Edit tour

Windows Analysis Report
https://christiantensen478345.pages.dev/help/contact/267198133611621

Overview

General Information

Sample URL:	https://christiantensen478345.pages.dev/help/contact/267198133611621
Analysis ID:	1447727
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Phishing site detected (based on favicon image match)

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2196,i,13786970979077688158,813139464055982890,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://christiantensen478345.pages.dev/help/contact/267198133611621" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=Pn2jTZI%2Bvo4DwXs1OR8Ixy7mbtHdpY8WenRfxMI%2BWq4CLLa1Yec6%2F%2BX5KHAKZMV03qraZ6U2Lv8AJfHF3TxAq%2Fy9sVltj5vvp1KGyPK9uBgZLiywykORU33UOGCaWYz6030eJAfXdrJsyw%2FqwsW6z%2Bjb HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 528Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_57.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_58.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_58.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-bootstrap
Source: chromecache_58.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Source: chromecache_58.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Source: chromecache_51.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_51.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_52.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61243
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@16/17@10/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2196,i,13786970979077688158,813139464055982890,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://christiantensen478345.pages.dev/help/contact/267198133611621"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2196,i,13786970979077688158,813139464055982890,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://christiantensen478345.pages.dev/help/contact/267198133611621	100%	Avira URL Cloud	phishing
https://christiantensen478345.pages.dev/help/contact/267198133611621	17%	Virustotal		Browse
https://christiantensen478345.pages.dev/help/contact/267198133611621	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
https://cdn.jsdelivr.net/npm/bootstrap	0%	URL Reputation	safe
https://reactjs.org/docs/error-decoder.html?invariant=	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
https://christiantensen478345.pages.dev/assets/facebook_logo_icon_147291-f2dfc6fd.ico	100%	Avira URL Cloud	phishing
https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js	0%	Avira URL Cloud	safe
https://christiantensen478345.pages.dev/assets/index-d076d531.css	100%	Avira URL Cloud	phishing
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Avira URL Cloud	safe
https://christiantensen478345.pages.dev/assets/index-862b6d85.js	100%	Avira URL Cloud	phishing
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/react-bootstrap	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Virustotal		Browse
https://a.nel.cloudflare.com/report/v4?s=Pn2jTZI%2Bvo4DwXs1OR8Ixy7mbtHdpY8WenRfxMI%2BWq4CLLa1Yec6%2F%2BX5KHAKZMV03qraZ6U2Lv8AJfHF3TxAq%2Fy9sVltj5vvp1KGyPK9uBgZLiywykORU33UOGCaWYz6030eJAfXdrJsyw%2FqwsW6z%2Bjb	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js	0%	Virustotal		Browse
https://cdn.jsdelivr.net/npm/react-bootstrap	0%	Virustotal		Browse
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
christiantensen478345.pages.dev	172.66.44.184	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
windowsupdatebg.s.llnwi.net	69.164.46.128	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://christiantensen478345.pages.dev/assets/index-d076d531.css	false	Avira URL Cloud: phishing	unknown
https://christiantensen478345.pages.dev/assets/facebook_logo_icon_147291-f2dfc6fd.ico	false	Avira URL Cloud: phishing	unknown
https://christiantensen478345.pages.dev/help/contact/267198133611621	true		unknown
https://christiantensen478345.pages.dev/assets/index-862b6d85.js	false	Avira URL Cloud: phishing	unknown
https://a.nel.cloudflare.com/report/v4?s=Pn2jTZI%2Bvo4DwXs1OR8Ixy7mbtHdpY8WenRfxMI%2BWq4CLLa1Yec6%2F%2BX5KHAKZMV03qraZ6U2Lv8AJfHF3TxAq%2Fy9sVltj5vvp1KGyPK9uBgZLiywykORU33UOGCaWYz6030eJAfXdrJsyw%2FqwsW6z%2Bjb	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_58.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_51.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_52.2.dr	false	URL Reputation: safe	unknown
https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js	chromecache_58.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_51.2.dr	false	URL Reputation: safe	unknown
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	chromecache_58.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://jedwatson.github.io/classnames	chromecache_57.2.dr	false	URL Reputation: safe	unknown
https://cdn.jsdelivr.net/npm/react-bootstrap	chromecache_58.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.66.44.184	christiantensen478345.pages.dev	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1447727
Start date and time:	2024-05-27 00:22:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://christiantensen478345.pages.dev/help/contact/267198133611621
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@16/17@10/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 74.125.133.84, 142.250.181.238, 34.104.35.123, 104.18.186.31, 104.18.187.31, 20.114.59.183, 69.164.46.128, 192.229.221.95, 13.85.23.206, 20.242.39.171, 172.217.16.195
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10138)
Category:	downloaded
Size (bytes):	10139
Entropy (8bit):	4.71212553801944
Encrypted:	false
SSDEEP:	96:4Dw4yJ24lUXxk4e06i0y2y171sSIK6yR+VfjbqSWN4RdwYM+N0RP9oe+zvc4MV9q:4DC24+oD5vqSWgjMXoe6MUoSd
MD5:	9E8A83940F70CF868AB9FF3AF0F4B4C8
SHA1:	EE8165BDED6AA3AECCE0697AD22D602C11BF3085
SHA-256:	D076D531CC08F01D753F7CDA70ED0E97907546F161CBF470B72EF2FEA31C1F0B
SHA-512:	EA8365E9322E7AF32DD12A301592A845D11A4E96D13F578E66A6BF2C4D543C88A980176FEF149CC3E305B3C74B7ACF3BA7DADE07584434646C52FBF66A1877F2
Malicious:	false
Reputation:	low
URL:	https://christiantensen478345.pages.dev/assets/index-d076d531.css
Preview:	.logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-reduced-motion: no-preference){a:nth-of-type(2) .logo{animation:logo-spin infinite 20s linear}}.card{padding:2em}.read-the-docs{color:#888}.banner{position:relative;padding:14.5vh 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-image:url(/assets/banner-b1482d4c.webp)}.banner-content{position:absolute;top:0;right:0;bottom:0;left:0;z-index:1;display:flex;justify-content:center;align-items:center;flex-direction:column;padding:0 20px;color:#fff!important}.banner-content h5{font-size:14px;font-family:Freight Sans LF Pro Semibold,Helvetica,Arial,sans-serif;text-rendering:optimizelegibility;letter-spacing:4px;font-weight:600;margin-bottom:2.8vh}.banner-content h1{font-family:Freight Sans LF Pro Light,Helvetica,A

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131835
Entropy (8bit):	5.376665898737896
Encrypted:	false
SSDEEP:	1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm
MD5:	7D4842A904E5D5D1B19240075998B111
SHA1:	FEB8DDC9D0566A4FA0971A6E1138658618CDACFE
SHA-256:	35F4F974F4B2BCD44DA73963347F8952E341F83909E4498227D4E26B98F66F0D
SHA-512:	E9AD75D3BAD3940E2062980702A6F02C0B719968A905D24572AF32E52FDA4E07B7069F95024940066D8B3BE2A0E75BCE591F49319AB53AF8E5E6DA65B8DA5379
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,zb){"object"===typeof exports&&"undefined"!==typeof module?zb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],zb):(Q=Q\|\|self,zb(Q.ReactDOM={},Q.React))})(this,function(Q,zb){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function mb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function bj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Category:	downloaded
Size (bytes):	67646
Entropy (8bit):	2.9987858597351176
Encrypted:	false
SSDEEP:	192:o9hmOxc0e2tbU/nDa23cIwAhvr1tyIVV5/dCaVi6W4ln6EdDfqpGG5:2me0aYcIwAhZUIVMKtlP1fRG5
MD5:	B4ED067CD6FD61A575E883605547D535
SHA1:	C159935982F1CDF3F04419C8C863FD3D030BF5FE
SHA-256:	F2DFC6FD9ED43D5C82D0F40627D75A70C26DBFA9B6AA1C450FBD75E5F0AD2CFD
SHA-512:	1C2D2F88FFF5C75127E97FCAEC3C8597738ADAFCA9E98BCE43886E1BEEEBDCECD0D0BCD46A145B94C6ADAEE39540E6C559189CDF0D4C820B35F6B66BB9452761
Malicious:	false
Reputation:	low
URL:	https://christiantensen478345.pages.dev/assets/facebook_logo_icon_147291-f2dfc6fd.ico
Preview:	............ .(.......(............. .........{...{............................................................................................................................................................................x...x...u...{...w...w...w...w...w...x...u...8...n...(....P...r...................................................................w...S.(-.n.......v...x...w...w...w...w...w...w...w...w...y........................................................................................................................................................................................................................................................................................................................ ..x...v...u...x...w...w...s...w...w!..x...w.#.w.T.w...x...t...'..................................................................................'..t...x...w...w.W.w.#.v...w...w...r...w...w...w...z...x...v...t................................................................

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	10751
Entropy (8bit):	5.3269914599293475
Encrypted:	false
SSDEEP:	192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G
MD5:	E91B2616629791B375867C298DC846CC
SHA1:	AA77AE4C49F525BC21DE1D04F08A5D73962C7CCE
SHA-256:	D949F1C3687AEDADCEDAC85261865F29B17CD273997E7F6B2BFC53B2F9D4C4DD
SHA-512:	415B3C2E8E3717D952B81CA469D0DBD284970CBFC16D9E7CF2EAD6542470488A1EC10BFF1308357FCE262B753BF746D9D057E115AD584905262211BEA4844A7A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Category:	dropped
Size (bytes):	67646
Entropy (8bit):	2.9987858597351176
Encrypted:	false
SSDEEP:	192:o9hmOxc0e2tbU/nDa23cIwAhvr1tyIVV5/dCaVi6W4ln6EdDfqpGG5:2me0aYcIwAhZUIVMKtlP1fRG5
MD5:	B4ED067CD6FD61A575E883605547D535
SHA1:	C159935982F1CDF3F04419C8C863FD3D030BF5FE
SHA-256:	F2DFC6FD9ED43D5C82D0F40627D75A70C26DBFA9B6AA1C450FBD75E5F0AD2CFD
SHA-512:	1C2D2F88FFF5C75127E97FCAEC3C8597738ADAFCA9E98BCE43886E1BEEEBDCECD0D0BCD46A145B94C6ADAEE39540E6C559189CDF0D4C820B35F6B66BB9452761
Malicious:	false
Reputation:	low
Preview:	............ .(.......(............. .........{...{............................................................................................................................................................................x...x...u...{...w...w...w...w...w...x...u...8...n...(....P...r...................................................................w...S.(-.n.......v...x...w...w...w...w...w...w...w...w...y........................................................................................................................................................................................................................................................................................................................ ..x...v...u...x...w...w...s...w...w!..x...w.#.w.T.w...x...t...'..................................................................................'..t...x...w...w.W.w.#.v...w...w...r...w...w...w...z...x...v...t................................................................

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	119175
Entropy (8bit):	5.312931607745592
Encrypted:	false
SSDEEP:	3072:rOoUFMlBxwlHb1Vjcpnd8US74ZnhA1IvUbidhmje7rP5yx60sC:ZZhAqvUbghUe7rPkkc
MD5:	365E05DCCD2211EEABA31DEFF514F5FA
SHA1:	A36F8E61ECCC12C333A44713DC4FAE6EC1548FC4
SHA-256:	150523E0558852A799AAE470EE18FDB61F89CF260EE6DA8EFD8687621156AE33
SHA-512:	F63CEC52665F84B468648C1C21AA4367724925E38C92E460851E0BCEAA9A6AAF215BBBCAD63945C7AF4A58368400F86035275E5D1C5AA308A856E79ED1B71534
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js
Preview:	/! For license information please see react-bootstrap.min.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","react-dom"],t):"object"==typeof exports?exports.ReactBootstrap=t(require("react"),require("react-dom")):e.ReactBootstrap=t(e.React,e.ReactDOM)}(self,((e,t)=>(()=>{var n={814:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function o(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var a=typeof n;if("string"===a\|\|"number"===a)e.push(n);else if(Array.isArray(n)){if(n.length){var s=o.apply(null,n);s&&e.push(s)}}else if("object"===a){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var i in n)r.call(n,i)&&n[i]&&e.push(i)}}}return e.join(" ")}e.exports?(o.default=o,e.exports=o):void 0===(n=function(){return o}.apply(t,[]))\|\|(e.expor

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37546)
Category:	downloaded
Size (bytes):	252032
Entropy (8bit):	5.378966019455099
Encrypted:	false
SSDEEP:	3072:vXWiwKpAOylRhIJZB8R6a4iMXZ6pwek9zVnd+qH5FyZmmSjOscO:P2lXIJZBumJ6pw9zVnRzyZmmSjOsF
MD5:	168C3DFA56F9B13B49AD8BA12541CFE2
SHA1:	6D87858999FA0596383865A0B5F19223CFC270C9
SHA-256:	672EBE0EE031943D44BC17FEA64696B877607D2CB2DB9450187D776528144E2F
SHA-512:	484AD576A74FA24CC5DDB4092D98FD61EEE9C82BFEC561E54583FD3B913530602140D75AD60FA6C317BE2EF25A36264E5D986A6D0B50F942904A56A3DA5FB398
Malicious:	false
Reputation:	low
URL:	https://christiantensen478345.pages.dev/assets/index-862b6d85.js
Preview:	var jh=Object.defineProperty;var Oh=(e,t,n)=>t in e?jh(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var ie=(e,t,n)=>(Oh(e,typeof t!="symbol"?t+"":t,n),n);function _h(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const o in r)if(o!=="default"&&!(o in e)){const i=Object.getOwnPropertyDescriptor(r,o);i&&Object.defineProperty(e,o,i.get?i:{enumerable:!0,get:()=>r[o]})}}}return Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const i of o)if(i.type==="childList")for(const l of i.addedNodes)l.tagName==="LINK"&&l.rel==="modulepreload"&&r(l)}).observe(document,{childList:!0,subtree:!0});function n(o){const i={};return o.integrity&&(i.integrity=o.integrity),o.referrerPolicy&&(i.referrerPolicy=

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	5.063128577632339
Encrypted:	false
SSDEEP:	24:0p0JvdYt3DA9iQCCtoJPWgV2/7E95mSCNeMkSCcO0MkY4Nu:0hA9i2mE/7GhCAMJC+MyNu
MD5:	E011BD8E2A1B103E74EAD6C094C6474B
SHA1:	3DD9A2C246A88750BB6881722175F3ED20AFE938
SHA-256:	0906580C7311EDF9CA691F7A1BF5E0B1636CC6E2D098DC2832B312BD2B5C861A
SHA-512:	E56496DAC44292B3F91B54F649CEF90EB2957DD9AB7B8D66631593ADC26C28F5BEADB548AE344CBB65BEA3988965ADE57DF206A9614AD94C757F580CC12F80CF
Malicious:	false
Reputation:	low
URL:	https://christiantensen478345.pages.dev/help/contact/267198133611621
Preview:	<!doctype html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <link rel="icon" type="image/svg+xml" href="/assets/facebook_logo_icon_147291-f2dfc6fd.ico" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link. rel="stylesheet". href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css". integrity="sha384-9ndCyUaIbzAi2FUVXJi0CjmCapSmO7SnpJef0486qhLnuZ2cdeRhO02iuK6FUUVM". crossorigin="anonymous". />. <title>Business Help Center \| Privacy Policy</title>. <script type="module" crossorigin src="/assets/index-862b6d85.js"></script>. <link rel="stylesheet" href="/assets/index-d076d531.css">. </head>. <body>. <div id="root"></div>. . </body>. <script src="https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js" crossorigin></script>. <script. src="https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js". crossorigin></script>. <script. src="https://cdn.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 27, 2024 00:23:02.298154116 CEST	49675	443	192.168.2.4	173.222.162.32
May 27, 2024 00:23:02.923130035 CEST	49678	443	192.168.2.4	104.46.162.224
May 27, 2024 00:23:09.040365934 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.040406942 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.040631056 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.040779114 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.040844917 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.040906906 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.041090965 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.041107893 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.041300058 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.041321039 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.742412090 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.742582083 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.742837906 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.742863894 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.742948055 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.742966890 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.744298935 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.744371891 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.744448900 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.744508982 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.745496988 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.745589018 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.745831013 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.745917082 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.746032000 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.746042967 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.786604881 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.786606073 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:09.786617994 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:09.828404903 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.248081923 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.248219013 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.248292923 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.249144077 CEST	49736	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.249166012 CEST	443	49736	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.268779993 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.268796921 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.268883944 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.269517899 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.269726038 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.269745111 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.314497948 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.420762062 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.430267096 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.430358887 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.430377007 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.430510998 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.430552959 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.430561066 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.442761898 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.442845106 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.442854881 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.448657990 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.448733091 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.448740959 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.454651117 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.454726934 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.454741955 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.459860086 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.459934950 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.459949970 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.502398968 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.511404037 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.517314911 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.517390013 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.517399073 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.522017956 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.522090912 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.522097111 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.529005051 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.529083014 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.529088974 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.533653021 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.533724070 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.533729076 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.534118891 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.534172058 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.534178019 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.538527012 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.538595915 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.538603067 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.546932936 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.546998024 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.547003984 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.549616098 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.549690962 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.549696922 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.554328918 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.554411888 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.554418087 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.558453083 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.558528900 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.558535099 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.559720993 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.559782028 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.559789896 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.563091993 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.563153982 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.563160896 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.566206932 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.566271067 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.566277981 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.604010105 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.604094982 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.604101896 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.606735945 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.606806040 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.606812000 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.606856108 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.612262011 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.612334013 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.612385035 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.617599010 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.617619038 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.617674112 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.617681026 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.617705107 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.620806932 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.620877028 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.620883942 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.620930910 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.624495983 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.624562025 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.626465082 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.626545906 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.629215956 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.629295111 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.632095098 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.632179976 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.634784937 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.634867907 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.635948896 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.636023998 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.693658113 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.693762064 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.695599079 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.695682049 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.696801901 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.696880102 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.699311972 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.699387074 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.701726913 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.701802015 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.702723980 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.702814102 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.704679012 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.704763889 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.705663919 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.705729961 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.706698895 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.706763029 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.708446980 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.708515882 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.710299969 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.710376024 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.711235046 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.711293936 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.712866068 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.712924004 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.713970900 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.714035988 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.715796947 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.715876102 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.716187000 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.716243029 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.717348099 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.717411995 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.718918085 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.718988895 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.761135101 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.761432886 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.761459112 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.762643099 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.762999058 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.763175011 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.763556957 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.798547029 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.798635960 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.799622059 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.799678087 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.800422907 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.800476074 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.801471949 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.801528931 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.802396059 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.802449942 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.803344011 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.803401947 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.804260015 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.804310083 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.805176020 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.805231094 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.806083918 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.806183100 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.806536913 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.806978941 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.807029009 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.807940960 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.807998896 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.809123993 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.809243917 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.812488079 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.812498093 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.812525988 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.812546968 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.812556982 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.812587023 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.812602043 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.815248013 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.815268993 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.815344095 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.815344095 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.815393925 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.819343090 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.819392920 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.838063002 CEST	49735	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.838080883 CEST	443	49735	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.883002996 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:10.883034945 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:10.883136034 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:10.894412041 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:10.894431114 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:10.946465015 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.946624041 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.946674109 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.946688890 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.946810007 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.946866035 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.946872950 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.947217941 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.947267056 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.947273970 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.948081970 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.948128939 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:10.948136091 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.948162079 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:10.948199034 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:11.181202888 CEST	49739	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:11.181233883 CEST	443	49739	172.66.44.184	192.168.2.4
May 27, 2024 00:23:11.420242071 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.432775021 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.432801962 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.434549093 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.434629917 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.436372042 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.436485052 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.436933994 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.436944962 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.444607019 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:11.444634914 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:11.444778919 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:11.445421934 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:11.445435047 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:11.487199068 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.588673115 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.588771105 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.588823080 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.590502977 CEST	49744	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.590524912 CEST	443	49744	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.591721058 CEST	49746	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.591748953 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.591809988 CEST	49746	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.592509031 CEST	49746	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:11.592533112 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:11.904443979 CEST	49675	443	192.168.2.4	173.222.162.32
May 27, 2024 00:23:11.949510098 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:11.949834108 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:11.949851036 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:11.951000929 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:11.951436043 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:11.951603889 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:11.951608896 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:11.998497009 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.004779100 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.120147943 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.124488115 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.124710083 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.124727964 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.137974024 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.138271093 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.138278961 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.141731977 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.142818928 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.142827034 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.148848057 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.148932934 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.148967981 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.148974895 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.149213076 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.154350042 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.159552097 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.159653902 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.159849882 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.159857988 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.160068989 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.170905113 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:12.171303988 CEST	49746	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:12.171313047 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:12.171633005 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:12.174323082 CEST	49746	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:12.174415112 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:12.174624920 CEST	49746	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:12.205677032 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.210900068 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.211163998 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.211172104 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.214907885 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.215400934 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.215410948 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.218317032 CEST	49746	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:12.218323946 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:12.219501019 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.219532967 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.219683886 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.219691992 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.219808102 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.223782063 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.228199005 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.228288889 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.228329897 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.228338003 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.228602886 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.232398987 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.235615969 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.235698938 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.235734940 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.235743046 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.236934900 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:12.236984015 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:12.237019062 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.237178087 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:12.238387108 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.238430023 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:12.238442898 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:12.241203070 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.241394043 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.241400957 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.244121075 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.244204044 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.244239092 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.244246960 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.245477915 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.246818066 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.249627113 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.249779940 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.249785900 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.252499104 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.252635002 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.252641916 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.296968937 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.296982050 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.299074888 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.299253941 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.299263000 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.299395084 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.301805973 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.301832914 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.302036047 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.305705070 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.305795908 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.305830002 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.306411028 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.307106972 CEST	49745	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.307121992 CEST	443	49745	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.361696005 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:12.361774921 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:12.361896992 CEST	49746	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:12.364649057 CEST	49746	443	192.168.2.4	35.190.80.1
May 27, 2024 00:23:12.364656925 CEST	443	49746	35.190.80.1	192.168.2.4
May 27, 2024 00:23:12.369235992 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.369324923 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.369510889 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:12.369528055 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:12.369569063 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.369930029 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:12.370245934 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.370280981 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.404985905 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:12.405014992 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:12.879235029 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.880171061 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.880212069 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.881244898 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.881458044 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.881954908 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.882030010 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.882349968 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.882364988 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:12.941308975 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:12.964803934 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:12.965198994 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:12.965226889 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:12.966204882 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:12.966274977 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:12.968225956 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:12.968298912 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:13.015692949 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:13.015717030 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:13.062571049 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:13.088641882 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.090192080 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.090217113 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.090248108 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.090255022 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.090312958 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.090359926 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.095009089 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.095062971 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.095081091 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.098242998 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.098293066 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.098308086 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.101471901 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.101532936 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.101547956 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.104054928 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.104083061 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.104110956 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.104126930 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.104185104 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.133323908 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:13.133388042 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.140343904 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.140364885 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:13.140805006 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:13.173470020 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.175774097 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.175821066 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.175837994 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.178908110 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.178940058 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.178956985 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.178973913 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.179025888 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.183624029 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.186762094 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.186790943 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.186814070 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.186827898 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.186877966 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.187568903 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.189224958 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.189275980 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.189321995 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.189335108 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.194289923 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.194325924 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.194370031 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.194384098 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.194427967 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.196742058 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.198071003 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.198106050 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.198127031 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.198141098 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.198201895 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.200272083 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.250088930 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.250122070 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.263046980 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.263094902 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.263106108 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.263629913 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.263669968 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.263676882 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.266972065 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.267025948 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.267036915 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.270311117 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.270364046 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.270374060 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.270414114 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.272689104 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.272737980 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.274759054 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.274802923 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.276500940 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.276550055 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.276557922 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.276587963 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.276597977 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.276627064 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.303503036 CEST	49748	443	192.168.2.4	172.66.44.184
May 27, 2024 00:23:13.303523064 CEST	443	49748	172.66.44.184	192.168.2.4
May 27, 2024 00:23:13.399096966 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.442524910 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:13.592000961 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:13.592080116 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:13.592129946 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.592236042 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.592257023 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:13.592271090 CEST	49749	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.592278004 CEST	443	49749	184.28.90.27	192.168.2.4
May 27, 2024 00:23:13.630341053 CEST	49750	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.630358934 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:13.630424023 CEST	49750	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.630743027 CEST	49750	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:13.630753040 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:14.318500042 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:14.318593025 CEST	49750	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:14.320116043 CEST	49750	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:14.320127010 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:14.320420027 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:14.322252989 CEST	49750	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:14.362514973 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:14.627630949 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:14.627696037 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:14.627774954 CEST	49750	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:14.628889084 CEST	49750	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:14.628911972 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:14.628923893 CEST	49750	443	192.168.2.4	184.28.90.27
May 27, 2024 00:23:14.628928900 CEST	443	49750	184.28.90.27	192.168.2.4
May 27, 2024 00:23:22.853076935 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:22.853163004 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:22.853404045 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:23.901192904 CEST	49747	443	192.168.2.4	216.58.206.68
May 27, 2024 00:23:23.901227951 CEST	443	49747	216.58.206.68	192.168.2.4
May 27, 2024 00:23:25.983910084 CEST	61235	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:25.988878012 CEST	53	61235	1.1.1.1	192.168.2.4
May 27, 2024 00:23:25.988938093 CEST	61235	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:25.989171982 CEST	61235	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:26.041940928 CEST	53	61235	1.1.1.1	192.168.2.4
May 27, 2024 00:23:26.464240074 CEST	53	61235	1.1.1.1	192.168.2.4
May 27, 2024 00:23:26.469609976 CEST	61235	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:26.475218058 CEST	53	61235	1.1.1.1	192.168.2.4
May 27, 2024 00:23:26.475253105 CEST	61235	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:32.689054012 CEST	80	49723	217.20.57.34	192.168.2.4
May 27, 2024 00:23:32.689177036 CEST	49723	80	192.168.2.4	217.20.57.34
May 27, 2024 00:23:32.700613976 CEST	49723	80	192.168.2.4	217.20.57.34
May 27, 2024 00:23:32.740365028 CEST	80	49723	217.20.57.34	192.168.2.4
May 27, 2024 00:23:47.535789013 CEST	80	49724	217.20.57.34	192.168.2.4
May 27, 2024 00:23:47.535887003 CEST	49724	80	192.168.2.4	217.20.57.34
May 27, 2024 00:23:47.535964012 CEST	49724	80	192.168.2.4	217.20.57.34
May 27, 2024 00:23:47.833905935 CEST	80	49724	217.20.57.34	192.168.2.4
May 27, 2024 00:24:12.224937916 CEST	61243	443	192.168.2.4	216.58.206.68
May 27, 2024 00:24:12.224968910 CEST	443	61243	216.58.206.68	192.168.2.4
May 27, 2024 00:24:12.225100040 CEST	61243	443	192.168.2.4	216.58.206.68
May 27, 2024 00:24:12.225574970 CEST	61243	443	192.168.2.4	216.58.206.68
May 27, 2024 00:24:12.225600958 CEST	443	61243	216.58.206.68	192.168.2.4
May 27, 2024 00:24:12.900583029 CEST	443	61243	216.58.206.68	192.168.2.4
May 27, 2024 00:24:12.901427984 CEST	61243	443	192.168.2.4	216.58.206.68
May 27, 2024 00:24:12.901446104 CEST	443	61243	216.58.206.68	192.168.2.4
May 27, 2024 00:24:12.901797056 CEST	443	61243	216.58.206.68	192.168.2.4
May 27, 2024 00:24:12.902945042 CEST	61243	443	192.168.2.4	216.58.206.68
May 27, 2024 00:24:12.903028965 CEST	443	61243	216.58.206.68	192.168.2.4
May 27, 2024 00:24:12.954142094 CEST	61243	443	192.168.2.4	216.58.206.68
May 27, 2024 00:24:22.823698997 CEST	443	61243	216.58.206.68	192.168.2.4
May 27, 2024 00:24:22.823786020 CEST	443	61243	216.58.206.68	192.168.2.4
May 27, 2024 00:24:22.823995113 CEST	61243	443	192.168.2.4	216.58.206.68
May 27, 2024 00:24:23.877429008 CEST	61243	443	192.168.2.4	216.58.206.68
May 27, 2024 00:24:23.877463102 CEST	443	61243	216.58.206.68	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 27, 2024 00:23:07.746820927 CEST	53	63638	1.1.1.1	192.168.2.4
May 27, 2024 00:23:07.760067940 CEST	53	64167	1.1.1.1	192.168.2.4
May 27, 2024 00:23:08.929749012 CEST	53	62952	1.1.1.1	192.168.2.4
May 27, 2024 00:23:08.950882912 CEST	54822	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:08.951172113 CEST	53510	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:09.039499044 CEST	53	53510	1.1.1.1	192.168.2.4
May 27, 2024 00:23:09.039516926 CEST	53	54822	1.1.1.1	192.168.2.4
May 27, 2024 00:23:10.267443895 CEST	57356	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:10.267621040 CEST	55405	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:10.281985998 CEST	53	55405	1.1.1.1	192.168.2.4
May 27, 2024 00:23:10.853509903 CEST	65380	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:10.854041100 CEST	52386	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:10.866894007 CEST	53	65380	1.1.1.1	192.168.2.4
May 27, 2024 00:23:10.871726036 CEST	53	52386	1.1.1.1	192.168.2.4
May 27, 2024 00:23:12.173660994 CEST	53197	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:12.173660994 CEST	61387	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:12.235526085 CEST	53	61387	1.1.1.1	192.168.2.4
May 27, 2024 00:23:12.235538960 CEST	53	53197	1.1.1.1	192.168.2.4
May 27, 2024 00:23:12.324882030 CEST	58717	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:12.324882030 CEST	58369	53	192.168.2.4	1.1.1.1
May 27, 2024 00:23:12.366801977 CEST	53	58369	1.1.1.1	192.168.2.4
May 27, 2024 00:23:12.366812944 CEST	53	58717	1.1.1.1	192.168.2.4
May 27, 2024 00:23:25.983232021 CEST	53	56827	1.1.1.1	192.168.2.4
May 27, 2024 00:23:27.439115047 CEST	53	63180	1.1.1.1	192.168.2.4
May 27, 2024 00:23:33.460879087 CEST	138	138	192.168.2.4	192.168.2.255
May 27, 2024 00:23:46.631320000 CEST	53	51129	1.1.1.1	192.168.2.4
May 27, 2024 00:24:07.443664074 CEST	53	64931	1.1.1.1	192.168.2.4
May 27, 2024 00:24:09.504127026 CEST	53	58834	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 27, 2024 00:24:07.443872929 CEST	192.168.2.4	1.1.1.1	c224	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 27, 2024 00:23:08.950882912 CEST	192.168.2.4	1.1.1.1	0xb3cf	Standard query (0)	christiantensen478345.pages.dev	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:08.951172113 CEST	192.168.2.4	1.1.1.1	0xe6cf	Standard query (0)	christiantensen478345.pages.dev	65	IN (0x0001)	false
May 27, 2024 00:23:10.267443895 CEST	192.168.2.4	1.1.1.1	0x60b	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:10.267621040 CEST	192.168.2.4	1.1.1.1	0xb5bd	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 27, 2024 00:23:10.853509903 CEST	192.168.2.4	1.1.1.1	0x5ef0	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:10.854041100 CEST	192.168.2.4	1.1.1.1	0x5f87	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 27, 2024 00:23:12.173660994 CEST	192.168.2.4	1.1.1.1	0x4ced	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:12.173660994 CEST	192.168.2.4	1.1.1.1	0x23fd	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 27, 2024 00:23:12.324882030 CEST	192.168.2.4	1.1.1.1	0x73aa	Standard query (0)	christiantensen478345.pages.dev	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:12.324882030 CEST	192.168.2.4	1.1.1.1	0xc6a3	Standard query (0)	christiantensen478345.pages.dev	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 27, 2024 00:23:09.039499044 CEST	1.1.1.1	192.168.2.4	0xe6cf	No error (0)	christiantensen478345.pages.dev			65	IN (0x0001)	false
May 27, 2024 00:23:09.039516926 CEST	1.1.1.1	192.168.2.4	0xb3cf	No error (0)	christiantensen478345.pages.dev		172.66.44.184	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:09.039516926 CEST	1.1.1.1	192.168.2.4	0xb3cf	No error (0)	christiantensen478345.pages.dev		172.66.47.72	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:10.277152061 CEST	1.1.1.1	192.168.2.4	0x60b	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 00:23:10.281985998 CEST	1.1.1.1	192.168.2.4	0xb5bd	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 00:23:10.866894007 CEST	1.1.1.1	192.168.2.4	0x5ef0	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:12.235526085 CEST	1.1.1.1	192.168.2.4	0x23fd	No error (0)	www.google.com			65	IN (0x0001)	false
May 27, 2024 00:23:12.235538960 CEST	1.1.1.1	192.168.2.4	0x4ced	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:12.366801977 CEST	1.1.1.1	192.168.2.4	0xc6a3	No error (0)	christiantensen478345.pages.dev			65	IN (0x0001)	false
May 27, 2024 00:23:12.366812944 CEST	1.1.1.1	192.168.2.4	0x73aa	No error (0)	christiantensen478345.pages.dev		172.66.44.184	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:12.366812944 CEST	1.1.1.1	192.168.2.4	0x73aa	No error (0)	christiantensen478345.pages.dev		172.66.47.72	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:26.464240074 CEST	1.1.1.1	192.168.2.4	0x1	No error (0)	windowsupdatebg.s.llnwi.net		69.164.46.128	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:27.021807909 CEST	1.1.1.1	192.168.2.4	0xfd3c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 00:23:27.021807909 CEST	1.1.1.1	192.168.2.4	0xfd3c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 27, 2024 00:23:39.946048975 CEST	1.1.1.1	192.168.2.4	0x9108	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 00:23:39.946048975 CEST	1.1.1.1	192.168.2.4	0x9108	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 27, 2024 00:24:01.729412079 CEST	1.1.1.1	192.168.2.4	0x615e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 00:24:01.729412079 CEST	1.1.1.1	192.168.2.4	0x615e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 27, 2024 00:24:20.493079901 CEST	1.1.1.1	192.168.2.4	0xb10b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 00:24:20.493079901 CEST	1.1.1.1	192.168.2.4	0xb10b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

christiantensen478345.pages.dev

https:

a.nel.cloudflare.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	172.66.44.184	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-26 22:23:09 UTC	702	OUT	GET /help/contact/267198133611621 HTTP/1.1 Host: christiantensen478345.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-26 22:23:10 UTC	764	IN	HTTP/1.1 200 OK Date: Sun, 26 May 2024 22:23:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1154 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "422ddab7ce7f9d8e23d6119d8ba109ed" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0mqc1HmtoaslbLdZTrDTrlsp63f8TiM7TpEhCBrvQzXDDRMs6mveEnyQiHZ1Y0lFOJJ6QJBMcNKBLwlIPlBvvy%2FqNC3MFcyl1RLrgsQeju9NKmFx6QWvrlIhOoj4iyNXou1eqEX44V022BPxifhobj3P"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a12b086bfcc35b-EWR alt-svc: h3=":443"; ma=86400
2024-05-26 22:23:10 UTC	605	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 61 63 65 62 6f 6f 6b 5f 6c 6f 67 6f 5f 69 63 6f 6e 5f 31 34 37 32 39 31 2d 66 32 64 66 63 36 66 64 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e Data Ascii: <!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/assets/facebook_logo_icon_147291-f2dfc6fd.ico" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <lin
2024-05-26 22:23:10 UTC	549	IN	Data Raw: 2d 38 36 32 62 36 64 38 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 64 30 37 36 64 35 33 31 2e 63 73 73 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 72 65 61 63 74 2f 75 6d 64 2f 72 65 61 63 74 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 73 63 72 69 70 Data Ascii: -862b6d85.js"></script> <link rel="stylesheet" href="/assets/index-d076d531.css"> </head> <body> <div id="root"></div> </body> <script src="https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js" crossorigin></script> <scrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	172.66.44.184	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-26 22:23:10 UTC	645	OUT	GET /assets/index-862b6d85.js HTTP/1.1 Host: christiantensen478345.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://christiantensen478345.pages.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://christiantensen478345.pages.dev/help/contact/267198133611621 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-26 22:23:10 UTC	776	IN	HTTP/1.1 200 OK Date: Sun, 26 May 2024 22:23:10 GMT Content-Type: application/javascript Content-Length: 280264 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "e534524ab7936ae986d7875ce7c13309" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pn2jTZI%2Bvo4DwXs1OR8Ixy7mbtHdpY8WenRfxMI%2BWq4CLLa1Yec6%2F%2BX5KHAKZMV03qraZ6U2Lv8AJfHF3TxAq%2Fy9sVltj5vvp1KGyPK9uBgZLiywykORU33UOGCaWYz6030eJAfXdrJsyw%2FqwsW6z%2Bjb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a12b0988e91899-EWR alt-svc: h3=":443"; ma=86400
2024-05-26 22:23:10 UTC	593	IN	Data Raw: 76 61 72 20 6a 68 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 4f 68 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 6a 68 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 69 65 3d 28 65 2c 74 2c 6e 29 3d 3e 28 4f 68 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 68 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 6e 5d 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 73 74 72 69 6e 67 22 26 26 21 Data Ascii: var jh=Object.defineProperty;var Oh=(e,t,n)=>t in e?jh(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var ie=(e,t,n)=>(Oh(e,typeof t!="symbol"?t+"":t,n),n);function _h(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 74 2e 73 75 70 70 6f 72 74 73 28 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 29 29 72 65 74 75 72 6e 3b 66 6f 72 28 63 6f 6e 73 74 20 6f 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 6c 69 6e 6b 5b 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 5d 27 29 29 72 28 6f 29 3b 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 6f 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 6f 29 69 66 28 69 2e 74 79 70 65 3d 3d 3d 22 63 68 69 6c 64 4c 69 73 74 22 29 66 6f 72 28 63 6f 6e 73 74 20 6c 20 6f 66 20 69 2e 61 64 64 65 64 4e 6f 64 65 73 29 6c 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 4c 49 4e 4b 22 26 26 6c 2e 72 65 6c 3d 3d 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 26 26 72 28 6c 29 7d 29 Data Ascii: t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const i of o)if(i.type==="childList")for(const l of i.addedNodes)l.tagName==="LINK"&&l.rel==="modulepreload"&&r(l)})
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 55 68 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 65 21 3d 22 6f 62 6a 65 63 74 22 3f 6e 75 6c 6c 3a 28 65 3d 66 75 26 26 65 5b 66 75 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3a 6e 75 6c 6c 29 7d 76 61 72 20 6f 64 3d 7b 69 73 4d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 52 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 3a 66 75 6e Data Ascii: =Symbol.iterator;function Uh(e){return e===null\|\|typeof e!="object"?null:(e=fu&&e[fu]\|\|e["@@iterator"],typeof e=="function"?e:null)}var od={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:fun
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 75 2b 32 5d 3b 6f 2e 63 68 69 6c 64 72 65 6e 3d 61 7d 69 66 28 65 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 72 20 69 6e 20 73 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 2c 73 29 6f 5b 72 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6f 5b 72 5d 3d 73 5b 72 5d 29 3b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 66 6f 2c 74 79 70 65 3a 65 2c 6b 65 79 3a 69 2c 72 65 66 3a 6c 2c 70 72 6f 70 73 3a 6f 2c 5f 6f 77 6e 65 72 3a 74 61 2e 63 75 72 72 65 6e 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 68 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 66 6f 2c 74 79 70 65 3a 65 2e 74 79 70 65 2c 6b 65 79 3a 74 2c 72 65 66 3a 65 2e 72 65 66 2c 70 72 6f 70 73 3a 65 2e 70 72 6f 70 73 2c 5f 6f 77 6e 65 72 3a 65 2e 5f 6f 77 6e 65 72 7d 7d 66 Data Ascii: u+2];o.children=a}if(e&&e.defaultProps)for(r in s=e.defaultProps,s)o[r]===void 0&&(o[r]=s[r]);return{$$typeof:fo,type:e,key:i,ref:l,props:o,_owner:ta.current}}function bh(e,t){return{$$typeof:fo,type:e.type,key:t,ref:e.ref,props:e.props,_owner:e._owner}}f
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 20 49 66 20 79 6f 75 20 6d 65 61 6e 74 20 74 6f 20 72 65 6e 64 65 72 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 63 68 69 6c 64 72 65 6e 2c 20 75 73 65 20 61 6e 20 61 72 72 61 79 20 69 6e 73 74 65 61 64 2e 22 29 3b 72 65 74 75 72 6e 20 6c 7d 66 75 6e 63 74 69 6f 6e 20 43 6f 28 65 2c 74 2c 6e 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 5b 5d 2c 6f 3d 30 3b 72 65 74 75 72 6e 20 55 6f 28 65 2c 72 2c 22 22 2c 22 22 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 6e 2c 69 2c 6f 2b 2b 29 7d 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 57 68 28 65 29 7b 69 66 28 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 2d 31 29 7b 76 61 72 20 74 3d 65 2e 5f 72 65 73 75 6c 74 3b 74 3d 74 28 29 2c 74 2e 74 68 65 Data Ascii: If you meant to render a collection of children, use an array instead.");return l}function Co(e,t,n){if(e==null)return e;var r=[],o=0;return Uo(e,r,"","",function(i){return t.call(n,i,o++)}),r}function Wh(e){if(e._status===-1){var t=e._result;t=t(),t.the
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 6b 65 79 29 2c 65 2e 74 79 70 65 26 26 65 2e 74 79 70 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 76 61 72 20 73 3d 65 2e 74 79 70 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3b 66 6f 72 28 61 20 69 6e 20 74 29 61 64 2e 63 61 6c 6c 28 74 2c 61 29 26 26 21 75 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 28 72 5b 61 5d 3d 74 5b 61 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 73 21 3d 3d 76 6f 69 64 20 30 3f 73 5b 61 5d 3a 74 5b 61 5d 29 7d 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 61 3d 3d 3d 31 29 72 2e 63 68 69 6c 64 72 65 6e 3d 6e 3b 65 6c 73 65 20 69 66 28 31 3c 61 29 7b 73 3d 41 72 72 61 79 28 61 29 3b 66 6f 72 28 76 61 72 20 75 3d 30 3b 75 3c 61 3b 75 2b 2b 29 73 5b 75 5d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: key),e.type&&e.type.defaultProps)var s=e.type.defaultProps;for(a in t)ad.call(t,a)&&!ud.hasOwnProperty(a)&&(r[a]=t[a]===void 0&&s!==void 0?s[a]:t[a])}var a=arguments.length-2;if(a===1)r.children=n;else if(1<a){s=Array(a);for(var u=0;u<a;u++)s[u]=arguments
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 2e 63 75 72 72 65 6e 74 2e 75 73 65 45 66 66 65 63 74 28 65 2c 74 29 7d 3b 7a 2e 75 73 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 64 28 29 7d 3b 7a 2e 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 4c 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 28 65 2c 74 2c 6e 29 7d 3b 7a 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4c 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 28 65 2c 74 29 7d 3b 7a 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3d 66 75 6e 63 Data Ascii: .current.useEffect(e,t)};z.useId=function(){return Le.current.useId()};z.useImperativeHandle=function(e,t,n){return Le.current.useImperativeHandle(e,t,n)};z.useInsertionEffect=function(e,t){return Le.current.useInsertionEffect(e,t)};z.useLayoutEffect=func
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 29 3b 66 6f 72 28 72 20 69 6e 20 74 29 59 68 2e 63 61 6c 6c 28 74 2c 72 29 26 26 21 71 68 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 6f 5b 72 5d 3d 74 5b 72 5d 29 3b 69 66 28 65 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 72 20 69 6e 20 74 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 2c 74 29 6f 5b 72 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6f 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 51 68 2c 74 79 70 65 3a 65 2c 6b 65 79 3a 69 2c 72 65 66 3a 6c 2c 70 72 6f 70 73 3a 6f 2c 5f 6f 77 6e 65 72 3a 4a 68 2e 63 75 72 72 65 6e 74 7d 7d 44 69 2e 46 72 61 67 6d 65 6e 74 3d 58 68 3b 44 69 2e 6a 73 78 3d 64 64 3b 44 69 2e 6a 73 78 73 3d 64 64 3b 6e 64 2e 65 78 70 6f 72 74 73 3d 44 69 3b 76 61 Data Ascii: );for(r in t)Yh.call(t,r)&&!qh.hasOwnProperty(r)&&(o[r]=t[r]);if(e&&e.defaultProps)for(r in t=e.defaultProps,t)o[r]===void 0&&(o[r]=t[r]);return{$$typeof:Qh,type:e,key:i,ref:l,props:o,_owner:Jh.current}}Di.Fragment=Xh;Di.jsx=dd;Di.jsxs=dd;nd.exports=Di;va
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 74 54 69 6d 65 6f 75 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 73 65 74 54 69 6d 65 6f 75 74 3a 6e 75 6c 6c 2c 67 3d 74 79 70 65 6f 66 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 6e 75 6c 6c 2c 68 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3c 22 75 22 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 3c 22 75 22 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 21 3d 3d 76 6f 69 64 20 30 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 21 3d 3d 76 6f 69 64 20 30 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 Data Ascii: tTimeout=="function"?setTimeout:null,g=typeof clearTimeout=="function"?clearTimeout:null,h=typeof setImmediate<"u"?setImmediate:null;typeof navigator<"u"&&navigator.scheduling!==void 0&&navigator.scheduling.isInputPending!==void 0&&navigator.scheduling.is
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 69 6f 6e 20 58 28 6a 29 7b 52 3d 6a 2c 4e 7c 7c 28 4e 3d 21 30 2c 56 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 6a 2c 50 29 7b 4f 3d 43 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 28 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 28 29 29 7d 2c 50 29 7d 65 2e 75 6e 73 74 61 62 6c 65 5f 49 64 6c 65 50 72 69 6f 72 69 74 79 3d 35 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 49 6d 6d 65 64 69 61 74 65 50 72 69 6f 72 69 74 79 3d 31 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 4c 6f 77 50 72 69 6f 72 69 74 79 3d 34 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 4e 6f 72 6d 61 6c 50 72 69 6f 72 69 74 79 3d 33 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 50 72 6f 66 69 6c 69 6e 67 3d 6e 75 6c 6c 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 55 73 65 72 42 6c 6f 63 6b 69 6e 67 50 72 69 6f 72 69 74 79 3d 32 2c 65 2e Data Ascii: ion X(j){R=j,N\|\|(N=!0,V())}function se(j,P){O=C(function(){j(e.unstable_now())},P)}e.unstable_IdlePriority=5,e.unstable_ImmediatePriority=1,e.unstable_LowPriority=4,e.unstable_NormalPriority=3,e.unstable_Profiling=null,e.unstable_UserBlockingPriority=2,e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	172.66.44.184	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-26 22:23:10 UTC	614	OUT	GET /assets/index-d076d531.css HTTP/1.1 Host: christiantensen478345.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://christiantensen478345.pages.dev/help/contact/267198133611621 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-26 22:23:10 UTC	768	IN	HTTP/1.1 200 OK Date: Sun, 26 May 2024 22:23:10 GMT Content-Type: text/css; charset=utf-8 Content-Length: 10139 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "b46365c677a01353b73be922ebf8d4d5" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8hVj%2BAiPIniPxiuSOSTpAul%2B1AiHot3u2FfIOvEtxcvccx5NKysRyODYeeDhNOgSA4aEuWVIktaaRUrXFaIoG0gGSiaYCGsPrDIY0IWPNaLqZw4nC%2BYTR3edIje3r2HhjEPOgsWfCxcj06l1xi9zSHiu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a12b0ccedf4380-EWR alt-svc: h3=":443"; ma=86400
2024-05-26 22:23:10 UTC	601	IN	Data Raw: 2e 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 65 6d 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 66 69 6c 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 7d 2e 6c 6f 67 6f 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 34 36 63 66 66 61 61 29 7d 2e 6c 6f 67 6f 2e 72 65 61 63 74 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 31 64 61 66 62 61 61 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 67 6f 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 Data Ascii: .logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-re
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 20 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 72 65 69 67 68 74 20 53 61 6e 73 20 4c 46 20 50 72 6f 20 53 65 6d 69 62 6f 6c 64 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e Data Ascii: ;bottom:0;left:0;z-index:1;display:flex;justify-content:center;align-items:center;flex-direction:column;padding:0 20px;color:#fff!important}.banner-content h5{font-size:14px;font-family:Freight Sans LF Pro Semibold,Helvetica,Arial,sans-serif;text-renderin
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2c 20 67 61 69 6e 73 62 6f 72 6f 29 29 3b 6d 61 72 67 69 6e 3a 30 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 61 63 6b 67 72 6f 75 Data Ascii: rnational-phone-country-selector-border-color, var(--react-international-phone-border-color, gainsboro));margin:0;-moz-appearance:button;appearance:button;-webkit-appearance:button;background-color:var(--react-international-phone-country-selector-backgrou
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 61 72 72 6f 77 2d 73 69 7a 65 2c 20 34 70 78 29 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 6f 75 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 5f 5f 64 72 6f 70 64 6f 77 6e 2d 61 72 72 6f 77 2d 2d 61 63 74 69 76 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 58 28 31 38 30 64 65 67 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 Data Ascii: onal-phone-country-selector-arrow-size, 4px) solid transparent;margin-right:4px;transition:all .1s ease-out}.react-international-phone-country-selector-button__dropdown-arrow--active{transform:rotateX(180deg)}.react-international-phone-country-selector-bu
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 77 68 69 74 65 29 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 73 68 61 64 6f 77 2c 20 32 70 78 20 32 70 78 20 31 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 32 35 29 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 Data Ascii: ckground-color, var(--react-international-phone-background-color, white));box-shadow:var(--react-international-phone-dropdown-shadow, 2px 2px 16px rgba(0, 0, 0, .25));color:var(--react-international-phone-dropdown-item-text-color, var(--react-internationa
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 66 6f 63 75 73 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 73 65 6c 65 63 74 65 64 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 77 68 69 74 65 73 6d 6f 6b 65 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 73 65 6c 65 63 74 65 64 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 74 65 78 74 2d 63 6f Data Ascii: ry-selector-dropdown__list-item--focused{background-color:var(--react-international-phone-selected-dropdown-item-background-color, whitesmoke);color:var(--react-international-phone-selected-dropdown-item-text-color, var(--react-international-phone-text-co
2024-05-26 22:23:10 UTC	1369	IN	Data Raw: 65 29 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 61 6c 2d 63 6f 64 65 2d 70 72 65 76 69 65 77 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 23 32 32 32 29 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 61 6c 2d 63 6f 64 65 2d 70 72 65 76 69 65 77 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 31 33 70 78 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 Data Ascii: e));color:var(--react-international-phone-dial-code-preview-text-color, var(--react-international-phone-text-color, #222));font-size:var(--react-international-phone-dial-code-preview-font-size, var(--react-international-phone-font-size, 13px))}.react-inte
2024-05-26 22:23:10 UTC	1324	IN	Data Raw: 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 23 32 32 32 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 31 33 70 78 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 Data Ascii: ternational-phone-text-color, #222);font-family:inherit;font-size:var(--react-international-phone-font-size, 13px)}.react-international-phone-input-container .react-international-phone-input:focus{outline:none}.react-international-phone-input-container .r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	35.190.80.1	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-26 22:23:11 UTC	578	OUT	OPTIONS /report/v4?s=Pn2jTZI%2Bvo4DwXs1OR8Ixy7mbtHdpY8WenRfxMI%2BWq4CLLa1Yec6%2F%2BX5KHAKZMV03qraZ6U2Lv8AJfHF3TxAq%2Fy9sVltj5vvp1KGyPK9uBgZLiywykORU33UOGCaWYz6030eJAfXdrJsyw%2FqwsW6z%2Bjb HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://christiantensen478345.pages.dev Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-26 22:23:11 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Sun, 26 May 2024 22:23:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	172.66.44.184	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-26 22:23:11 UTC	680	OUT	GET /assets/facebook_logo_icon_147291-f2dfc6fd.ico HTTP/1.1 Host: christiantensen478345.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://christiantensen478345.pages.dev/help/contact/267198133611621 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-26 22:23:12 UTC	749	IN	HTTP/1.1 200 OK Date: Sun, 26 May 2024 22:23:12 GMT Content-Type: null Content-Length: 67646 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "0ce70d7a4746dfe57b6742a6942dacfa" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=81rULs8kzph4mhGq95lqIq%2BaFbITOFcpB9fTnkTV%2FKFxbqb%2FHaDJ9y37P1oFdVk9Om5UpxC6GP2LwTLDYoZc16R0XMah1UgNYQ15tRJgWedVtvYa3XZxyea6KLrOKMBrXcCF6pl3l6jagOAQhcD5mmia"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a12b142e6b2363-EWR alt-svc: h3=":443"; ma=86400
2024-05-26 22:23:12 UTC	620	IN	Data Raw: 00 00 01 00 01 00 80 80 00 00 01 00 20 00 28 08 01 00 16 00 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 20 00 00 00 00 00 00 00 01 00 7b 9d 00 00 7b 9d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 78 1c 00 f1 78 17 00 f5 75 19 00 ed 7b 18 00 f2 77 18 01 f2 77 18 03 f2 77 18 04 f3 77 18 01 f2 Data Ascii: (( {{xxu{wwww
2024-05-26 22:23:12 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 80 20 00 f3 78 19 00 f1 76 18 00 ef 75 19 00 f2 78 19 01 f2 77 18 03 f2 77 18 03 f6 73 1d 00 f0 77 19 00 ec 77 21 00 ef 78 1d 02 f2 77 18 23 f2 77 18 54 f2 77 18 8d f2 78 19 be f2 74 14 e0 f3 80 27 fa fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 fa f2 Data Ascii: xvuxwwsww!xw#wTwxt''
2024-05-26 22:23:12 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 78 18 00 f2 77 18 00 f2 77 Data Ascii: xww
2024-05-26 22:23:12 UTC	1369	IN	Data Raw: ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fd f2 77 18 fb f2 77 18 fe f2 77 18 ff f2 77 18 ff f2 77 18 c9 f2 77 18 50 f2 75 1c 02 f2 75 1d 00 f2 77 18 03 f2 77 18 02 f1 76 18 00 f1 76 18 00 f2 77 18 00 ff 80 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwPuuwwvvw+
2024-05-26 22:23:12 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 76 18 00 f2 77 18 00 f2 77 18 00 f2 77 18 01 f2 77 18 03 f2 76 18 00 f2 76 18 0b f2 77 18 88 f2 77 18 f8 f2 77 18 ff f2 77 18 fc f2 77 18 fc f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff Data Ascii: vwwwwvvwwwwwwwwwwwwwwwwwwwwwxu''uxw
2024-05-26 22:23:12 UTC	1369	IN	Data Raw: 18 91 f1 77 18 08 f2 79 19 00 f2 77 18 03 f2 78 17 00 f2 78 17 00 f2 77 17 00 ff 71 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 76 17 00 f2 77 18 00 f2 77 18 00 f2 77 18 01 f2 77 18 04 f2 77 18 00 f2 77 18 2b f2 77 18 cf f2 77 18 ff f2 77 18 fc f2 77 18 fd f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 Data Ascii: wywxxwqvwwwwww+wwwwwwwwww
2024-05-26 22:23:12 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fc f2 77 18 fd f2 77 18 ff f2 77 18 8b eb 71 18 00 f1 76 18 02 f2 77 18 02 f2 77 18 00 f2 77 18 00 f2 77 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwwwwwwwwwwwwwqvwwww
2024-05-26 22:23:12 UTC	1369	IN	Data Raw: f2 77 18 03 f2 77 18 00 f2 77 18 1d f2 77 18 d4 f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 Data Ascii: wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwxu''uxwwww
2024-05-26 22:23:12 UTC	1369	IN	Data Raw: 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 dc f2 77 18 1e f2 77 18 00 f2 77 18 03 f2 77 18 00 f2 77 18 00 f2 78 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 77 18 00 f2 77 18 00 f2 77 18 02 f2 77 18 00 f2 78 18 16 f2 77 18 d5 f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff Data Ascii: wwwwwwwwwwwwxwwwwxwwwwwwwwwwwwwwwwwwwwww
2024-05-26 22:23:12 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 af f0 7b 1a 00 f2 78 18 02 f2 77 18 01 f6 76 1c 00 f2 78 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww{xwvx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	35.190.80.1	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-26 22:23:12 UTC	504	OUT	POST /report/v4?s=Pn2jTZI%2Bvo4DwXs1OR8Ixy7mbtHdpY8WenRfxMI%2BWq4CLLa1Yec6%2F%2BX5KHAKZMV03qraZ6U2Lv8AJfHF3TxAq%2Fy9sVltj5vvp1KGyPK9uBgZLiywykORU33UOGCaWYz6030eJAfXdrJsyw%2FqwsW6z%2Bjb HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 528 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-26 22:23:12 UTC	528	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 37 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 68 72 69 73 74 69 61 6e 74 65 6e 73 65 6e 34 37 38 33 34 35 2e 70 61 67 65 73 2e 64 65 76 2f 68 65 6c 70 2f 63 6f 6e 74 61 63 74 2f 32 36 37 31 39 38 31 33 33 36 31 31 36 32 31 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 36 2e 34 34 2e 31 38 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a Data Ascii: [{"age":1,"body":{"elapsed_time":570,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://christiantensen478345.pages.dev/help/contact/267198133611621","sampling_fraction":1.0,"server_ip":"172.66.44.184","status_code":200,"type":
2024-05-26 22:23:12 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Sun, 26 May 2024 22:23:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	172.66.44.184	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-26 22:23:12 UTC	400	OUT	GET /assets/facebook_logo_icon_147291-f2dfc6fd.ico HTTP/1.1 Host: christiantensen478345.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-26 22:23:13 UTC	749	IN	HTTP/1.1 200 OK Date: Sun, 26 May 2024 22:23:13 GMT Content-Type: null Content-Length: 67646 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "0ce70d7a4746dfe57b6742a6942dacfa" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KJ2A5lVlRHyOs7pu2ti6YxngxB4m7J4jkC971v7QoD%2Fjxt4ww7U7fNvmxP8cFr2X2iEj0VV71eoOl12tCArPVYrkPFcYxGGZURpR8JFW9qhVCyMBePGuz1ry1zKfksxt0JihaamWrvF%2BDtTT%2FgF0gaH5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a12b1a4a76c35f-EWR alt-svc: h3=":443"; ma=86400
2024-05-26 22:23:13 UTC	620	IN	Data Raw: 00 00 01 00 01 00 80 80 00 00 01 00 20 00 28 08 01 00 16 00 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 20 00 00 00 00 00 00 00 01 00 7b 9d 00 00 7b 9d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 78 1c 00 f1 78 17 00 f5 75 19 00 ed 7b 18 00 f2 77 18 01 f2 77 18 03 f2 77 18 04 f3 77 18 01 f2 Data Ascii: (( {{xxu{wwww
2024-05-26 22:23:13 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 80 20 00 f3 78 19 00 f1 76 18 00 ef 75 19 00 f2 78 19 01 f2 77 18 03 f2 77 18 03 f6 73 1d 00 f0 77 19 00 ec 77 21 00 ef 78 1d 02 f2 77 18 23 f2 77 18 54 f2 77 18 8d f2 78 19 be f2 74 14 e0 f3 80 27 fa fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 fa f2 Data Ascii: xvuxwwsww!xw#wTwxt''
2024-05-26 22:23:13 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 78 18 00 f2 77 18 00 f2 77 Data Ascii: xww
2024-05-26 22:23:13 UTC	1369	IN	Data Raw: ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fd f2 77 18 fb f2 77 18 fe f2 77 18 ff f2 77 18 ff f2 77 18 c9 f2 77 18 50 f2 75 1c 02 f2 75 1d 00 f2 77 18 03 f2 77 18 02 f1 76 18 00 f1 76 18 00 f2 77 18 00 ff 80 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwPuuwwvvw+
2024-05-26 22:23:13 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 76 18 00 f2 77 18 00 f2 77 18 00 f2 77 18 01 f2 77 18 03 f2 76 18 00 f2 76 18 0b f2 77 18 88 f2 77 18 f8 f2 77 18 ff f2 77 18 fc f2 77 18 fc f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff Data Ascii: vwwwwvvwwwwwwwwwwwwwwwwwwwwwxu''uxw
2024-05-26 22:23:13 UTC	1369	IN	Data Raw: 18 91 f1 77 18 08 f2 79 19 00 f2 77 18 03 f2 78 17 00 f2 78 17 00 f2 77 17 00 ff 71 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 76 17 00 f2 77 18 00 f2 77 18 00 f2 77 18 01 f2 77 18 04 f2 77 18 00 f2 77 18 2b f2 77 18 cf f2 77 18 ff f2 77 18 fc f2 77 18 fd f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 Data Ascii: wywxxwqvwwwwww+wwwwwwwwww
2024-05-26 22:23:13 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fc f2 77 18 fd f2 77 18 ff f2 77 18 8b eb 71 18 00 f1 76 18 02 f2 77 18 02 f2 77 18 00 f2 77 18 00 f2 77 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwwwwwwwwwwwwwqvwwww
2024-05-26 22:23:13 UTC	1369	IN	Data Raw: f2 77 18 03 f2 77 18 00 f2 77 18 1d f2 77 18 d4 f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 78 19 ff f2 75 14 ff f3 80 27 ff fe f6 f0 ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 Data Ascii: wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwxu''uxwwww
2024-05-26 22:23:13 UTC	1369	IN	Data Raw: 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 dc f2 77 18 1e f2 77 18 00 f2 77 18 03 f2 77 18 00 f2 77 18 00 f2 78 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 77 18 00 f2 77 18 00 f2 77 18 02 f2 77 18 00 f2 78 18 16 f2 77 18 d5 f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff Data Ascii: wwwwwwwwwwwwxwwwwxwwwwwwwwwwwwwwwwwwwwww
2024-05-26 22:23:13 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff fe f6 f0 ff f3 80 27 ff f2 75 14 ff f2 78 19 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 ff f2 77 18 fb f2 77 18 ff f2 77 18 af f0 7b 1a 00 f2 78 18 02 f2 77 18 01 f6 76 1c 00 f2 78 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 'uxwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww{xwvx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-26 22:23:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-26 22:23:13 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236761 Date: Sun, 26 May 2024 22:23:13 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-26 22:23:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-26 22:23:14 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236843 Date: Sun, 26 May 2024 22:23:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-26 22:23:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Target ID:	0
Start time:	18:23:04
Start date:	26/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:23:06
Start date:	26/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2196,i,13786970979077688158,813139464055982890,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:23:07
Start date:	26/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://christiantensen478345.pages.dev/help/contact/267198133611621"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://christiantensen478345.pages.dev/help/contact/267198133611621	Avira URL Cloud: detection malicious, Label: phishing
Source: https://christiantensen478345.pages.dev/help/contact/267198133611621	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://christiantensen478345.pages.dev/assets/facebook_logo_icon_147291-f2dfc6fd.ico	Avira URL Cloud: Label: phishing
Source: https://christiantensen478345.pages.dev/assets/index-d076d531.css	Avira URL Cloud: Label: phishing
Source: https://christiantensen478345.pages.dev/assets/index-862b6d85.js	Avira URL Cloud: Label: phishing

Source: global traffic	HTTP traffic detected: GET /help/contact/267198133611621 HTTP/1.1Host: christiantensen478345.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-862b6d85.js HTTP/1.1Host: christiantensen478345.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://christiantensen478345.pages.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://christiantensen478345.pages.dev/help/contact/267198133611621Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-d076d531.css HTTP/1.1Host: christiantensen478345.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://christiantensen478345.pages.dev/help/contact/267198133611621Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/facebook_logo_icon_147291-f2dfc6fd.ico HTTP/1.1Host: christiantensen478345.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://christiantensen478345.pages.dev/help/contact/267198133611621Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/facebook_logo_icon_147291-f2dfc6fd.ico HTTP/1.1Host: christiantensen478345.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: christiantensen478345.pages.dev
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://christiantensen478345.pages.dev/help/contact/267198133611621

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2932, Parent PID: 3760

General

Chronological Activities

Analysis Process: chrome.exePID: 5816, Parent PID: 2932

Windows Analysis Report
https://christiantensen478345.pages.dev/help/contact/267198133611621