+))SH_V<~86-PRgNr.+XJH=:IW2Fe`L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	52.35.252.245	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:47 UTC	546	OUT	GET /public/pixel/ndp.js HTTP/1.1 Host: ads.nextdoor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:48 UTC	442	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 19:12:47 GMT Content-Type: application/javascript Content-Length: 7510 Connection: close server: istio-envoy last-modified: Tue, 21 May 2024 16:43:45 GMT vary: Accept-Encoding etag: "664ccf41-1d56" content-security-policy: frame-ancestors 'self' .lightning.force.com nextdoor.com .nextdoor.com nextdoor-test.com *.nextdoor-test.com; accept-ranges: bytes x-envoy-upstream-service-time: 1
2024-05-25 19:12:48 UTC	7510	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 6e 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 74 2e 6f 28 65 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 74 2e 72 3d 66 75 6e Data Ascii: !function(e){var n={};function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	44.205.67.127	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:48 UTC	637	OUT	GET /trustedform.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002 HTTP/1.1 Host: api.trustedform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:48 UTC	305	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sat, 25 May 2024 19:12:48 GMT Content-Type: text/html Content-Length: 134 Connection: close Location: https://cdn.trustedform.com:443/bootstrap.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002
2024-05-25 19:12:48 UTC	134	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	108.156.60.79	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:48 UTC	642	OUT	GET /upload/pl/house-buyer-network-hero-1709820479367.jpg HTTP/1.1 Host: static.leadshook.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:49 UTC	486	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 28306 Connection: close Date: Sat, 25 May 2024 19:12:50 GMT Last-Modified: Thu, 07 Mar 2024 14:08:03 GMT ETag: "29b7296a444481dde0b4c614253b92e5" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2d8216898001f8ce3fde38c8796d2fa6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P2 X-Amz-Cf-Id: 1oc_lFHxsWSJ-Ewd4M-2q75ItxVIVTi--00Xq5rMgKf-rERBDn5pKA==
2024-05-25 19:12:49 UTC	1540	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 04 7f 08 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 08 01 01 00 00 00 00 fc 4f 3c 80 00 00 82 80 00 00 00 28 00 00 00 a0 0a 00 00 50 01 40 00 01 40 00 00 00 00 00 00 00 00 00 00 0a 02 eb 87 1c c0 00 00 00 Data Ascii: JFIF $.' ",#(7),01444'9=82<.3422!!22222222222222222222222222222222222222222222222222"O<(P@@
2024-05-25 19:12:49 UTC	16384	IN	Data Raw: a0 25 80 00 00 01 40 00 00 80 00 02 00 00 06 a6 40 00 00 00 00 00 00 00 00 00 28 00 00 00 00 00 58 28 00 0a 00 02 00 00 00 14 00 00 10 00 00 20 00 00 6a 66 0a 00 00 00 00 00 00 00 05 08 05 00 00 00 00 00 0a 85 00 00 50 00 20 00 00 01 40 00 02 00 00 01 00 00 06 b3 80 52 90 00 14 00 00 00 00 00 00 14 00 00 00 00 00 00 a0 00 28 00 08 00 00 00 50 00 08 00 00 04 a2 00 00 1a c6 0a 00 05 08 a5 00 00 00 00 a0 20 00 28 20 0a 00 00 00 0a 00 00 02 80 04 00 00 00 50 00 10 a8 00 00 01 00 00 1a e5 80 15 41 40 05 05 00 00 00 00 00 00 58 00 01 62 80 00 00 a0 00 a8 a8 28 02 00 00 00 14 00 00 00 40 01 00 00 00 6b 8e 20 0b 54 2d 11 50 52 8a 00 00 00 00 00 00 04 81 a1 40 00 00 0a 00 05 00 00 20 00 00 01 40 00 00 08 00 4a 80 00 08 2d e7 ce 2a 0a b4 28 81 05 aa b4 00 00 00 00 Data Ascii: %@@(X( jfP @R(P ( PA@Xb(@k T-PR@ @J-*(
2024-05-25 19:12:49 UTC	10382	IN	Data Raw: 67 14 a5 29 4a 52 89 94 b9 4b 8c 7d 21 08 58 84 2f 14 5f 4b 94 b8 c6 31 88 42 c7 c5 ca 5f 8e f8 52 97 8b dd 29 4a 51 6e c6 52 8d 8d 97 6e 52 94 a5 29 4a 52 e2 94 a5 29 4a 52 89 89 94 a3 65 1e a1 63 1f 14 a5 29 44 c4 2f 16 c6 3d a5 29 4a 52 94 a5 29 4a 52 94 a5 2e 52 97 2f 6b 1e 2e e0 b1 8f 56 ac 59 4a 52 ea f1 bc ac bc b1 f4 b1 6a 10 85 ec f9 79 4a 52 97 58 c4 21 6b c7 c5 2f 4f ce e5 29 7a a5 cb b4 a5 2f 17 85 97 c9 eb 6c 6c a5 29 46 fe 00 00 14 bc 04 13 d2 94 a5 10 85 8c 63 ea e2 10 99 4b 94 a5 29 4a 3f 19 b4 a5 29 74 a2 65 29 4a 52 f0 85 dc 21 39 84 d6 3e 97 8a 16 3f 09 e8 fa 42 10 b5 08 5f 23 cb 94 a5 e1 08 5e f3 97 c5 2f 34 bc 52 94 bc 5d bc d2 94 a3 65 87 1f 01 4a 52 94 6c 6c bd 02 94 a5 29 4a 52 94 a5 28 82 7c 85 28 98 98 99 46 3e 1f 48 4c a5 2e d2 Data Ascii: g)JRK}!X/_K1B_R)JQnRnR)JR)JRec)D/=)JR)JR.R/k.VYJRjyJRX!k/O)z/ll)FcK)J?)te)JR!9>?B_#^/4R]eJRll)JR(\|(F>HL.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	3.213.181.94	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:48 UTC	784	OUT	POST /s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA HTTP/1.1 Host: offer.housebuyernetwork.com Connection: keep-alive Content-Length: 257 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 x-lead-id: 503374439 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dt_68990.lead=j%3A%7B%22id%22%3A503374439%7D; ndp_session_id=6df83656-8e9e-4007-9c54-4a550320ab69
2024-05-25 19:12:48 UTC	257	OUT	Data Raw: 7b 22 63 75 72 72 65 6e 74 4e 6f 64 65 22 3a 31 32 38 37 35 37 31 2c 22 6c 65 61 64 49 64 22 3a 22 35 30 33 33 37 34 34 33 39 22 2c 22 74 72 61 6e 73 69 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 34 36 39 36 37 7d 2c 22 66 69 65 6c 64 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 65 76 65 6e 74 5f 49 44 5f 73 74 61 72 74 22 2c 22 76 61 6c 75 65 22 3a 22 36 38 39 39 30 5f 35 30 33 33 37 34 34 33 39 5f 73 74 61 72 74 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 76 65 6e 74 5f 49 44 5f 65 6e 74 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 31 32 38 37 35 37 31 5f 35 30 33 33 37 34 34 33 39 5f 65 6e 74 65 72 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 76 65 6e 74 5f 49 44 5f 65 78 69 74 22 2c 22 76 61 6c 75 65 22 3a 22 31 32 38 37 35 37 31 5f 35 30 33 33 37 34 34 33 39 5f 65 78 69 74 22 7d Data Ascii: {"currentNode":1287571,"leadId":"503374439","transition":{"id":46967},"fields":[{"name":"event_ID_start","value":"68990_503374439_start"},{"name":"event_ID_enter","value":"1287571_503374439_enter"},{"name":"event_ID_exit","value":"1287571_503374439_exit"}
2024-05-25 19:12:49 UTC	418	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://offer.housebuyernetwork.com Alt-Svc: h3=":443"; ma=2592000 Content-Type: text/html; charset=utf-8 Date: Sat, 25 May 2024 19:12:49 GMT Etag: W/"3a14-BxitIcvu76oosphcdXsC5UtmAOo" Server: Caddy Vary: X-HTTP-Method-Override, Origin, Accept-Encoding X-Powered-By: Express Connection: close Transfer-Encoding: chunked
2024-05-25 19:12:49 UTC	2372	IN	Data Raw: 33 61 31 34 0d 0a 7b 22 68 74 6d 6c 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 71 75 65 73 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 6e 6f 64 65 2d 63 6f 6e 74 61 69 6e 65 72 20 6e 6f 64 65 2d 71 75 65 73 74 69 6f 6e 2d 37 33 34 38 35 30 20 71 75 65 73 74 69 6f 6e 2d 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 74 65 78 74 20 5c 22 5c 6e 20 20 20 20 20 64 61 74 61 2d 67 74 6d 2d 73 65 74 74 69 6e 67 73 3d 27 7b 5c 22 67 6f 6f 67 6c 65 43 6f 6e 76 65 72 73 69 6f 6e 5c 22 3a 66 61 6c 73 65 2c 5c 22 6d 69 63 72 6f 73 6f 66 74 43 6f 6e 76 65 72 73 69 6f 6e 5c 22 3a 66 61 6c 73 65 7d 27 20 64 61 74 61 2d 69 73 2d 6c 61 73 74 3d 5c 22 66 61 6c 73 65 5c 22 20 64 61 74 61 2d 74 79 70 65 3d 5c 22 71 75 65 73 74 69 6f 6e 5c 22 5c 6e 20 20 20 20 20 64 61 74 61 Data Ascii: 3a14{"html":"<div class=\"question-container node-container node-question-734850 question--content-type-text \"\n data-gtm-settings='{\"googleConversion\":false,\"microsoftConversion\":false}' data-is-last=\"false\" data-type=\"question\"\n data
2024-05-25 19:12:49 UTC	1724	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 6f 6e 63 6c 69 63 6b 3d 5c 22 63 6c 69 63 6b 45 76 65 6e 74 28 29 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 5c 6e 20 20 20 20 20 5c 6e 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 71 75 65 73 74 69 6f 6e 2d 61 6e 73 77 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 70 75 72 65 2d 75 2d 6d 64 2d 31 2d 32 20 70 75 72 65 2d 75 2d 31 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 71 75 65 73 74 69 6f 6e 2d 61 6e 73 77 65 72 2d 6f 75 74 65 72 5c 22 Data Ascii: onclick=\"clickEvent()\"\n />\n \n </div>\n </div>\n </div>\n \n \n \n <div class=\"question-answer-container pure-u-md-1-2 pure-u-1\">\n <div class=\"question-answer-outer\"
2024-05-25 19:12:49 UTC	4744	IN	Data Raw: 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 65 78 74 72 61 2d 66 69 65 6c 64 73 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 5c 6e 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 3c 2f 64 69 76 3e 5c 6e 22 2c 22 6a 73 22 3a 5b 5d 2c 22 63 73 73 22 3a 5b 5d 2c 22 74 72 61 63 6b 69 6e 67 73 22 3a 5b 7b 22 69 64 22 3a 32 32 31 31 33 32 2c 22 6e 6f 64 65 49 64 22 3a 31 32 39 36 38 35 31 2c 22 6e 61 6d 65 22 3a 22 43 61 70 74 75 72 65 20 50 61 67 65 20 55 52 4c 22 2c 22 74 79 70 65 22 3a 22 73 63 72 69 70 74 22 2c 22 65 76 65 6e 74 22 3a 22 65 6e Data Ascii: n \n </div>\n\n <div class=\"extra-fields\">\n </div>\n </form>\n </div>\n</div>\n","js":[],"css":[],"trackings":[{"id":221132,"nodeId":1296851,"name":"Capture Page URL","type":"script","event":"en
2024-05-25 19:12:49 UTC	5930	IN	Data Raw: 3a 22 5f 63 5f 65 6d 62 65 64 50 61 74 68 4e 61 6d 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 2c 22 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 69 64 22 3a 22 5f 67 65 6f 69 70 5f 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 2c 22 6e 61 6d 65 22 3a 22 5f 67 65 6f 69 70 5f 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 2c 22 76 61 6c 75 65 22 3a 22 4e 41 22 7d 2c 7b 22 69 64 22 3a 22 5f 67 65 6f 69 70 5f 63 6f 6e 74 69 6e 65 6e 74 4e 61 6d 65 22 2c 22 6e 61 6d 65 22 3a 22 5f 67 65 6f 69 70 5f 63 6f 6e 74 69 6e 65 6e 74 4e 61 6d 65 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 7d 2c 7b 22 69 64 22 3a 22 5f 67 65 6f 69 70 5f 63 6f 75 6e 74 72 79 43 6f 64 Data Ascii: :"_c_embedPathName","type":"text","value":""},{"id":"_geoip_continentCode","name":"_geoip_continentCode","type":"text","value":"NA"},{"id":"_geoip_continentName","name":"_geoip_continentName","type":"text","value":"North America"},{"id":"_geoip_countryCod
2024-05-25 19:12:49 UTC	104	IN	Data Raw: 22 2c 22 76 61 6c 75 65 22 3a 6e 75 6c 6c 7d 2c 7b 22 69 64 22 3a 22 5f 74 72 61 63 6b 69 6e 67 5f 76 61 72 69 61 6e 74 49 64 22 2c 22 6e 61 6d 65 22 3a 22 5f 74 72 61 63 6b 69 6e 67 5f 76 61 72 69 61 6e 74 49 64 22 2c 22 74 79 70 65 22 3a 22 6e 75 6d 62 65 72 22 2c 22 76 61 6c 75 65 22 3a 6e 75 6c 6c 7d 5d 7d Data Ascii: ","value":null},{"id":"_tracking_variantId","name":"_tracking_variantId","type":"number","value":null}]}
2024-05-25 19:12:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-25 19:12:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49765	3.162.38.8	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:50 UTC	635	OUT	GET /bootstrap.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002 HTTP/1.1 Host: cdn.trustedform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:50 UTC	514	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 16555 Connection: close Date: Sat, 25 May 2024 19:12:51 GMT Last-Modified: Fri, 10 May 2024 19:43:29 GMT x-amz-version-id: 1D.FF77dd61qyGtl5RG.iFxte1pw_rUE ETag: "0f54ed54362c72f248b148a0f774d6c1" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 549d5003213e897b51ff26b051fb8c78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P6 X-Amz-Cf-Id: qYaSGKgcDQoOsGOecTP1lS4YpTQtEQGNUxX00ve1SUbUUij_uG78nA==
2024-05-25 19:12:50 UTC	12786	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 62 69 6e 64 28 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 29 7d 7d 76 61 72 20 6e 3d 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 7d 3b 76 61 72 20 65 3d 74 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 72 65 Data Ascii: !function(){"use strict";function t(t,n){return"function"==typeof t?function(n){return t.bind(n)}:function(t){return n.bind(null,t)}}var n=Array.from\|\|function(t){return Array.prototype.slice.call(t)};var e=t(Array.prototype.includes,r);function r(t,n){re
2024-05-25 19:12:50 UTC	1432	IN	Data Raw: 29 2c 4a 2e 70 69 6e 67 55 72 6c 3d 72 2c 4a 2e 63 65 72 74 69 66 69 63 61 74 65 55 72 6c 3d 65 29 7d 28 74 2c 55 2e 69 64 2c 72 2c 65 29 2c 55 2e 63 65 72 74 49 6e 73 65 72 74 69 6f 6e 54 69 6d 65 72 7c 7c 28 55 2e 63 65 72 74 49 6e 73 65 72 74 69 6f 6e 54 69 6d 65 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4b 28 74 29 7d 29 2c 35 30 30 29 29 7d 63 61 74 63 68 28 74 29 7b 43 28 22 63 65 72 74 49 6e 73 65 72 74 69 6f 6e 2e 63 65 72 74 49 6e 73 65 72 74 69 6f 6e 22 2c 74 29 7d 7d 76 61 72 20 47 3d 5b 22 6c 6f 63 6b 22 2c 22 66 69 65 6c 64 22 2c 22 74 6f 6b 65 6e 5f 66 69 65 6c 64 22 2c 22 70 69 6e 67 5f 66 69 65 6c 64 22 2c 22 66 6f 72 6d 5f 73 65 6c 65 63 74 6f 72 22 2c 22 69 6e 76 65 72 74 5f 66 69 65 6c 64 5f 73 65 6e Data Ascii: ),J.pingUrl=r,J.certificateUrl=e)}(t,U.id,r,e),U.certInsertionTimer\|\|(U.certInsertionTimer=setInterval((function(){K(t)}),500))}catch(t){C("certInsertion.certInsertion",t)}}var G=["lock","field","token_field","ping_field","form_selector","invert_field_sen
2024-05-25 19:12:50 UTC	2337	IN	Data Raw: 20 6c 6f 61 64 3a 20 22 2e 63 6f 6e 63 61 74 28 65 2e 73 74 61 74 75 73 29 29 3b 6e 28 6f 29 7d 7d 2c 65 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 29 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 74 29 2c 6e 28 74 29 7d 7d 29 29 7d 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 5f 47 50 4c 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 44 4e 53 55 6e 6c 6f 63 6b 65 72 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 21 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 6e 3d 21 31 2c 65 3d 21 31 2c 72 3d 5b 5d 3b 69 66 28 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 69 28 29 3b 65 6c 73 65 20 69 Data Ascii: load: ".concat(e.status));n(o)}},e.send(JSON.stringify(c))}catch(t){console.error(t),n(t)}}))}try{if(window._GPL)throw new Error("DNSUnlocker");!function(){var t=!!document.addEventListener,n=!1,e=!1,r=[];if(t&&"complete"===document.readyState)i();else i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	54.200.211.8	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:50 UTC	1065	OUT	GET /pixel?pid=f5c0ed47-4065-463c-9ffd-c892cbcbb4b3&vrs=8.3&ev=PAGE_VIEW&pl=https%3A%2F%2Foffer.housebuyernetwork.com%2Fs%2FbQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA%3Fsource%3D1051%26sub_id_1%3D10000%26sub_id_2%3D57a5e1a860dd499298d62e4351284653%26sub_id_3%3D%26transaction_id%3D563730799%26p%3D45.0&ndclid=&ndclid_src=0&rf=&sem=&tm=Manual&iid=de98b290-485d-47ef-be34-4b92210c900a&pageid=eccf3837-426c-43ef-a67f-d462a0c59bb6&sessionid=6df83656-8e9e-4007-9c54-4a550320ab69&cd=%7B%7D HTTP/1.1 Host: flask.nextdoor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:50 UTC	188	IN	HTTP/1.1 204 No Content Date: Sat, 25 May 2024 19:12:50 GMT Connection: close server: istio-envoy context-id: a768e794-ed4f-47ac-97e0-ea438f0469a3 x-envoy-upstream-service-time: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49764	18.244.18.79	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:50 UTC	405	OUT	GET /upload/pl/house-buyer-network-logo-75-op-pad-1709820635520.png HTTP/1.1 Host: static.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:50 UTC	517	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 45260 Connection: close Last-Modified: Thu, 07 Mar 2024 14:10:40 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 19:12:50 GMT ETag: "e447a763bcf48ee3009a17a4c17e5b36" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b88a4e10ec6aa05046ba32d44beb97f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: Jq5T-hk1aXdrS0amV6XXiaKjD0z-kRx-4If3slT3uxMmp3fwQuSupA== Age: 2
2024-05-25 19:12:50 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0c 4e 00 00 03 23 08 03 00 00 00 36 ec 44 f1 00 00 02 43 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRN#6DCPLTEGpL
2024-05-25 19:12:50 UTC	16384	IN	Data Raw: 3b 42 00 5a 40 c6 b6 a2 a3 87 da 72 56 79 1c 8b 4f 94 1f d7 28 2a 22 76 a8 57 b7 c2 b3 7c 11 1c 55 3f 76 8b c3 df 95 7c a6 7e c6 04 6e c0 d6 01 32 eb 6d 97 fc c3 98 05 2b 11 e2 20 b7 1b 1d c1 67 c6 b2 97 ad b2 b9 04 e3 af 24 bf fe 89 1f 7f 21 69 6f 4c 93 02 9c 28 ce 32 a9 47 8d e2 33 af 6b 88 fd 51 4e df 3e 4e e2 9e e8 e0 84 f9 a5 2a 3b 7b ed e9 d2 95 a5 27 ee fb f6 6e e5 2c 71 ac 77 22 a0 0e a2 e5 26 ce d8 7f fe 79 57 c3 89 09 10 ff 10 72 27 6c 14 ff bf fa 79 84 13 4f 5a 29 96 35 36 36 35 62 70 76 9f 7b 18 30 9c 90 dd a4 c1 f2 a6 39 ee 81 64 43 42 7e 97 02 20 5f cd 04 05 38 21 5d a9 2b d0 c9 3c c0 cc 81 71 65 fc 82 02 46 29 3f ae 51 e4 4e 74 dc 1d 45 e1 39 ac 14 f7 42 f6 ae 53 c8 be b0 e9 04 ed 31 51 8b 76 72 e4 4e 8f 67 d6 eb 10 e7 8a e9 43 cf fe 70 ea Data Ascii: ;BZ@rVyO("vW\|U?v\|~n2m+ g$!ioL(2G3kQN>N;{'n,qw"&yWr'lyOZ)5665bpv{09dCB~ _8!]+<qeF)?QNtE9BS1QvrNgCp
2024-05-25 19:12:50 UTC	12492	IN	Data Raw: 8c 29 72 08 eb ff dd c4 29 92 2b 60 f3 22 1a 18 7a ff 4e 2c 42 9b bf a5 9d a5 99 b1 c2 89 36 9b 13 a8 c4 8c f5 ae c1 59 a8 7e aa 23 60 fb d7 b5 99 a0 c5 16 c0 60 a7 11 a4 94 0a 9e 48 6e 1b c8 59 2f c1 81 c6 92 2b 89 5e e1 08 d4 ac fb 3b 01 98 c0 2b c2 b0 1a 99 6d ab 0e bd b1 8e b8 ac b8 80 cf aa a6 37 b3 35 97 1c 9e 6e aa 4c f9 a4 be 61 18 11 bf 52 19 6c 60 06 95 17 2f 9c 40 ad 35 87 94 f6 96 3f 91 ee 25 48 a1 9b c2 89 76 f2 c6 9a a2 be 2b 05 84 8b 29 d8 29 53 ec c4 ce 48 ad 5f 19 9f b3 56 3c 7e f5 f2 38 08 36 ff 98 b4 c1 cd ed dc 18 2d 9a 50 c7 1a 52 95 e6 67 c1 e6 1d f4 4e d6 72 fe a5 c6 08 9e 08 a1 c3 09 87 f4 f0 fc 97 2e 2b e3 58 4a 1b fb d1 7f 48 3d c0 95 3a c1 49 a9 e0 da 1d ac 8a ad 57 e3 84 a3 32 f6 06 17 9e 46 ea ca 99 9d e6 65 60 f3 80 d4 4c 07 Data Ascii: )r)+`"zN,B6Y~#``HnY/+^;+m75nLaRl`/@5?%Hv+))SH_V<~86-PRgNr.+XJH=:IW2Fe`L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49772	3.213.181.94	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:51 UTC	590	OUT	GET /s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA HTTP/1.1 Host: offer.housebuyernetwork.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dt_68990.lead=j%3A%7B%22id%22%3A503374439%7D; ndp_session_id=6df83656-8e9e-4007-9c54-4a550320ab69; _gcl_au=1.1.1278107080.1716664369; _tt_enable_cookie=1; _ttp=STVc9nJqCTzYYusOERuSAb5eEGY
2024-05-25 19:12:51 UTC	306	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store Content-Type: text/html; charset=utf-8 Date: Sat, 25 May 2024 19:12:51 GMT Etag: W/"32483-UWioqqwn0BwAD2mPLtVXzSNOfZg" Server: Caddy Vary: Accept-Encoding X-Powered-By: Express Connection: close Transfer-Encoding: chunked
2024-05-25 19:12:51 UTC	880	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 53 65 6c 6c 20 4d 79 20 48 6f 75 73 65 20 46 61 73 74 20 46 6f 72 20 43 61 73 68 3c 2f 74 69 74 6c 65 3e 0a 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 71 75 69 7a 2d 6c 69 76 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f Data Ascii: 8000<!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, user-scalable=no"> <title>Sell My House Fast For Cash</title> <link rel="icon" href="https://quiz-live.s3.amazonaws.com/
2024-05-25 19:12:51 UTC	2372	IN	Data Raw: 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 63 6f 64 65 2c 6b 62 64 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e Data Ascii: e]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;lin
2024-05-25 19:12:51 UTC	538	IN	Data Raw: 2e 70 75 72 65 2d 75 2d 31 2d 32 2c 2e 70 75 72 65 2d 75 2d 31 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 2d 33 2c 2e 70 75 72 65 2d 75 2d 31 2d 34 2c 2e 70 75 72 65 2d 75 2d 31 2d 35 2c 2e 70 75 72 65 2d 75 2d 31 2d 36 2c 2e 70 75 72 65 2d 75 2d 31 2d 38 2c 2e 70 75 72 65 2d 75 2d 31 30 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 31 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 31 31 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 32 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 33 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 34 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 35 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 36 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 37 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 38 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 31 39 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 32 2d 32 34 2c 2e 70 75 Data Ascii: .pure-u-1-2,.pure-u-1-24,.pure-u-1-3,.pure-u-1-4,.pure-u-1-5,.pure-u-1-6,.pure-u-1-8,.pure-u-10-24,.pure-u-11-12,.pure-u-11-24,.pure-u-12-24,.pure-u-13-24,.pure-u-14-24,.pure-u-15-24,.pure-u-16-24,.pure-u-17-24,.pure-u-18-24,.pure-u-19-24,.pure-u-2-24,.pu
2024-05-25 19:12:51 UTC	4744	IN	Data Raw: 2d 75 2d 38 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 39 2d 32 34 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 70 75 72 65 2d 75 2d 31 2d 32 34 7b 77 69 64 74 68 3a 34 2e 31 36 36 37 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 32 2d 32 34 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 38 2c 2e 70 75 72 65 2d 75 2d 33 2d 32 34 7b 77 69 64 74 68 3a 31 32 2e 35 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 36 2c 2e 70 75 72 65 2d 75 2d 34 2d 32 34 7b 77 69 64 Data Ascii: -u-8-24,.pure-u-9-24{display:inline-block;letter-spacing:normal;word-spacing:normal;vertical-align:top;text-rendering:auto}.pure-u-1-24{width:4.1667%}.pure-u-1-12,.pure-u-2-24{width:8.3333%}.pure-u-1-8,.pure-u-3-24{width:12.5%}.pure-u-1-6,.pure-u-4-24{wid
2024-05-25 19:12:51 UTC	5930	IN	Data Raw: 6c 65 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 73 6f 6c 69 64 20 23 31 32 39 46 45 41 3b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 61 75 74 6f 20 23 31 32 39 46 45 41 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 2e 70 75 72 65 2d 63 68 65 63 6b 62 6f 78 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 2e 70 75 72 65 2d 72 61 64 69 6f 7b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 6f 6c 6f 72 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 70 75 72 Data Ascii: le]:focus,.pure-form input[type=radio]:focus{outline:thin solid #129FEA;outline:1px auto #129FEA}.pure-form .pure-checkbox,.pure-form .pure-radio{margin:.5em 0;display:block}.pure-form input[type=color][disabled],.pure-form input[type=date][disabled],.pur
2024-05-25 19:12:51 UTC	7116	IN	Data Raw: 67 2c 2e 70 75 72 65 2d 6d 65 6e 75 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 70 75 72 65 2d 6d 65 6e 75 2d 69 74 65 6d 2c 2e 70 75 72 65 2d 6d 65 6e 75 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 70 75 72 65 2d 6d 65 6e 75 2d 73 65 70 61 72 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 70 75 72 65 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 70 75 72 65 2d 6d 65 6e 75 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 70 75 72 65 2d 6d 65 6e 75 2d 63 68 69 6c 64 72 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 30 30 25 3b 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: g,.pure-menu-horizontal .pure-menu-item,.pure-menu-horizontal .pure-menu-separator{display:inline-block;vertical-align:middle}.pure-menu-item .pure-menu-item{display:block}.pure-menu-children{display:none;position:absolute;left:100%;top:0;margin:0;padding
2024-05-25 19:12:51 UTC	8302	IN	Data Raw: 6c 67 2d 34 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 34 2d 35 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 35 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 36 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 35 2d 38 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 36 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 37 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 37 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 37 2d 38 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 38 2d 32 34 2c 2e 70 75 72 65 2d 75 2d 6c 67 2d 39 2d 32 34 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d Data Ascii: lg-4-24,.pure-u-lg-4-5,.pure-u-lg-5-12,.pure-u-lg-5-24,.pure-u-lg-5-5,.pure-u-lg-5-6,.pure-u-lg-5-8,.pure-u-lg-6-24,.pure-u-lg-7-12,.pure-u-lg-7-24,.pure-u-lg-7-8,.pure-u-lg-8-24,.pure-u-lg-9-24{display:inline-block;letter-spacing:normal;word-spacing:norm
2024-05-25 19:12:51 UTC	2892	IN	Data Raw: 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 2d 69 6e 2d 64 69 61 67 2d 31 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 33 64 28 31 2c 31 2c 30 2c 2d 33 36 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 33 64 28 31 2c 31 2c 30 2c 2d 33 36 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 31 Data Ascii: t-transform:translateY(0);transform:translateY(0);-webkit-animation-timing-function:ease-out;animation-timing-function:ease-out}}@-webkit-keyframes rotate-in-diag-1{0%{-webkit-transform:rotate3d(1,1,0,-360deg);transform:rotate3d(1,1,0,-360deg);opacity:0}1
2024-05-25 19:12:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-25 19:12:51 UTC	4096	IN	Data Raw: 38 30 30 30 0d 0a 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2d 62 6c 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 59 28 35 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 59 28 35 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 Data Ascii: 8000rm:translateX(0) translateY(0);transform:translateX(0) translateY(0);opacity:1}}@keyframes fade-in-bl{0%{-webkit-transform:translateX(-50px) translateY(50px);transform:translateX(-50px) translateY(50px);opacity:0}100%{-webkit-transform:translateX(0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49770	18.244.18.79	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:51 UTC	395	OUT	GET /upload/pl/house-buyer-network-hero-1709820479367.jpg HTTP/1.1 Host: static.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:51 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 28306 Connection: close Last-Modified: Thu, 07 Mar 2024 14:08:03 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 19:12:51 GMT ETag: "29b7296a444481dde0b4c614253b92e5" X-Cache: Hit from cloudfront Via: 1.1 5d328d2e734cff11e41c897ec72f465e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: 38-FP_9A-gINSFGUOzbFsE0nCOAIocKe-z-WixJAyUC3jQba_59UEw== Age: 2
2024-05-25 19:12:51 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 04 7f 08 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 08 01 01 00 00 00 00 fc 4f 3c 80 00 00 82 80 00 00 00 28 00 00 00 a0 0a 00 00 50 01 40 00 01 40 00 00 00 00 00 00 00 00 00 00 0a 02 eb 87 1c c0 00 00 00 Data Ascii: JFIF $.' ",#(7),01444'9=82<.3422!!22222222222222222222222222222222222222222222222222"O<(P@@
2024-05-25 19:12:51 UTC	11922	IN	Data Raw: fa e8 43 1f e5 c2 10 84 21 3e 4a 5f f0 29 ef 3f 19 08 63 fc 38 42 13 f8 09 f9 b3 f6 67 bc fc 24 21 8c 84 21 08 42 13 61 08 42 10 84 21 08 42 7e 24 27 e8 4f e9 27 c1 09 f6 21 0f f6 21 08 42 13 f2 21 09 f8 93 67 f1 f3 b9 f5 21 0f f1 a1 08 42 10 84 21 3f 46 7e 3c fe 6a 7d a8 43 1f e0 c2 10 9f b3 09 fe 0f 09 f3 a1 0c 63 fe 66 7e 74 fd 99 fb 88 43 1f f2 f0 9f bf 09 fb af d9 fd 48 43 1f f1 53 ca f7 4b f9 33 eb 9f ce a1 0f 6f f8 8c 27 f5 28 43 f7 a5 f0 a5 2f e5 cf f0 da 5f cb 42 1b 29 4a 52 94 be 94 a5 29 7f a7 a5 f9 69 7f a9 42 1b 29 4a 52 94 a5 ea 94 b9 4a 5c a5 29 78 a5 fd 6a 5f 5a 5f b6 10 84 f9 6f a3 fe 1a 94 bf 12 10 ca 52 94 a5 29 4a 52 97 9b 97 c2 97 f8 2a 52 94 be 17 e8 a5 fe 86 94 bf 4a 18 f2 97 e1 a5 da 52 ed 2e 5e 6f eb d2 94 b9 4a 5d bf 44 fe 66 97 Data Ascii: C!>J_)?c8Bg$!!BaB!B~$'O'!!B!g!B!?F~<j}Ccf~tCHCSK3o'(C/_B)JR)iB)JRJ\)xj_Z_oR)JR*RJR.^oJ]Df

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49775	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:52 UTC	761	OUT	POST /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive Content-Length: 20966 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:52 UTC	16384	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 38 37 33 33 32 32 61 35 33 38 30 61 34 64 30 30 38 61 66 61 36 31 36 37 38 30 35 64 35 37 33 64 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 54 31 39 3a 31 32 3a 34 39 2e 39 30 34 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 33 2e 30 22 7d 2c 22 74 72 61 63 65 22 3a 7b 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 70 75 62 6c 69 63 5f 6b 65 79 22 3a 22 61 31 36 62 30 39 33 64 62 66 31 65 66 63 30 31 32 31 65 30 34 34 63 34 63 38 63 37 61 66 65 62 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 66 66 61 35 66 34 64 65 34 34 63 30 Data Ascii: {"event_id":"873322a5380a4d008afa6167805d573d","sent_at":"2024-05-25T19:12:49.904Z","sdk":{"name":"sentry.javascript.browser","version":"7.113.0"},"trace":{"environment":"production","public_key":"a16b093dbf1efc0121e044c4c8c7afeb","trace_id":"ffa5f4de44c0
2024-05-25 19:12:52 UTC	4582	OUT	Data Raw: 22 2c 22 67 74 6d 2e 75 6e 69 71 75 65 45 76 65 6e 74 49 64 22 3a 31 33 39 7d 5d 2c 22 6c 6f 67 67 65 72 22 3a 22 63 6f 6e 73 6f 6c 65 22 7d 2c 22 6c 65 76 65 6c 22 3a 22 6c 6f 67 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 47 54 4d 20 45 76 65 6e 74 20 64 61 74 61 20 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 7d 2c 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 36 36 2e 39 31 38 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 63 6f 6e 73 6f 6c 65 22 2c 22 64 61 74 61 22 3a 7b 22 61 72 67 75 6d 65 6e 74 73 22 3a 5b 22 47 54 4d 20 45 76 65 6e 74 20 64 61 74 61 22 2c 7b 22 65 76 65 6e 74 22 3a 22 4c 48 5f 45 78 69 74 22 2c 22 6c 65 61 64 73 48 6f 6f 6b 44 61 74 61 22 3a 22 5b 4f 62 6a 65 63 74 5d 22 2c 22 69 6e 63 6f 6d 69 6e 67 54 6f 6b 65 6e 22 3a Data Ascii: ","gtm.uniqueEventId":139}],"logger":"console"},"level":"log","message":"GTM Event data [object Object]"},{"timestamp":1716664366.918,"category":"console","data":{"arguments":["GTM Event data",{"event":"LH_Exit","leadsHookData":"[Object]","incomingToken":
2024-05-25 19:12:52 UTC	387	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 19:12:52 GMT Content-Type: application/json Content-Length: 41 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin
2024-05-25 19:12:52 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 38 37 33 33 32 32 61 35 33 38 30 61 34 64 30 30 38 61 66 61 36 31 36 37 38 30 35 64 35 37 33 64 22 7d Data Ascii: {"id":"873322a5380a4d008afa6167805d573d"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49778	44.205.67.127	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:52 UTC	624	OUT	POST /certs HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 737 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:52 UTC	737	OUT	Data Raw: 7b 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 66 66 65 72 2e 68 6f 75 73 65 62 75 79 65 72 6e 65 74 77 6f 72 6b 2e 63 6f 6d 2f 73 2f 62 51 64 74 65 4c 52 45 68 51 42 6f 76 37 53 36 77 67 46 42 4d 4f 43 66 70 79 77 53 34 67 32 51 77 4d 4c 71 34 44 41 41 3f 73 6f 75 72 63 65 3d 31 30 35 31 26 73 75 62 5f 69 64 5f 31 3d 31 30 30 30 30 26 73 75 62 5f 69 64 5f 32 3d 35 37 61 35 65 31 61 38 36 30 64 64 34 39 39 32 39 38 64 36 32 65 34 33 35 31 32 38 34 36 35 33 26 73 75 62 5f 69 64 5f 33 3d 26 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 3d 35 36 33 37 33 30 37 39 39 26 70 3d 34 35 2e 30 22 2c 22 75 73 65 72 5f 61 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 Data Ascii: {"page_url":"https://offer.housebuyernetwork.com/s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64;
2024-05-25 19:12:53 UTC	321	IN	HTTP/1.1 201 Created Date: Sat, 25 May 2024 19:12:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 475 Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy
2024-05-25 19:12:53 UTC	475	IN	Data Raw: 7b 22 63 65 72 74 5f 69 64 22 3a 22 35 32 33 35 61 37 30 38 62 39 66 35 35 38 61 33 39 39 37 35 64 37 30 32 36 66 61 66 39 66 30 31 62 38 62 33 39 36 63 32 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 54 31 39 3a 31 32 3a 35 32 2e 39 37 34 36 37 39 5a 22 2c 22 65 78 74 65 72 6e 61 6c 5f 69 64 22 3a 6e 75 6c 6c 2c 22 68 6f 6e 65 79 62 61 64 67 65 72 5f 61 70 69 5f 6b 65 79 22 3a 22 30 31 37 38 36 61 31 34 22 2c 22 69 64 22 3a 22 35 32 33 35 61 37 30 38 62 39 66 35 35 38 61 33 39 39 37 35 64 37 30 32 36 66 61 66 39 66 30 31 62 38 62 33 39 36 63 32 22 2c 22 70 69 6e 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 6e 67 2e 74 72 75 73 74 65 64 66 6f 72 6d 2e 63 6f 6d 2f 30 2e 6e 7a 6b 59 71 69 7a 50 72 46 66 36 75 7a 4f Data Ascii: {"cert_id":"5235a708b9f558a39975d7026faf9f01b8b396c2","created_at":"2024-05-25T19:12:52.974679Z","external_id":null,"honeybadger_api_key":"01786a14","id":"5235a708b9f558a39975d7026faf9f01b8b396c2","ping_url":"https://ping.trustedform.com/0.nzkYqizPrFf6uzO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49779	3.5.27.156	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:53 UTC	637	OUT	GET /upload/pl/house-buyers-1707763198483.png HTTP/1.1 Host: quiz-live.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:53 UTC	446	IN	HTTP/1.1 200 OK x-amz-id-2: 0OdCpD5YcwkudQgCNVQqCnd91EA3dCudsN1uFRhrPdDgH5moVRHdCbQNjuQ9CiLiJ+fk0f+lSBa0AvK1tVi5Jpad1suSe0L6lYwtLiJVf54= x-amz-request-id: AZ53P3R9ARQFXW7Y Date: Sat, 25 May 2024 19:12:54 GMT Last-Modified: Mon, 12 Feb 2024 18:40:02 GMT ETag: "d9021ddf8205d1cb00a3e2c086c6eba1" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 1442 Connection: close
2024-05-25 19:12:53 UTC	1442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 37 00 00 00 37 08 03 00 00 00 9f 05 22 74 00 00 01 bf 50 4c 54 45 47 70 4c 86 05 05 2b 0f 0f 93 04 04 22 0d 0d 5a 0a 0a 8c 00 00 1a 11 11 8a 04 04 89 06 06 8c 06 06 80 00 00 8b 08 08 2c 0e 0e 25 0f 0d 4e 0c 0c 18 12 10 73 09 09 7c 06 06 3e 0d 0d 8d 05 05 87 06 06 7e 06 06 8f 06 06 8e 05 05 80 00 00 84 06 06 7d 07 07 70 10 10 49 0c 0b 39 0d 0c 91 05 05 7c 07 07 92 04 04 3c 0f 0a 2d 0b 0b 8a 06 06 8f 05 05 93 04 04 93 05 05 8e 05 05 76 08 08 89 09 09 87 06 06 36 0d 0d 48 0c 0a 71 07 07 6a 09 08 79 08 08 48 0c 0a 5f 0a 09 4d 0b 0b 3d 0d 0d 71 08 08 65 09 09 58 09 09 84 05 05 1e 10 0e 1e 11 0f 23 0f 0f 1a 0d 0d 7d 07 07 94 05 05 91 04 04 7e 07 07 7c 07 07 96 06 06 92 05 05 91 05 05 8f 05 05 56 0a 0a 62 Data Ascii: PNGIHDR77"tPLTEGpL+"Z,%Ns\|>~}pI9\|<-v6HqjyH_M=qeX#}~\|Vb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49781	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:53 UTC	469	OUT	GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:53 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 25 May 2024 19:12:53 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49780	3.162.38.8	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:53 UTC	551	OUT	GET /trustedform-1.9.15.js HTTP/1.1 Host: cdn.trustedform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:54 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 94670 Connection: close Last-Modified: Fri, 10 May 2024 19:43:29 GMT x-amz-version-id: trC3BDaL_J_G4BXqreWlhhQIwhMePOn1 Server: AmazonS3 Date: Sat, 25 May 2024 19:12:55 GMT ETag: "d5f4304dea6121d44398da810b5a4106" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8580c131c1b3f0b365ef9b49326a6fb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P6 X-Amz-Cf-Id: AjZkJyMdsUf5STF6BC1tL2jMtw_nSDnxHG7TAYI7En9LwkjZTGipiQ==
2024-05-25 19:12:54 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 64 28 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 7d 7d 76 61 72 20 74 3d 41 72 72 61 79 2e 66 72 6f 6d 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 29 7d 3b 76 61 72 20 72 3d 6e 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 29 7b 72 65 Data Ascii: !function(){"use strict";function n(n,t){return"function"==typeof n?function(t){return n.bind(t)}:function(n){return t.bind(null,n)}}var t=Array.from\|\|function(n){return Array.prototype.slice.call(n)};var r=n(Array.prototype.includes,e);function e(n,t){re
2024-05-25 19:12:54 UTC	16384	IN	Data Raw: 6e 64 43 68 69 6c 64 28 74 29 7d 3a 28 72 3d 69 26 26 73 65 74 49 6d 6d 65 64 69 61 74 65 7c 7c 6f 26 26 70 72 6f 63 65 73 73 2e 6e 65 78 74 54 69 63 6b 7c 7c 73 65 74 54 69 6d 65 6f 75 74 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 28 6e 29 7d 29 7d 28 29 3b 6e 2e 65 78 70 6f 72 74 73 3f 6e 2e 65 78 70 6f 72 74 73 3d 61 3a 45 2e 61 6d 64 3f 28 76 6f 69 64 20 30 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 3a 65 2e 73 65 74 41 73 61 70 3d 61 7d 28 73 29 7d 29 29 3b 73 6e 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 46 6e 2c 73 6e 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 6e 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 73 6e 2e 61 6c 6c 53 65 74 74 6c 65 64 2e 62 69 6e 64 Data Ascii: ndChild(t)}:(r=i&&setImmediate\|\|o&&process.nextTick\|\|setTimeout,function(n){r(n)})}();n.exports?n.exports=a:E.amd?(void 0)((function(){return a})):e.setAsap=a}(s)}));sn._immediateFn=Fn,sn._unhandledRejectionFn=function(){},sn.allSettled=sn.allSettled.bind
2024-05-25 19:12:54 UTC	12288	IN	Data Raw: 32 52 55 56 52 55 55 30 35 51 54 52 6a 52 47 35 6e 54 57 64 42 4b 33 4e 45 55 58 64 53 53 55 45 79 54 55 52 50 55 55 38 79 51 58 68 46 52 46 64 52 54 56 68 42 65 54 52 45 54 32 64 52 4f 55 45 77 63 30 51 79 51 56 42 76 51 6b 56 76 52 48 4a 52 55 56 4a 43 51 32 39 45 56 55 46 51 55 6b 4a 42 54 55 52 56 55 55 35 6f 51 54 42 42 52 47 46 52 54 6e 4a 42 4d 31 56 45 52 45 46 50 55 30 45 35 56 55 56 4c 64 31 42 69 51 6b 45 34 52 44 6c 6e 55 47 31 42 4e 57 39 45 64 6c 46 4f 63 55 45 32 5a 30 51 30 55 55 39 4b 51 54 59 30 52 47 68 52 54 32 74 43 51 7a 68 46 54 32 64 52 54 30 45 31 4f 45 56 49 55 55 38 30 51 58 6c 7a 52 48 46 52 55 46 70 42 4c 7a 68 45 4b 31 46 4f 53 6b 45 33 59 30 51 34 55 56 42 4d 51 53 74 33 52 55 31 52 54 58 4e 43 51 6b 6c 46 54 47 64 52 4e 30 Data Ascii: 2RUVRUU05QTRjRG5nTWdBK3NEUXdSSUEyTURPUU8yQXhFRFdRTVhBeTRET2dROUEwc0QyQVBvQkVvRHJRUVJCQ29EVUFQUkJBTURVUU5oQTBBRGFRTnJBM1VEREFPU0E5VUVLd1BiQkE4RDlnUG1BNW9EdlFOcUE2Z0Q0UU9KQTY0RGhRT2tCQzhFT2dRT0E1OEVIUU80QXlzRHFRUFpBLzhEK1FOSkE3Y0Q4UVBMQSt3RU1RTXNCQklFTGdRN0
2024-05-25 19:12:54 UTC	16384	IN	Data Raw: 76 61 72 20 78 3d 33 31 26 65 5b 54 5d 3b 52 74 28 74 2c 64 2c 57 5b 78 5d 29 2c 64 2b 3d 53 5b 78 5d 2c 78 3e 33 26 26 28 52 74 28 74 2c 64 2c 65 5b 54 5d 3e 3e 3e 35 26 38 31 39 31 29 2c 64 2b 3d 50 6e 5b 78 5d 29 7d 65 6c 73 65 20 52 74 28 74 2c 64 2c 4e 5b 65 5b 54 5d 5d 29 2c 64 2b 3d 5a 5b 65 5b 54 5d 5d 3b 72 65 74 75 72 6e 20 52 74 28 74 2c 64 2c 4e 5b 32 35 36 5d 29 2c 64 2b 5a 5b 32 35 36 5d 7d 2c 6d 74 3d 6e 65 77 20 44 6e 28 5b 36 35 35 34 30 2c 31 33 31 30 38 30 2c 31 33 31 30 38 38 2c 31 33 31 31 30 34 2c 32 36 32 31 37 36 2c 31 30 34 38 37 30 34 2c 31 30 34 38 38 33 32 2c 32 31 31 34 35 36 30 2c 32 31 31 37 36 33 32 5d 29 2c 62 74 3d 6e 65 77 20 4b 6e 28 30 29 2c 51 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 2c 69 29 7b 72 65 74 Data Ascii: var x=31&e[T];Rt(t,d,W[x]),d+=S[x],x>3&&(Rt(t,d,e[T]>>>5&8191),d+=Pn[x])}else Rt(t,d,N[e[T]]),d+=Z[e[T]];return Rt(t,d,N[256]),d+Z[256]},mt=new Dn([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),bt=new Kn(0),Qt=function(n,t,r,e,i){ret
2024-05-25 19:12:54 UTC	16384	IN	Data Raw: 2e 62 6f 74 74 6f 6d 2c 6c 3a 74 2e 6c 65 66 74 2c 72 3a 74 2e 72 69 67 68 74 7d 7d 76 61 72 20 4b 72 2c 7a 72 3d 7b 73 65 6c 65 63 74 6f 72 3a 27 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 74 79 70 65 3d 72 65 73 65 74 5d 29 2c 5b 6f 6e 63 6c 69 63 6b 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 69 6d 61 67 65 5d 2c 2e 62 75 74 74 6f 6e 2c 2e 62 74 6e 2c 61 5b 68 72 65 66 5e 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 22 5d 27 2c 64 69 73 74 61 6e 63 65 3a 32 30 30 2c 68 61 6e 64 6c 65 72 3a 4d 72 7d 2c 44 72 3d 7b 73 65 6c 65 63 74 6f 72 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 6c 61 62 65 6c 5b 66 6f 72 5d 22 2c 64 69 73 74 61 6e Data Ascii: .bottom,l:t.left,r:t.right}}var Kr,zr={selector:'button:not([type=reset]),[onclick],input[type=submit],input[type=button],input[type=image],.button,.btn,a[href^="javascript:"]',distance:200,handler:Mr},Dr={selector:"input[type=checkbox],label[for]",distan
2024-05-25 19:12:54 UTC	16384	IN	Data Raw: 65 78 74 3d 32 38 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 35 3a 6e 2e 70 72 65 76 3d 32 35 2c 6e 2e 74 30 3d 6e 2e 63 61 74 63 68 28 30 29 2c 46 28 4f 2c 6e 2e 74 30 29 3b 63 61 73 65 20 32 38 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 6e 2e 73 74 6f 70 28 29 7d 7d 29 2c 6e 2c 6e 75 6c 6c 2c 5b 5b 30 2c 32 35 5d 5d 29 7d 29 29 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 69 28 6e 29 7b 72 65 74 75 72 6e 20 5a 69 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 69 28 29 7b 72 65 74 75 72 6e 28 5a 69 3d 62 6e 28 70 6e 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 76 61 72 20 72 2c 65 2c 69 2c 6f 3b 72 65 74 75 72 6e 20 70 Data Ascii: ext=28;break;case 25:n.prev=25,n.t0=n.catch(0),F(O,n.t0);case 28:case"end":return n.stop()}}),n,null,[[0,25]])})))).apply(this,arguments)}function Ni(n){return Zi.apply(this,arguments)}function Zi(){return(Zi=bn(pn.mark((function n(t){var r,e,i,o;return p
2024-05-25 19:12:54 UTC	462	IN	Data Raw: 44 61 74 61 3a 21 30 2c 63 68 61 72 61 63 74 65 72 44 61 74 61 4f 6c 64 56 61 6c 75 65 3a 21 30 7d 3b 6e 2e 6f 62 73 65 72 76 65 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 74 29 2c 71 65 28 6e 2c 74 29 7d 28 29 29 2c 66 2e 64 69 73 61 62 6c 65 64 2e 66 69 6e 67 65 72 70 72 69 6e 74 7c 7c 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 48 2e 55 7c 7c 28 6e 3d 6e 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 29 3b 76 61 72 20 74 3d 6e 2e 6f 75 74 65 72 48 54 4d 4c 7c 7c 28 6e 65 77 20 58 4d 4c 53 65 72 69 61 6c 69 7a 65 72 29 2e 73 65 72 69 61 6c 69 7a 65 54 6f 53 74 72 69 6e 67 28 6e 29 2c 72 3d 5b 5d 3b 28 74 2e 6d 61 74 63 68 28 2f 5b 5c 2b 5d 3f 5b 28 5d 3f 5b 30 2d Data Ascii: Data:!0,characterDataOldValue:!0};n.observe(window.document,t),qe(n,t)}()),f.disabled.fingerprint\|\|(!function(){var n=document.documentElement;H.U\|\|(n=n.cloneNode(!0));var t=n.outerHTML\|\|(new XMLSerializer).serializeToString(n),r=[];(t.match(/[\+]?[(]?[0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49783	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:54 UTC	721	OUT	POST /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive Content-Length: 32049 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:54 UTC	16384	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 54 31 39 3a 31 32 3a 35 32 2e 33 31 35 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 33 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 2c 22 72 65 70 6c 61 79 5f 73 74 61 72 74 5f 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 35 38 2e 31 30 35 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 Data Ascii: {"event_id":"4c283a1896804f84b4e53d6361814c8c","sent_at":"2024-05-25T19:12:52.315Z","sdk":{"name":"sentry.javascript.browser","version":"7.113.0"}}{"type":"replay_event"}{"type":"replay_event","replay_start_timestamp":1716664358.105,"timestamp":17166643
2024-05-25 19:12:54 UTC	15665	OUT	Data Raw: c8 c4 53 68 53 e8 f0 94 54 02 66 ef f4 37 32 4d 9b 40 84 69 d7 41 3a fe bb f3 cf 3a c8 ec d4 be 90 1e 5d bd 19 3d 0d 22 fd 70 b4 25 8b ea 0b 3f 1b 56 44 b4 47 9f 08 9c 34 21 11 fc 89 62 32 42 22 74 92 5a f5 d6 ae 33 59 a1 ec 96 77 10 00 f2 c8 cb 51 1e d8 5d 92 c2 bd 08 53 79 36 23 52 3d cf 34 88 f8 1f 1c 92 f4 4d 00 17 c1 4e 03 ab ef 0f 7a 09 62 a3 da 38 81 0b d9 70 93 e7 34 b0 c9 f9 09 6e 5b 68 85 31 27 98 9f a6 c1 54 d8 87 71 ae f9 81 9f 0a 6b 11 07 a5 2d 14 ff cf 47 c8 d8 c0 e3 d7 b5 f0 ba b6 c9 7a 48 02 44 db d5 ba 52 3d c5 63 53 f1 5d ad e1 28 30 68 9f 2b d4 c6 71 ef 38 3e 85 1e 6e 3b da 88 3c 40 54 83 0b 6d 8c b5 2e 02 cc 0f 11 85 ba 47 f7 a0 f5 31 a5 81 e3 3f 7e 1c 62 74 b9 90 16 6a ea 23 12 31 47 21 51 1d 3b 77 cd 93 95 7d f1 45 07 d4 8a ba 21 19 Data Ascii: ShSTf72M@iA::]="p%?VDG4!b2B"tZ3YwQ]Sy6#R=4MNzb8p4n[h1'Tqk-GzHDR=cS](0h+q8>n;<@Tm.G1?~btj#1G!Q;w}E!
2024-05-25 19:12:54 UTC	387	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 19:12:54 GMT Content-Type: application/json Content-Length: 41 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin
2024-05-25 19:12:54 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 7d Data Ascii: {"id":"4c283a1896804f84b4e53d6361814c8c"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49787	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:55 UTC	469	OUT	GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:55 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 25 May 2024 19:12:55 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49786	52.217.203.121	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:55 UTC	390	OUT	GET /upload/pl/house-buyers-1707763198483.png HTTP/1.1 Host: quiz-live.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:55 UTC	414	IN	HTTP/1.1 200 OK x-amz-id-2: 4S5PGkpXu1E0tY9+cpZyhdhO5zEZ/DSHK1nP3LWxJQt7lpvnrKuvcMnEPGASY+QVJfCdlrkmo/w= x-amz-request-id: 5MQ2KM2FZG2Y14FX Date: Sat, 25 May 2024 19:12:56 GMT Last-Modified: Mon, 12 Feb 2024 18:40:02 GMT ETag: "d9021ddf8205d1cb00a3e2c086c6eba1" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 1442 Connection: close
2024-05-25 19:12:55 UTC	1442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 37 00 00 00 37 08 03 00 00 00 9f 05 22 74 00 00 01 bf 50 4c 54 45 47 70 4c 86 05 05 2b 0f 0f 93 04 04 22 0d 0d 5a 0a 0a 8c 00 00 1a 11 11 8a 04 04 89 06 06 8c 06 06 80 00 00 8b 08 08 2c 0e 0e 25 0f 0d 4e 0c 0c 18 12 10 73 09 09 7c 06 06 3e 0d 0d 8d 05 05 87 06 06 7e 06 06 8f 06 06 8e 05 05 80 00 00 84 06 06 7d 07 07 70 10 10 49 0c 0b 39 0d 0c 91 05 05 7c 07 07 92 04 04 3c 0f 0a 2d 0b 0b 8a 06 06 8f 05 05 93 04 04 93 05 05 8e 05 05 76 08 08 89 09 09 87 06 06 36 0d 0d 48 0c 0a 71 07 07 6a 09 08 79 08 08 48 0c 0a 5f 0a 09 4d 0b 0b 3d 0d 0d 71 08 08 65 09 09 58 09 09 84 05 05 1e 10 0e 1e 11 0f 23 0f 0f 1a 0d 0d 7d 07 07 94 05 05 91 04 04 7e 07 07 7c 07 07 96 06 06 92 05 05 91 05 05 8f 05 05 56 0a 0a 62 Data Ascii: PNGIHDR77"tPLTEGpL+"Z,%Ns\|>~}pI9\|<-v6HqjyH_M=qeX#}~\|Vb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49788	44.205.67.127	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:55 UTC	676	OUT	POST /certs/5235a708b9f558a39975d7026faf9f01b8b396c2/snapshot HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 25531 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:55 UTC	16384	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 65 4a 7a 74 76 64 75 57 57 37 66 52 49 50 77 71 54 48 73 35 53 2f 70 43 55 6a 77 66 75 70 65 53 79 4c 4a 6c 4a 37 2f 50 73 70 4d 34 6c 6e 34 74 48 6a 61 62 74 45 68 75 6d 6d 52 33 71 36 33 56 72 7a 48 58 38 78 68 7a 4e 52 66 7a 4b 50 4d 6b 55 34 58 44 52 68 56 51 32 48 75 54 62 46 6c 4f 76 6c 69 52 77 6f 31 44 6f 56 41 6f 56 41 47 46 4b 75 44 74 32 57 4a 36 64 74 36 73 6e 75 33 50 7a 6f 66 56 73 38 6e 5a 2b 59 38 36 71 61 57 53 6d 6f 33 71 32 66 72 73 2f 47 79 2b 58 79 33 50 37 71 6f 36 71 36 32 7a 61 4f 6c 4f 6d 4e 53 31 53 56 68 2f 50 4e 6f 6c 5a 39 57 7a 45 65 53 65 7a 62 66 4a 44 48 37 50 39 2f 76 4e 37 76 7a 52 6f 33 51 32 53 37 62 31 65 58 71 31 53 38 5a 58 74 38 6c 32 6e 65 78 76 30 75 33 72 2b 69 52 64 50 64 6f 39 47 6e Data Ascii: {"body":"eJztvduWW7fRIPwqTHs5S/pCUjwfupeSyLJlJ7/PspM4ln4tHjabtEhummR3q63VrzHX8xhzNRfzKPMkU4XDRhVQ2HuTbFlOvliRwo1DoVAoVAGFKuDt2WJ6dt6snu3PzofVs8nZ+Y86qaWSmo3q2frs/Gy+Xy3P7qo6q62zaOlOmNS1SVh/PNolZ9WzEeSezbfJDH7P9/vN7vzRo3Q2S7b1eXq1S8ZXt8l2nexv0u3r+iRdPdo9Gn
2024-05-25 19:12:55 UTC	9147	OUT	Data Raw: 43 49 59 4a 42 67 32 76 53 4b 44 53 50 65 7a 4a 79 53 44 76 47 55 47 74 6c 72 42 53 44 34 39 6d 61 73 2f 49 69 48 49 41 66 67 2b 50 5a 7a 37 33 33 4c 6a 31 6f 4c 68 65 58 47 6c 68 41 45 77 33 76 57 62 30 50 5a 6b 59 34 75 59 6f 30 69 50 41 70 7a 37 38 5a 62 44 35 36 4b 6a 6d 75 52 47 30 74 78 76 48 57 74 68 53 31 69 7a 58 4d 51 69 65 72 7a 58 69 63 56 59 38 59 78 71 78 5a 54 59 41 41 6a 4d 30 67 69 4c 59 78 46 4e 52 52 43 4d 44 4d 33 4d 41 6b 32 2f 5a 79 63 41 43 4e 4b 5a 69 6f 44 6b 49 43 31 43 55 48 49 66 63 44 68 79 59 4b 41 35 51 6c 58 79 33 4b 48 63 6e 42 41 6a 51 6c 68 79 42 33 4a 42 63 4c 30 4a 4d 63 52 71 77 6e 76 57 44 48 72 69 61 4f 50 62 35 77 55 51 65 6f 50 31 6a 55 67 62 49 33 70 56 66 62 53 33 54 73 76 34 2b 5a 6c 67 45 72 73 56 4d 4f 35 31 Data Ascii: CIYJBg2vSKDSPezJySDvGUGtlrBSD49mas/IiHIAfg+PZz733Lj1oLheXGlhAEw3vWb0PZkY4uYo0iPApz78ZbD56KjmuRG0txvHWthS1izXMQierzXicVY8YxqxZTYAAjM0giLYxFNRRCMDM3MAk2/ZycACNKZioDkIC1CUHIfcDhyYKA5QlXy3KHcnBAjQlhyB3JBcL0JMcRqwnvWDHriaOPb5wUQeoP1jUgbI3pVfbS3Tsv4+ZlgErsVMO51
2024-05-25 19:12:55 UTC	256	IN	HTTP/1.1 204 No Content Date: Sat, 25 May 2024 19:12:55 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49789	44.205.67.127	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:12:55 UTC	678	OUT	POST /certs/5235a708b9f558a39975d7026faf9f01b8b396c2/fingerprints HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 434 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:12:55 UTC	434	OUT	Data Raw: 7b 22 66 69 6e 67 65 72 70 72 69 6e 74 73 22 3a 5b 22 64 61 63 61 37 65 34 32 36 30 64 63 33 63 34 62 33 30 33 38 32 62 62 63 31 34 63 64 32 63 31 64 30 61 65 63 30 37 64 61 22 2c 22 65 31 33 63 36 33 38 32 39 33 62 65 33 65 64 39 37 62 34 39 65 32 35 33 30 39 33 62 31 31 31 38 64 33 30 66 64 61 62 36 22 2c 22 66 37 33 36 30 37 37 38 36 62 66 62 31 39 35 30 35 31 65 31 31 63 33 32 34 37 33 35 62 66 35 30 31 38 36 31 37 36 38 63 22 2c 22 33 65 32 38 65 61 30 37 65 64 33 34 32 35 31 31 65 61 32 31 65 34 32 32 37 36 64 66 37 30 64 33 31 39 36 66 64 62 34 35 22 2c 22 66 33 66 61 36 63 33 61 37 61 32 35 34 32 65 65 30 34 63 32 66 33 62 39 31 66 38 39 31 61 38 39 32 39 30 61 33 33 33 30 22 2c 22 33 32 65 65 61 32 63 36 37 33 38 32 30 64 30 65 38 37 30 30 35 38 Data Ascii: {"fingerprints":["daca7e4260dc3c4b30382bbc14cd2c1d0aec07da","e13c638293be3ed97b49e253093b1118d30fdab6","f73607786bfb195051e11c324735bf501861768c","3e28ea07ed342511ea21e42276df70d3196fdb45","f3fa6c3a7a2542ee04c2f3b91f891a89290a3330","32eea2c673820d0e870058
2024-05-25 19:12:55 UTC	256	IN	HTTP/1.1 204 No Content Date: Sat, 25 May 2024 19:12:55 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49795	44.205.67.127	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:01 UTC	672	OUT	POST /certs/5235a708b9f558a39975d7026faf9f01b8b396c2/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:01 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 31 4d 6a 45 78 4c 43 4a 74 49 69 77 32 4e 44 49 73 4e 44 4d 33 58 56 30 3d 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 31 2c 22 74 6f 6b 65 6e 22 3a 22 6b 6a 2f 64 41 4b 57 77 73 41 7a 66 67 49 6e 55 75 4a 56 53 70 78 30 41 71 5a 6d 64 4e 53 4f 70 44 30 74 61 41 5a 75 30 6c 4a 53 55 76 54 4a 77 72 2f 75 74 66 5a 41 48 2f 56 64 48 31 6c 34 31 2b 52 74 2f 6e 70 76 68 78 49 78 33 36 77 67 64 79 34 61 72 35 41 67 36 77 44 63 43 6f 41 35 6e 74 64 73 5a 68 32 2f 61 22 7d Data Ascii: {"body":"W1s1MjExLCJtIiw2NDIsNDM3XV0=","chunk_number":0,"encoding":"base64","request_number":1,"token":"kj/dAKWwsAzfgInUuJVSpx0AqZmdNSOpD0taAZu0lJSUvTJwr/utfZAH/VdH1l41+Rt/npvhxIx36wgdy4ar5Ag6wDcCoA5ntdsZh2/a"}
2024-05-25 19:13:01 UTC	256	IN	HTTP/1.1 204 No Content Date: Sat, 25 May 2024 19:13:01 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49796	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:05 UTC	720	OUT	POST /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive Content-Length: 2593 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:05 UTC	2593	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 54 31 39 3a 31 33 3a 30 33 2e 34 35 35 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 33 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 2c 22 72 65 70 6c 61 79 5f 73 74 61 72 74 5f 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 35 38 2e 31 30 35 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 Data Ascii: {"event_id":"4c283a1896804f84b4e53d6361814c8c","sent_at":"2024-05-25T19:13:03.455Z","sdk":{"name":"sentry.javascript.browser","version":"7.113.0"}}{"type":"replay_event"}{"type":"replay_event","replay_start_timestamp":1716664358.105,"timestamp":17166643
2024-05-25 19:13:05 UTC	387	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 19:13:05 GMT Content-Type: application/json Content-Length: 41 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin
2024-05-25 19:13:05 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 7d Data Ascii: {"id":"4c283a1896804f84b4e53d6361814c8c"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49797	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:06 UTC	469	OUT	GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:06 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 25 May 2024 19:13:06 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49798	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:14 UTC	720	OUT	POST /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive Content-Length: 1372 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:14 UTC	1372	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 54 31 39 3a 31 33 3a 31 32 2e 32 33 33 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 33 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 2c 22 72 65 70 6c 61 79 5f 73 74 61 72 74 5f 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 35 38 2e 31 30 35 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 Data Ascii: {"event_id":"4c283a1896804f84b4e53d6361814c8c","sent_at":"2024-05-25T19:13:12.233Z","sdk":{"name":"sentry.javascript.browser","version":"7.113.0"}}{"type":"replay_event"}{"type":"replay_event","replay_start_timestamp":1716664358.105,"timestamp":17166643
2024-05-25 19:13:14 UTC	387	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 19:13:14 GMT Content-Type: application/json Content-Length: 41 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin
2024-05-25 19:13:14 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 7d Data Ascii: {"id":"4c283a1896804f84b4e53d6361814c8c"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49799	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:14 UTC	469	OUT	GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:15 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 25 May 2024 19:13:14 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49800	44.205.67.127	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:26 UTC	672	OUT	POST /certs/5235a708b9f558a39975d7026faf9f01b8b396c2/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:26 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 7a 4d 44 67 77 4e 43 77 69 62 53 49 73 4e 6a 55 30 4c 44 51 30 4f 56 31 64 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 32 2c 22 74 6f 6b 65 6e 22 3a 22 6b 6a 2f 64 41 4b 57 77 73 41 7a 66 67 49 6e 55 75 4a 56 53 70 78 30 41 71 5a 6d 64 4e 53 4f 70 44 30 74 61 41 5a 75 30 6c 4a 53 55 76 54 4a 77 72 2f 75 74 66 5a 41 48 2f 56 64 48 31 6c 34 31 2b 52 74 2f 6e 70 76 68 78 49 78 33 36 77 67 64 79 34 61 72 35 41 67 36 77 44 63 43 6f 41 35 6e 74 64 73 5a 68 32 2f 61 22 7d Data Ascii: {"body":"W1szMDgwNCwibSIsNjU0LDQ0OV1d","chunk_number":0,"encoding":"base64","request_number":2,"token":"kj/dAKWwsAzfgInUuJVSpx0AqZmdNSOpD0taAZu0lJSUvTJwr/utfZAH/VdH1l41+Rt/npvhxIx36wgdy4ar5Ag6wDcCoA5ntdsZh2/a"}
2024-05-25 19:13:26 UTC	256	IN	HTTP/1.1 204 No Content Date: Sat, 25 May 2024 19:13:26 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49801	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:30 UTC	720	OUT	POST /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive Content-Length: 1552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:30 UTC	1552	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 54 31 39 3a 31 33 3a 32 39 2e 30 34 39 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 33 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 2c 22 72 65 70 6c 61 79 5f 73 74 61 72 74 5f 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 35 38 2e 31 30 35 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 34 Data Ascii: {"event_id":"4c283a1896804f84b4e53d6361814c8c","sent_at":"2024-05-25T19:13:29.049Z","sdk":{"name":"sentry.javascript.browser","version":"7.113.0"}}{"type":"replay_event"}{"type":"replay_event","replay_start_timestamp":1716664358.105,"timestamp":17166644
2024-05-25 19:13:31 UTC	387	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 19:13:31 GMT Content-Type: application/json Content-Length: 41 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin
2024-05-25 19:13:31 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 7d Data Ascii: {"id":"4c283a1896804f84b4e53d6361814c8c"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49802	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:31 UTC	469	OUT	GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:31 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 25 May 2024 19:13:31 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49804	44.205.67.127	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:34 UTC	672	OUT	POST /certs/5235a708b9f558a39975d7026faf9f01b8b396c2/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:34 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 7a 4f 44 6b 35 4d 53 77 69 62 53 49 73 4e 6a 55 77 4c 44 51 30 4e 56 31 64 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 33 2c 22 74 6f 6b 65 6e 22 3a 22 6b 6a 2f 64 41 4b 57 77 73 41 7a 66 67 49 6e 55 75 4a 56 53 70 78 30 41 71 5a 6d 64 4e 53 4f 70 44 30 74 61 41 5a 75 30 6c 4a 53 55 76 54 4a 77 72 2f 75 74 66 5a 41 48 2f 56 64 48 31 6c 34 31 2b 52 74 2f 6e 70 76 68 78 49 78 33 36 77 67 64 79 34 61 72 35 41 67 36 77 44 63 43 6f 41 35 6e 74 64 73 5a 68 32 2f 61 22 7d Data Ascii: {"body":"W1szODk5MSwibSIsNjUwLDQ0NV1d","chunk_number":0,"encoding":"base64","request_number":3,"token":"kj/dAKWwsAzfgInUuJVSpx0AqZmdNSOpD0taAZu0lJSUvTJwr/utfZAH/VdH1l41+Rt/npvhxIx36wgdy4ar5Ag6wDcCoA5ntdsZh2/a"}
2024-05-25 19:13:35 UTC	256	IN	HTTP/1.1 204 No Content Date: Sat, 25 May 2024 19:13:34 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49806	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:39 UTC	720	OUT	POST /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive Content-Length: 1554 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:39 UTC	1554	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 54 31 39 3a 31 33 3a 33 37 2e 33 35 33 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 33 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 2c 22 72 65 70 6c 61 79 5f 73 74 61 72 74 5f 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 35 38 2e 31 30 35 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 34 Data Ascii: {"event_id":"4c283a1896804f84b4e53d6361814c8c","sent_at":"2024-05-25T19:13:37.353Z","sdk":{"name":"sentry.javascript.browser","version":"7.113.0"}}{"type":"replay_event"}{"type":"replay_event","replay_start_timestamp":1716664358.105,"timestamp":17166644
2024-05-25 19:13:39 UTC	387	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 19:13:39 GMT Content-Type: application/json Content-Length: 41 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin
2024-05-25 19:13:39 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 7d Data Ascii: {"id":"4c283a1896804f84b4e53d6361814c8c"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49807	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:40 UTC	469	OUT	GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:40 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 25 May 2024 19:13:40 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49809	44.205.67.127	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:44 UTC	672	OUT	POST /certs/5235a708b9f558a39975d7026faf9f01b8b396c2/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:44 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 30 4f 44 49 30 4d 43 77 69 62 53 49 73 4e 6a 55 35 4c 44 51 31 4e 46 31 64 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 34 2c 22 74 6f 6b 65 6e 22 3a 22 6b 6a 2f 64 41 4b 57 77 73 41 7a 66 67 49 6e 55 75 4a 56 53 70 78 30 41 71 5a 6d 64 4e 53 4f 70 44 30 74 61 41 5a 75 30 6c 4a 53 55 76 54 4a 77 72 2f 75 74 66 5a 41 48 2f 56 64 48 31 6c 34 31 2b 52 74 2f 6e 70 76 68 78 49 78 33 36 77 67 64 79 34 61 72 35 41 67 36 77 44 63 43 6f 41 35 6e 74 64 73 5a 68 32 2f 61 22 7d Data Ascii: {"body":"W1s0ODI0MCwibSIsNjU5LDQ1NF1d","chunk_number":0,"encoding":"base64","request_number":4,"token":"kj/dAKWwsAzfgInUuJVSpx0AqZmdNSOpD0taAZu0lJSUvTJwr/utfZAH/VdH1l41+Rt/npvhxIx36wgdy4ar5Ag6wDcCoA5ntdsZh2/a"}
2024-05-25 19:13:44 UTC	256	IN	HTTP/1.1 204 No Content Date: Sat, 25 May 2024 19:13:44 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49810	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:48 UTC	720	OUT	POST /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive Content-Length: 1552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:48 UTC	1552	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 54 31 39 3a 31 33 3a 34 36 2e 35 30 31 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 33 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 2c 22 72 65 70 6c 61 79 5f 73 74 61 72 74 5f 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 35 38 2e 31 30 35 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 34 Data Ascii: {"event_id":"4c283a1896804f84b4e53d6361814c8c","sent_at":"2024-05-25T19:13:46.501Z","sdk":{"name":"sentry.javascript.browser","version":"7.113.0"}}{"type":"replay_event"}{"type":"replay_event","replay_start_timestamp":1716664358.105,"timestamp":17166644
2024-05-25 19:13:48 UTC	387	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 19:13:48 GMT Content-Type: application/json Content-Length: 41 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin
2024-05-25 19:13:48 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 7d Data Ascii: {"id":"4c283a1896804f84b4e53d6361814c8c"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49811	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:49 UTC	469	OUT	GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:49 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 25 May 2024 19:13:49 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49812	18.233.135.95	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:53 UTC	672	OUT	POST /certs/5235a708b9f558a39975d7026faf9f01b8b396c2/events HTTP/1.1 Host: api.trustedform.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:53 UTC	210	OUT	Data Raw: 7b 22 62 6f 64 79 22 3a 22 57 31 73 31 4e 7a 49 30 4e 69 77 69 62 53 49 73 4e 6a 51 34 4c 44 51 30 4d 31 31 64 22 2c 22 63 68 75 6e 6b 5f 6e 75 6d 62 65 72 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 22 3a 22 62 61 73 65 36 34 22 2c 22 72 65 71 75 65 73 74 5f 6e 75 6d 62 65 72 22 3a 35 2c 22 74 6f 6b 65 6e 22 3a 22 6b 6a 2f 64 41 4b 57 77 73 41 7a 66 67 49 6e 55 75 4a 56 53 70 78 30 41 71 5a 6d 64 4e 53 4f 70 44 30 74 61 41 5a 75 30 6c 4a 53 55 76 54 4a 77 72 2f 75 74 66 5a 41 48 2f 56 64 48 31 6c 34 31 2b 52 74 2f 6e 70 76 68 78 49 78 33 36 77 67 64 79 34 61 72 35 41 67 36 77 44 63 43 6f 41 35 6e 74 64 73 5a 68 32 2f 61 22 7d Data Ascii: {"body":"W1s1NzI0NiwibSIsNjQ4LDQ0M11d","chunk_number":0,"encoding":"base64","request_number":5,"token":"kj/dAKWwsAzfgInUuJVSpx0AqZmdNSOpD0taAZu0lJSUvTJwr/utfZAH/VdH1l41+Rt/npvhxIx36wgdy4ar5Ag6wDcCoA5ntdsZh2/a"}
2024-05-25 19:13:53 UTC	256	IN	HTTP/1.1 204 No Content Date: Sat, 25 May 2024 19:13:53 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: cache-control: max-age=0, private, must-revalidate server: Cowboy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49813	3.232.98.97	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:57 UTC	720	OUT	POST /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive Content-Length: 1547 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://offer.housebuyernetwork.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offer.housebuyernetwork.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:57 UTC	1547	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 54 31 39 3a 31 33 3a 35 35 2e 35 39 34 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 33 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 7d 0a 7b 22 74 79 70 65 22 3a 22 72 65 70 6c 61 79 5f 65 76 65 6e 74 22 2c 22 72 65 70 6c 61 79 5f 73 74 61 72 74 5f 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 33 35 38 2e 31 30 35 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 36 36 34 34 Data Ascii: {"event_id":"4c283a1896804f84b4e53d6361814c8c","sent_at":"2024-05-25T19:13:55.594Z","sdk":{"name":"sentry.javascript.browser","version":"7.113.0"}}{"type":"replay_event"}{"type":"replay_event","replay_start_timestamp":1716664358.105,"timestamp":17166644
2024-05-25 19:13:57 UTC	387	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 19:13:57 GMT Content-Type: application/json Content-Length: 41 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin
2024-05-25 19:13:57 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 34 63 32 38 33 61 31 38 39 36 38 30 34 66 38 34 62 34 65 35 33 64 36 33 36 31 38 31 34 63 38 63 22 7d Data Ascii: {"id":"4c283a1896804f84b4e53d6361814c8c"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49814	3.218.204.205	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 19:13:58 UTC	469	OUT	GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1 Host: sentry.leadshook.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 19:13:58 UTC	383	IN	HTTP/1.1 405 Method Not Allowed Date: Sat, 25 May 2024 19:13:58 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST

Target ID:	0
Start time:	15:12:33
Start date:	25/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:12:36
Start date:	25/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2740 --field-trial-handle=2708,i,3800012782922441957,2484468132831615815,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:12:38
Start date:	25/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j HTTP/1.1Host: clickers.smartresourceguide.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j HTTP/1.1Host: clickers.smartresourceguide.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EasyKnock HTTP/1.1Host: smartresourceguide.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1= HTTP/1.1Host: ferradurai.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0 HTTP/1.1Host: ferradurai.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?E=1ioH%2beP48dRuLT6IFWr68S9GOm3iJU0T&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0&ckmguid=9fc97d00-6f34-4575-8508-5b5f753af5f3 HTTP/1.1Host: sonziuq.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /28KL61/5NWWWN/?sub1=10000&sub2=563730799&sub3= HTTP/1.1Host: www.d0qwtrk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0 HTTP/1.1Host: offer.housebuyernetwork.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7.113.0/bundle.tracing.replay.min.js HTTP/1.1Host: browser.sentry-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://offer.housebuyernetwork.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://offer.housebuyernetwork.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upload/pl/house-buyer-network-logo-75-op-pad-1709820635520.png HTTP/1.1Host: static.leadshook.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offer.housebuyernetwork.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/pixel/ndp.js HTTP/1.1Host: ads.nextdoor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offer.housebuyernetwork.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustedform.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002 HTTP/1.1Host: api.trustedform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offer.housebuyernetwork.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upload/pl/house-buyer-network-hero-1709820479367.jpg HTTP/1.1Host: static.leadshook.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offer.housebuyernetwork.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.js?field=xxTrustedFormCertUrl&ping_field=xxTrustedFormPingUrl&l=17166643663970.8543335283028002 HTTP/1.1Host: cdn.trustedform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offer.housebuyernetwork.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=f5c0ed47-4065-463c-9ffd-c892cbcbb4b3&vrs=8.3&ev=PAGE_VIEW&pl=https%3A%2F%2Foffer.housebuyernetwork.com%2Fs%2FbQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA%3Fsource%3D1051%26sub_id_1%3D10000%26sub_id_2%3D57a5e1a860dd499298d62e4351284653%26sub_id_3%3D%26transaction_id%3D563730799%26p%3D45.0&ndclid=&ndclid_src=0&rf=&sem=&tm=Manual&iid=de98b290-485d-47ef-be34-4b92210c900a&pageid=eccf3837-426c-43ef-a67f-d462a0c59bb6&sessionid=6df83656-8e9e-4007-9c54-4a550320ab69&cd=%7B%7D HTTP/1.1Host: flask.nextdoor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offer.housebuyernetwork.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upload/pl/house-buyer-network-logo-75-op-pad-1709820635520.png HTTP/1.1Host: static.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/bQdteLREhQBov7S6wgFBMOCfpywS4g2QwMLq4DAA HTTP/1.1Host: offer.housebuyernetwork.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dt_68990.lead=j%3A%7B%22id%22%3A503374439%7D; ndp_session_id=6df83656-8e9e-4007-9c54-4a550320ab69; _gcl_au=1.1.1278107080.1716664369; _tt_enable_cookie=1; _ttp=STVc9nJqCTzYYusOERuSAb5eEGY
Source: global traffic	HTTP traffic detected: GET /upload/pl/house-buyer-network-hero-1709820479367.jpg HTTP/1.1Host: static.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upload/pl/house-buyers-1707763198483.png HTTP/1.1Host: quiz-live.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offer.housebuyernetwork.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1Host: sentry.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustedform-1.9.15.js HTTP/1.1Host: cdn.trustedform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offer.housebuyernetwork.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1Host: sentry.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upload/pl/house-buyers-1707763198483.png HTTP/1.1Host: quiz-live.s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1Host: sentry.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1Host: sentry.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1Host: sentry.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1Host: sentry.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1Host: sentry.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/6/envelope/?sentry_key=a16b093dbf1efc0121e044c4c8c7afeb&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.113.0 HTTP/1.1Host: sentry.leadshook.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: clickers.smartresourceguide.com
Source: global traffic	DNS traffic detected: DNS query: smartresourceguide.com
Source: global traffic	DNS traffic detected: DNS query: ferradurai.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sonziuq.com
Source: global traffic	DNS traffic detected: DNS query: www.d0qwtrk.com
Source: global traffic	DNS traffic detected: DNS query: offer.housebuyernetwork.com
Source: global traffic	DNS traffic detected: DNS query: ads.nextdoor.com
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: static.leadshook.io
Source: global traffic	DNS traffic detected: DNS query: browser.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: api.trustedform.com
Source: global traffic	DNS traffic detected: DNS query: flask.nextdoor.com
Source: global traffic	DNS traffic detected: DNS query: cdn.trustedform.com
Source: global traffic	DNS traffic detected: DNS query: sentry.leadshook.io
Source: global traffic	DNS traffic detected: DNS query: quiz-live.s3.amazonaws.com

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: smartresourceguide.com to https://ferradurai.com/?e=1ioh%2bep48drult6ifwr68s9gom3iju0t&s1=
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: ferradurai.com to https://sonziuq.com/?e=1ioh%2bep48drult6ifwr68s9gom3iju0t&s1=&ch-redir=1&ckmxid=cp93gahq0001ui7os1s0&ckmguid=9fc97d00-6f34-4575-8508-5b5f753af5f3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: sonziuq.com to https://www.d0qwtrk.com/28kl61/5nwwwn/?sub1=10000&sub2=563730799&sub3=
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.d0qwtrk.com to https://offer.housebuyernetwork.com/s/bqdtelrehqbov7s6wgfbmocfpyws4g2qwmlq4daa?source=1051&sub_id_1=10000&sub_id_2=57a5e1a860dd499298d62e4351284653&sub_id_3=&transaction_id=563730799&p=45.0

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_66.2.dr	String found in binary or memory: Math.round(p);u["gtm.videoCurrentTime"]=Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=Db()},pd:function(){d()}}};var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_66.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=oA(a,c,e);P(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return P(122),!0;if(d&&f){for(var m=Nb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},rA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_66.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Wg:d,Ug:e,Vg:f,Lh:g,Mh:h,xe:m,Ab:b},p=G.YT,q=function(){OC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(RC(w,"iframe_api")\|\|RC(w,"player_api"))return b}for(var y=H.getElementsByTagName("iframe"),x=y.length,B=0;B<x;B++)if(!IC&&PC(y[B],n.xe))return yc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_75.2.dr, chromecache_79.2.dr	String found in binary or memory: return b}EC.K="internal.enableAutoEventOnTimer";var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)
Source: chromecache_66.2.dr	String found in binary or memory: var TB=function(a,b,c,d,e){var f=Mz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Mz("fsl","nv.ids",[]):Mz("fsl","ids",[]);if(!g.length)return!0;var h=Rz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);P(121);if("https://www.facebook.com/tr/"===m)return P(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!yy(h,zy(b, equals www.facebook.com (Facebook)

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&__ott=-ojzkuprwmac3&__stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

Windows Analysis Report
https://clickers.smartresourceguide.com/?xtl=pic8u2clpu9f53e5q270ip7kcmoawnp35mgwstyth3b5eis5bcegkdxso2ei7be9cklkqxzsdocmfldbr3ksafvmnixne7sb5f2g6ce0w7dyr8yl43mcru2yhluqlrad8y95shey01t0gclif4cciumgxd&ott=-ojzkuprwmac3&stmp=se1yqx&eih=m0t49b2ncx4anwk71c9pajb07la39c9j