Edit tour

Windows Analysis Report
https://mail.fnbo-in.selfip.com/x/personal.html

Overview

General Information

Sample URL:	https://mail.fnbo-in.selfip.com/x/personal.html
Analysis ID:	1448781
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

HTTP GET or POST without a user agent

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1704 --field-trial-handle=2000,i,14024384308356499503,16145808132580207214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.fnbo-in.selfip.com/x/personal.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://mail.fnbo-in.selfip.com/x/personal.html	Avira URL Cloud: detection malicious, Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/personal.html	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://mail.fnbo-in.selfip.com/x/img/BANGOR.png	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/opensans.css	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/angular.css	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/material-icons.css	Avira URL Cloud: Label: phishing

Multi AV Scanner detection for submitted file

Source: https://mail.fnbo-in.selfip.com/x/personal.html

Virustotal: Detection: 16%

Perma Link

Source: https://mail.fnbo-in.selfip.com/x/personal.html	HTTP Parser: No favicon
Source: https://mail.fnbo-in.selfip.com/OnlineBanking/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /x/personal.html HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/opensans.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/personal.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aperture/aperture.js HTTP/1.1Host: cdn.perfdrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj-QO5R4_ig_UM_6BTEvsUm0pVZPSI45Qh8HhMXpcfZ0-H_jz5gjdjFcqhl8Q2uekFcLFceEEhLFJKexQwJQYE-YZPPmEfmF2tz8ibp1V0Knp5fHHCZZeU1&t=637356698800000000 HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js HTTP/1.1Host: cdn.appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/material-icons.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/personal.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/angular.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/personal.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/RadDockableObject.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/personal.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/img/BANGOR.png HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.fnbo-in.selfip.com/x/personal.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.fnbo-in.selfip.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://mail.fnbo-in.selfip.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE; __uzmb=1716977607; __uzmd=1716977607; ADRUM_BTa=R:0\|g:82d5defc-bef1-40cb-94bc-12093914f258\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; SameSite=None; ADRUM_BT1=R:0\|i:371912\|e:6; __uzma=4629b859-86d9-49d5-a9bc-ae48728b7271; __uzme=9709; __uzmc=121691077582; __uzmf=7f60007eb7f26e-1589-46a0-9438-c3b60434e9b717169776078960-0e6824b0d63c1e0b10; uzmx=7f90008ef75d43-dfb3-41cc-b233-8215d83911e91-17169776078960-8d09715e43d86d1f10
Source: global traffic	HTTP traffic detected: GET /x/img/BANGOR.png HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.fnbo-in.selfip.com/x/personal.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.fnbo-in.selfip.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
Source: global traffic	HTTP traffic detected: GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://mail.fnbo-in.selfip.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE; ADRUM_BTa=R:0\|g:82d5defc-bef1-40cb-94bc-12093914f258\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; SameSite=None; ADRUM_BT1=R:0\|i:371912\|e:6; __uzma=1b68201f-c229-4d7d-b791-b0babb7942b6; __uzmb=1716977608; __uzme=7583; __uzmc=449991080474; __uzmd=1716977608; __uzmf=7f6000fcc829c9-4aa1-48c1-994e-0e9dce4bd7e717169776081940-ae11e0e658b78d2510; uzmx=7f9000f4dc32df-6999-4c70-8a17-bc9a8e4a707a1-17169776081940-2a2246a96a7453a110
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/ HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/ HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e

Source: global traffic	DNS traffic detected: DNS query: mail.fnbo-in.selfip.com
Source: global traffic	DNS traffic detected: DNS query: cdn.appdynamics.com
Source: global traffic	DNS traffic detected: DNS query: cdn.perfdrive.com
Source: global traffic	DNS traffic detected: DNS query: olb.sccu.com
Source: global traffic	DNS traffic detected: DNS query: mpsnare.iesnare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 29 May 2024 10:13:30 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 29 May 2024 10:13:40 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 29 May 2024 10:13:50 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_64.2.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_64.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_65.2.dr	String found in binary or memory: https://cas.avalon.perfdrive.com/jsdata
Source: chromecache_75.2.dr	String found in binary or memory: https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js
Source: chromecache_75.2.dr	String found in binary or memory: https://cdn.perfdrive.com/aperture/aperture.js
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/59ZRklaO5bWGqF5A9baEERJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/K88pR3goAWT7BTt32Z01mxJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/LWCjsQkB6EMdfHrEVqA1KRJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5URJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/u-WUoqrET9fUeobQW7jkRRJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/xozscpT2726on7jbcb_pAhJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js
Source: chromecache_75.2.dr	String found in binary or memory: https://mpsnare.iesnare.com/time.mp3?nocache=0.22714454500364867
Source: chromecache_75.2.dr	String found in binary or memory: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7
Source: chromecache_75.2.dr	String found in binary or memory: https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2N
Source: chromecache_56.2.dr, chromecache_53.2.dr, chromecache_72.2.dr, chromecache_66.2.dr	String found in binary or memory: https://sketch.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: classification engine

Classification label: mal64.win@19/41@16/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1704 --field-trial-handle=2000,i,14024384308356499503,16145808132580207214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.fnbo-in.selfip.com/x/personal.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1704 --field-trial-handle=2000,i,14024384308356499503,16145808132580207214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://mail.fnbo-in.selfip.com/x/personal.html	17%	Virustotal		Browse
https://mail.fnbo-in.selfip.com/x/personal.html	100%	Avira URL Cloud	phishing
https://mail.fnbo-in.selfip.com/x/personal.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
https://sketch.com	0%	URL Reputation	safe
http://code.google.com/p/episodes/	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://mail.fnbo-in.selfip.com/x/img/BANGOR.png	100%	Avira URL Cloud	phishing
https://mail.fnbo-in.selfip.com/x/css/opensans.css	100%	Avira URL Cloud	phishing
https://cas.avalon.perfdrive.com/jsdata	0%	Avira URL Cloud	safe
https://mail.fnbo-in.selfip.com/favicon.ico	100%	Avira URL Cloud	phishing
https://cdn.perfdrive.com/aperture/aperture.js	0%	Avira URL Cloud	safe
https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7	0%	Avira URL Cloud	safe
https://mail.fnbo-in.selfip.com/x/css/angular.css	100%	Avira URL Cloud	phishing
https://cas.avalon.perfdrive.com/jsdata	0%	Virustotal		Browse
https://cdn.perfdrive.com/aperture/aperture.js	0%	Virustotal		Browse
https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css	100%	Avira URL Cloud	phishing
https://mail.fnbo-in.selfip.com/x/css/material-icons.css	100%	Avira URL Cloud	phishing
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg	0%	Avira URL Cloud	safe
https://mpsnare.iesnare.com/time.mp3?nocache=0.22714454500364867	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2N	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg	0%	Avira URL Cloud	safe
https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cdn.perfdrive.com	130.211.29.114	true	false	unknown
fnbo-in.selfip.com	152.42.220.64	true	false	unknown
cdn.appdynamics.com	13.227.219.49	true	false	unknown
wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com	54.195.39.4	true	false	unknown
72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net	66.22.0.11	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
mail.fnbo-in.selfip.com	unknown	unknown	false	unknown
mpsnare.iesnare.com	unknown	unknown	false	unknown
olb.sccu.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://mail.fnbo-in.selfip.com/x/img/BANGOR.png	true	Avira URL Cloud: phishing	unknown
https://mail.fnbo-in.selfip.com/OnlineBanking/	false		unknown
https://mail.fnbo-in.selfip.com/x/css/opensans.css	true	Avira URL Cloud: phishing	unknown
https://cdn.perfdrive.com/aperture/aperture.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://mail.fnbo-in.selfip.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js	false	Avira URL Cloud: safe	unknown
https://mail.fnbo-in.selfip.com/x/personal.html#mainContent	false		unknown
https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://mail.fnbo-in.selfip.com/x/css/angular.css	false	Avira URL Cloud: phishing	unknown
https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css	false	Avira URL Cloud: phishing	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg	false	Avira URL Cloud: safe	unknown
https://mail.fnbo-in.selfip.com/x/css/material-icons.css	false	Avira URL Cloud: phishing	unknown
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg	false	Avira URL Cloud: safe	unknown
https://mpsnare.iesnare.com/time.mp3?nocache=0.22714454500364867	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff	false	Avira URL Cloud: safe	unknown
https://mail.fnbo-in.selfip.com/x/personal.html	true		unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg	false	Avira URL Cloud: safe	unknown
https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://sketch.com	chromecache_56.2.dr, chromecache_53.2.dr, chromecache_72.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://cas.avalon.perfdrive.com/jsdata	chromecache_65.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://code.google.com/p/episodes/	chromecache_64.2.dr	false	URL Reputation: safe	unknown
https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2N	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
130.211.29.114	cdn.perfdrive.com	United States	15169	GOOGLEUS	false
54.195.39.4	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
152.42.220.64	fnbo-in.selfip.com	United States	81	NCRENUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
66.22.0.11	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net	United States	48851	RADWAREIL	false
13.227.219.49	cdn.appdynamics.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.10

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448781
Start date and time:	2024-05-29 12:12:30 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mail.fnbo-in.selfip.com/x/personal.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.win@19/41@16/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://mail.fnbo-in.selfip.com/x/personal.html#mainContent Browse: https://mail.fnbo-in.selfip.com/OnlineBanking/ Browse: https://mail.fnbo-in.selfip.com/OnlineBanking/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 172.217.23.110, 142.250.110.84, 34.104.35.123, 216.58.206.42, 142.250.185.234, 142.250.186.74, 172.217.18.10, 142.250.185.202, 142.250.181.234, 142.250.186.42, 142.250.185.106, 142.250.185.74, 142.250.184.234, 142.250.184.202, 142.250.185.170, 216.58.212.170, 142.250.74.202, 142.250.185.138, 172.217.16.138, 20.114.59.183, 93.184.221.240, 192.229.221.95, 52.165.164.15, 13.95.31.18, 172.217.16.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://mail.fnbo-in.selfip.com/x/personal.html Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for password or username are present in the text.", "The text does not mention logging in or related terms such as 'sign in' or 'authenticate'." ] }
G) fnbo Account Information Please provide the following information to verity your identity Last Name Email Address Phone Number Continue O fnbo AO 2024 FNBO Equal Housing Lender Federally Insured
URL: https://mail.fnbo-in.selfip.com/x/personal.html#mainContent Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for password or username are present in the text.", "The text does not mention logging in or account authentication.", "The text appears to be for account verification, not login." ] }
G) fnbo Account Information Please provide the following information to verity your identity Last Name Email Address Phone Number Continue O fnbo AO 2024 FNBO Equal Housing Lender Federally Insured
URL: https://mail.fnbo-in.selfip.com/OnlineBanking/ Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text 'Not Found The requested URL was not found on this server. Additionally: a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.' does not contain any elements of a login form such as input fields for a username and password, a submit button, or labels for these fields." ] }
Not Found The requested URL was not found on this server. Additionally: a 404 Not Found error was encountered while trying to use an ErrorDument to handle the request.

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1612
Entropy (8bit):	5.136846962796849
Encrypted:	false
SSDEEP:	48:cELPKdlm5+LkaSWlt1HV7XLOviiZs5Ae9hL+VO:xPKdkrhWdHV/OviVAKn
MD5:	A87D3850028E2890D5D51853F9BE8EF3
SHA1:	AA4749C12034332819CACBB83E08F4A7F2D9B660
SHA-256:	060AE789E740B1971A4AF9FC229F09C20B571FF070ADFF7A8CD21F70D44CE137
SHA-512:	37F67A32AC679DC6A81A9329CC6DD5F6FC78C5C3C2B4A9FCC95BBED0D4BD1F0A2993548F7230AF14F37AABEC1D1ED5C6A34C0E1FC15080D4407CDAC483C17C8F
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com -->...<title>Wires White</title>...<desc>Created with Sketch.</desc>...<defs>....<path fill="#000000" d="M12,7.86369594 L15,4.93184797 L12,2 L12,3.94888598 C7.58,3.94888598 4,7.46788991 4,11.8125819 C4,13.3558322 4.46,14.7909567 5.24,16 L6.7,14.5648755 C6.25,13.749017 6,12.8053735 6,11.8125819 C6,8.55897772 8.69,5.91480996 12,5.91480996 L12,7.86369594 Z M17.3,9.43512451 C17.74,10.2608126 18,11.1946265 18,12.1874181 C18,15.4410223 15.31,18.08519 12,18.08519 L12,16.1363041 L9,19.068152 L12,22 L12,20.051114 C16.42,20.051114 20,16.5321101 20,12.1874181 C20,10.6441678 19.54,9.20904325 18.76,8 L17.3,9.43512451 Z" id="path-1"></path>...</defs>...<g id="Wires-White" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">....<mask id="mask-2" fill="

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5436
Entropy (8bit):	5.04698143697545
Encrypted:	false
SSDEEP:	96:2aOJvVliYJdxTscd6GegqQpHVO9vS3rVOH/ZVO1PrVnPoEO5C:UJzscEGPHVEv0VIVqpQEO5C
MD5:	1CD135A10368424EE961E4E190265DA4
SHA1:	D9DBA2925D2C69E2B3BA6209526D85A77049B83F
SHA-256:	01D576ECEC7BA742FE2D660D95CF62AD1A05138D1633E7615267DB9DF314565B
SHA-512:	F321B2CF23B53B885A9C1A1DD97FBCD6515CF957631FADE2F5040D8BB292A4D7E12926AAF95D11D1BE186171AAC5243483D42F5EB8CC649B0923881AA61715F4
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/angular.css
Preview:	input[type="text"] {...width: 100%;..}....table {...border: 0;..}....ul {...list-style-type: none;..}.....bulleted-list {...padding-left: 0px;..}.....bulleted-list li {...display: inline-block;...width: 100%;...overflow: visible;...margin: 0;...padding: 0;...list-style: none;...padding-bottom: .7em;..}.....text-left {...text-align: left !important;..}.....accordion-pane-title {...margin-bottom: 12px;...font-size: 16px;..}.....account-header {...font-size: 16px;...margin-bottom: 24px;...padding-left: 30px;..}.....account-summary {...margin-left: -30px;...margin-right: -30px;..}.....account-summary-header {...margin-left: -30px;...background-color: #f5f5f5;...margin-right: -30px;...padding-bottom: 24px;...padding-top: 12px;...padding-left: 15px;...padding-right: 15px;...border-bottom: 1px solid #e5e5e5;...border-top: 1px solid #e5e5e5;..}.....account-summary radio-button-list-item li.laguna-radio-button-list {...border-bottom: 1px solid #E4E4E4; ...text-align: left !important;...padding-

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377)
Category:	downloaded
Size (bytes):	505
Entropy (8bit):	5.911332846286842
Encrypted:	false
SSDEEP:	12:UsMh9D1ksr8QQgUhKAB37T1uDtO7r7V99vNA4I:BMN/bQBx7qwLbhNA4I
MD5:	720BBF14BF417DD02A49BA9FEFA48204
SHA1:	404A463080D03D2D05A3A1ED739B7B3056DCB756
SHA-256:	F6D047866B0282D4E2B25A99DD318E38016964CEFA1F8B1236322E508DD2B35F
SHA-512:	63C5937829D0F55235DB684416F215D2C46B4BD563CCC683A19667998E38A271341A8087AC7E8BEABE91DA09AA89890069F7BC015248318996130585494AA503
Malicious:	false
Reputation:	low
URL:	https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js
Preview:	/. Copyright(c) 2022 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c./.(function(){.(function c(){var a=window,b=a.io_global_object_name\|\|"IGLOO";a=a[b]=a[b]\|\|{};a=a.io=a.io\|\|{};b=a.io_ddp;if(a.logoMain)return!1;a.logoMain=c;a.logoVer="5.5.0";b&&b._if_ubb&&(b._CTOKEN="S3Wphh9CUyL/njMZh19UN5F8YdGS7VDEL8CjShPX6O0=",b._if_ubb());try{a.api.io_bb.add("LID","FZU9CJ04ehVIHapxtE7nm92Lfd51iuORw/JNT6B5eIo2ulYyWzhVbpR8JqE2c91ufNM2nMt7Isd148McZN6M5g==")}catch(d){}})();.}).call(this);.

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12107
Entropy (8bit):	4.118290925600839
Encrypted:	false
SSDEEP:	192:ych6/pumchwJayuAXQHavGzUIBRHHa2UGUmRUG:1h6/YphwJN8QUUvLG
MD5:	C7B060B7604197D6A0B12648830D9EE8
SHA1:	106494AAA57A809C485AEFF1DCF43421250F17BE
SHA-256:	88978628E57207E83A74D047CA5AA90B9435741822FBEFFF1F1B9475FA1CBDB3
SHA-512:	6684BF8AF528ED534786D6463C981B56C0A995DFE1B6A6E5C5D8B5A6631DA39632563615EDB27F15B195D68D86AFD955F0A3D5CDA1D3F525AC7D3C47DFF92135
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: Sketch 64 (93537) - https://sketch.com -->.. <title>Logo</title>.. <desc>Created with Sketch.</desc>.. <g id="Logo" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <path fill="#000000" d="M22.1176284,5 L22.1176284,8.89997282 L10.7924229,8.89997282 L10.7924229,15.5724382 L22.1176284,15.5724382 L22.1176284,19.5093775 L10.7924229,19.5093775 L10.7924229,30.8211471 L5.53846154,30.8211471 L5.53846154,5 L22.1176284,5 Z M28.8504825,5.57298179 C29.5899326,5.57298179 30.2255907,5.82558414 30.7574759,6.33079641 C31.289361,6.83600869 31.5552996,7.43978991 31.5552996,8.1421582 C31.5552996,8.81988198 31.2926042,9.42058269 30.7672054,9.94427834 C30.2418067,10.467974 29.6029054,10.7298179 28.8504825,10.7298179 C28.1240052,10.7298179 27.4915903,10.467974 26.9532187

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.308694969562842
Encrypted:	false
SSDEEP:	3:mSuiChwinPovinY:mStePciY
MD5:	CA4AAFD433135F43C774A9C7A6CFAF94
SHA1:	215F3F7D4D921EBD5AB49FB600DC1F90F28FB42D
SHA-256:	56500AC8839025C8DA188C6CC6A06999A1B25F1AC2E5C1F7283970D5D0CB5C52
SHA-512:	6A17AF8A828EF99E70E5B46768BDCEF29265EDFEF3A7C169586C1CF706B02DEA8964B82DADD436D52B2E6789DD99E473425477768BE8C9F97A5CEB76FBBCC0A0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHglP6Y6l85hi-RIFDXr2AKoSBQ14bxIZEgUNU_J1YQ==?alt=proto
Preview:	ChsKBw169gCqGgAKBw14bxIZGgAKBw1T8nVhGgA=

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1281
Entropy (8bit):	4.947635174118396
Encrypted:	false
SSDEEP:	24:2dX9bqDLtpWeaxMxpm3R1tXAVbGldQxYMWkkOBx/UpTacTdz:c9qft23Xd9lOP/UpTacTN
MD5:	5E4CB0126E52C254C52AB70905AA9EC2
SHA1:	ED921EBDEA59577D56DCA16B1380BE213A3B8C3D
SHA-256:	4A8EEB17A4D3F72A3A9BB52BEBEEC37BEAD3CC60CA4F475FACBDA9135A782F33
SHA-512:	6D9BE634004D8378119D623603FF4F4507E4BC8CECE87E8006ECEB09B82167678D2E5FE229EECBE382039B14FFF38BBD28FF4254643D2804F19C6BE3E828EA5C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>Equal Opportunity Logo</title>.. <g id="Components" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Footer" transform="translate(-309.000000, -207.000000)" fill="#424242">.. <g id="Footer/Narrow-Logged-Out" transform="translate(50.000000, 92.000000)">.. <g id="Group" transform="translate(127.000000, 112.000000)">.. <g id="Equal-Opportunity-Logo" transform="translate(132.000000, 3.000000)">.. <path d="M7.58457,0 L0,4.2243719 L0,5.7509541 L1.16194576,5.7509541 L1.16194576,11 L13.816923,11 L13.816923,5.7509541 L15,5.7509541 L15,4.26617549 L7.58457,0 Z M2.70380181,4.39300033 L7.58402817,1.59074584 L12.3586888,4.39300033 L12.3586888,9.66290383 L2.70380181,9.66290383 L2.70380181,4.39300033 Z" id="

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1281
Entropy (8bit):	4.947635174118396
Encrypted:	false
SSDEEP:	24:2dX9bqDLtpWeaxMxpm3R1tXAVbGldQxYMWkkOBx/UpTacTdz:c9qft23Xd9lOP/UpTacTN
MD5:	5E4CB0126E52C254C52AB70905AA9EC2
SHA1:	ED921EBDEA59577D56DCA16B1380BE213A3B8C3D
SHA-256:	4A8EEB17A4D3F72A3A9BB52BEBEEC37BEAD3CC60CA4F475FACBDA9135A782F33
SHA-512:	6D9BE634004D8378119D623603FF4F4507E4BC8CECE87E8006ECEB09B82167678D2E5FE229EECBE382039B14FFF38BBD28FF4254643D2804F19C6BE3E828EA5C
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>Equal Opportunity Logo</title>.. <g id="Components" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Footer" transform="translate(-309.000000, -207.000000)" fill="#424242">.. <g id="Footer/Narrow-Logged-Out" transform="translate(50.000000, 92.000000)">.. <g id="Group" transform="translate(127.000000, 112.000000)">.. <g id="Equal-Opportunity-Logo" transform="translate(132.000000, 3.000000)">.. <path d="M7.58457,0 L0,4.2243719 L0,5.7509541 L1.16194576,5.7509541 L1.16194576,11 L13.816923,11 L13.816923,5.7509541 L15,5.7509541 L15,4.26617549 L7.58457,0 Z M2.70380181,4.39300033 L7.58402817,1.59074584 L12.3586888,4.39300033 L12.3586888,9.66290383 L2.70380181,9.66290383 L2.70380181,4.39300033 Z" id="

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2431
Entropy (8bit):	5.514002134371641
Encrypted:	false
SSDEEP:	48:S8QW1di8qLuZS87q8wR+N8alX8oMf5s8ulNOs:r/+uZp6R+DlT258Nb
MD5:	5BD7923FBD0B1D6DB1C31394334F4510
SHA1:	2D24C3756BAD6DC5B70B199766AEBBD6923EF488
SHA-256:	4E7588FE9002B8DFA03AA04E34AA12A908180CDCD40C7971204783BB207B1D2D
SHA-512:	396BCEA7CC02D3FE2917B2DA2554B3A1354438AAB4BBAB512FB5085164A201DEED6622A6ECB96475BEE73FE903253E6AE9942C0E31ACF95E72262DF5FC3AAACD
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/opensans.css
Preview:	/* cyrillic-ext /..@font-face {.. font-family: 'Open Sans';.. font-style: normal;.. font-weight: 400;.. src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/K88pR3goAWT7BTt32Z01mxJtnKITppOI_IvcXXDNrsc.woff2) format('woff2');.. unicode-range: U+0460-052F, U+20B4, U+2DE0-2DFF, U+A640-A69F;..}..../ cyrillic /..@font-face {.. font-family: 'Open Sans';.. font-style: normal;.. font-weight: 400;.. src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5URJtnKITppOI_IvcXXDNrsc.woff2) format('woff2');.. unicode-range: U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;..}..../ greek-ext */..@font-face {.. font-family: 'Open Sans';.. font-style: normal;.. font-weight: 400;.. src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/LWCjsQkB6EMdfHrEVqA1KRJtnKITppOI_IvcXXDNrsc.woff2) format('woff2');.. unicode-range: U+1F00-1FFF;..}....

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (808), with no line terminators
Category:	downloaded
Size (bytes):	811
Entropy (8bit):	4.930257130040709
Encrypted:	false
SSDEEP:	12:b2q58MOK62utTxg5dV5ZkV8fqJTqsTRYsTizVHEVq1n1hP85C:b2ypOptT65dVMV8iThTRYsTuHiy1x85C
MD5:	1387B0BAFAFDDC8665426BC74F724A2E
SHA1:	28421FF20F47516133DAC59C89A252FDBB2ED9E5
SHA-256:	A2EF0492EC474D0F031D121E4C02A0492454B3C55FB7FF6315A5B472BC1CFE49
SHA-512:	560160AEE02F02A29C2060C48506659D34FBABC28B4B851E5C1FCC8CF5FDF55AF6FBA09025B59626E54594AD082257FB22ECE3A820D4918EE4F9B27F3BFB37C9
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj-QO5R4_ig_UM_6BTEvsUm0pVZPSI45Qh8HhMXpcfZ0-H_jz5gjdjFcqhl8Q2uekFcLFceEEhLFJKexQwJQYE-YZPPmEfmF2tz8ibp1V0Knp5fHHCZZeU1&t=637356698800000000
Preview:	..RadAjax .raDiv,.RadAjax .raColor{width:100%;height:100%;margin:0;padding:0}.RadAjax .raDiv{position:relative;z-index:2;background-color:transparent;background-position:center center;background-repeat:no-repeat}.RadAjax .raColor{position:absolute;top:0;left:0;z-index:1;background-image:none}.RadAjax .raTransp{zoom:1;filter:alpha(opacity=70);opacity:.7}.RadAjax .raTop{background-position:center top}.RadAjax .raTopLeft{background-position:left top}.RadAjax .raTopRight{background-position:right top}.RadAjax .raLeft{background-position:left center}.RadAjax .raRight{background-position:right center}.RadAjax .raBottom{background-position:center bottom}.RadAjax .raBottomLeft{background-position:left bottom}.RadAjax .raBottomRight{background-position:right bottom}.RadAjax div.raNone{background-image:none}

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1105
Entropy (8bit):	4.982009692563923
Encrypted:	false
SSDEEP:	24:houJYuDWJOuJdB39cT0Rel5wBoxaFhBsDOqJP:jnqFcHltMBsDOql
MD5:	8C089AD2990BD0125DD3B8B4C690A9F3
SHA1:	3A41E3E8313C80ACBB8A1415BC593CBDD04FDBCD
SHA-256:	8D2B3B3F10CA6C187D1743874258809EDABC2E3ACBD05AA810E68DB6C63DADA0
SHA-512:	2E325A5BAA0FC1B873B0CC199458CBBB989B4F011C8C62EA68E64627D99A60535CA3D9DFD345E1E473B1D5E2729E6B42E378FEF6C74BF5E8F1E71F31DE768C38
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/material-icons.css
Preview:	@font-face {.. font-family: 'Material Icons';.. font-style: normal;.. font-weight: 400;.. src: url(MaterialIcons-Regular.eot); /* For IE6-8 /.. src: local('Material Icons'),.. local('MaterialIcons-Regular'),.. url(MaterialIcons-Regular.ttf) format('truetype');..}.....material-icons {.. font-family: 'Material Icons';.. font-weight: normal;.. font-style: normal;.. font-size: 24px; / Preferred icon size /.. display: inline-block;.. line-height: 1;.. text-transform: none;.. letter-spacing: normal;.. word-wrap: normal;.. white-space: nowrap;.. direction: ltr;.... / Support for all WebKit browsers. /.. -webkit-font-smoothing: antialiased;.. / Support for Safari and Chrome. /.. text-rendering: optimizeLegibility;.... / Support for Firefox. /.. -moz-osx-font-smoothing: grayscale;.... / Support for IE. /.. font-feature-settings: 'liga';..}..../ Icon sizing */...material-icons.md-18 {...font-size: 18px;..}.....material-icons.md-24 {...font-size: 2

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (651)
Category:	downloaded
Size (bytes):	52854
Entropy (8bit):	5.393694093026409
Encrypted:	false
SSDEEP:	768:9TxvQ/fUi/wlspzKIopx43JclwPQw7MQrZOxBsC6T8vo7J4T6yLbTMt:BxvQ/fUi/5mlwoQMQrykQC
MD5:	EE4398C8C426D971EA29CBAA42D79F51
SHA1:	773EF3843708FFB4F357C5425820FFF4BE564128
SHA-256:	EC18F578C88849B492D2199102714284F50CB3EBA8C81F95DA3876F82FB0438E
SHA-512:	A428A643794DE8ABA3C36FD0B0FE1670549DC13FB9586D267FAB65C2B564F3B60314C8A465626231DD8923501D4E2164763E41AFBAF0CF427C6B73587E8B7902
Malicious:	false
Reputation:	low
URL:	https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js
Preview:	;/* Version ebf1620b3b847dfbf76f6e109dcacd8e v:22.4.0.3721, c:b473f94ba4c6cdf50fa092395b9896b98d086627, b:22.4.0.3721 /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var k=window.ADRUM;if(k&&k.q&&!0!==window["adrum-disable"]){var y=window.console,A=y&&"function"==typeof y.log?y:{log:function(){

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (697)
Category:	downloaded
Size (bytes):	26692
Entropy (8bit):	5.4347253351042655
Encrypted:	false
SSDEEP:	384:jzw4KZaW9x9daEOEjCpNOmK4BmvPMk5ZZKLqYk4ZZ4+:jKdOqCemK4aMsaqY7j
MD5:	9A0A70D7C47ECD0D29B3B7F6C8FB9E9F
SHA1:	6338505E77E570BC12ECC9AC13C9DFFAF79B38F8
SHA-256:	9FB91FF0E8C179AEA40DBE6842B36FD201654F5647C21DCEC41FD18BE535D506
SHA-512:	C9EB1D3CE8C847FCA6B27BBD8441D6F1820A266B56BA29367F604EFF555EF62D40DA0DBEB82DD7C70503C9401C8B4F3C11C22AF19D0D71B3A64DDEEAAE2ECC8C
Malicious:	false
Reputation:	low
URL:	https://cdn.perfdrive.com/aperture/aperture.js
Preview:	try{(function(a,g){function D(b,c){var f=null;if("undefined"!==typeof c\|\|!0===c\|\|"true"===c){K=g.cookie.split(";");var e=new RegExp("^\\s"+b+"=\\s(.?)\\s$")}else if("undefined"===typeof c\|\|0==c\|\|"false"==c\|\|0==c\|\|null==c)e=new RegExp("^\\s"+b+h+"=\\s(.?)\\s$");for(var d=0;d<K.length&&(f=K[d].match(e),null===f);d++);return f}function U(b,c,f){try{g.cookie=b+"="+c+"; expires="+Y+"; path=/; domain="+f+";";var e=D(b,!0);if("undefined"!==typeof e&&null!==e&&!1!==e)e=e[1];else return!1;return e}catch(d){return!1}}. function L(){var b=a.location.hostname.split("."),c=[],f="_"+Math.floor(1E10*Math.random());if(0<b.length)if("www"==b[0]&&b.splice(0,1),1<b.length){for(var e=b.length-2;0<=e;e--)c.push(b.slice(e).join("."));for(e=0;e<c.length;e++){b=U("__sstester",f,c[e]);try{g.cookie="__sstester= 0; expires= Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain="+c[e]+";"}catch(d){}if("undefined"!==typeof b&&!1!==b&&null!==b&&b==f)return U("__ssds",e+2,c[e]),e+2}}else return!1;else return!1}va

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1612
Entropy (8bit):	5.136846962796849
Encrypted:	false
SSDEEP:	48:cELPKdlm5+LkaSWlt1HV7XLOviiZs5Ae9hL+VO:xPKdkrhWdHV/OviVAKn
MD5:	A87D3850028E2890D5D51853F9BE8EF3
SHA1:	AA4749C12034332819CACBB83E08F4A7F2D9B660
SHA-256:	060AE789E740B1971A4AF9FC229F09C20B571FF070ADFF7A8CD21F70D44CE137
SHA-512:	37F67A32AC679DC6A81A9329CC6DD5F6FC78C5C3C2B4A9FCC95BBED0D4BD1F0A2993548F7230AF14F37AABEC1D1ED5C6A34C0E1FC15080D4407CDAC483C17C8F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com -->...<title>Wires White</title>...<desc>Created with Sketch.</desc>...<defs>....<path fill="#000000" d="M12,7.86369594 L15,4.93184797 L12,2 L12,3.94888598 C7.58,3.94888598 4,7.46788991 4,11.8125819 C4,13.3558322 4.46,14.7909567 5.24,16 L6.7,14.5648755 C6.25,13.749017 6,12.8053735 6,11.8125819 C6,8.55897772 8.69,5.91480996 12,5.91480996 L12,7.86369594 Z M17.3,9.43512451 C17.74,10.2608126 18,11.1946265 18,12.1874181 C18,15.4410223 15.31,18.08519 12,18.08519 L12,16.1363041 L9,19.068152 L12,22 L12,20.051114 C16.42,20.051114 20,16.5321101 20,12.1874181 C20,10.6441678 19.54,9.20904325 18.76,8 L17.3,9.43512451 Z" id="path-1"></path>...</defs>...<g id="Wires-White" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">....<mask id="mask-2" fill="

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 131, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	45863
Entropy (8bit):	7.984570984166679
Encrypted:	false
SSDEEP:	768:svA+w22YBZRb1dxzT2VMI+K1D/IgAhY6FEoZfYssT2B0h+9W0ReBxjN7lUVxK+cz:oAkVhPxzTQXbZzAhFnZf+T/PGetlUVxw
MD5:	1BDFA66F99ABA2E3DC0FFE0469703976
SHA1:	B7571F7176A5EFFA80046CBEB40852DF4DB0D4C1
SHA-256:	9BBA384D345CBE7105E505DAC5D8FDAC128841BA097FE104856C8CF51647AC3C
SHA-512:	1846D396C72CEDD448B18D5D2A036E1D4BB550DFE6EC23788452470F2B17FB04F8CCD3C0D779DE93DCDB6192A3CB47348D4651C02C89503A7AF549FD5D08FF43
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/img/BANGOR.png
Preview:	.PNG........IHDR..............0.....gAMA......a.....pHYs...t...t..f.x....IDATx^...%..6\|Wf.m.......;w...e..@.C..#@.....1B.B. ..\.Ya}gw.z..sN.;..d.........].]u........G4.BH6^.p...0&...B$.'[..h..X.z8f.@!.I....z.~.....T...>./. ...>........%....QH..[4....!x.\..s.p... .m..2.A#U.R..G..u...#....(. .^......q....>.7.;...z.~.v.4..3B....y...N)M...p..\9...\8.p.1H[....Q..~..3<~.a.......u{&.'\..%..?......owy.\|.I.1.d3.4/F"^..r.l.....S<k.j...\..s... m.j.....d.[..#...V.I-...wd..B. ..4.......6...X...g%.-..^F.Sh.R..f.a+...5/.b-..sa..v8....4.Q.../.Y...)......8.~...9....8..F`.......7..c...#....@.......qO.].zC.1..=.k..h......r"q...sa.......<..LQ......fi.@.I.....p.h2f....c...?...On...-.........].~...s.#...................?.o\|.5.f`l...k.CB..c.0.Y.H..4g@..FP6.E!.X.d.\..s.........P.R.2.q.....ixv..h.al3.O.n..Gn..]UW..yn.'.K...H,JJ(N./M.+M..L..L..O.K.)M.-KN(O]\..X......K...../..._n~.)c.f....F...}.....x.d$.E8.(x."-.....0.f....4..N.g.T.......Se.a.i..Ol..?~.z.U....W..V.2.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 131, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	45863
Entropy (8bit):	7.984570984166679
Encrypted:	false
SSDEEP:	768:svA+w22YBZRb1dxzT2VMI+K1D/IgAhY6FEoZfYssT2B0h+9W0ReBxjN7lUVxK+cz:oAkVhPxzTQXbZzAhFnZf+T/PGetlUVxw
MD5:	1BDFA66F99ABA2E3DC0FFE0469703976
SHA1:	B7571F7176A5EFFA80046CBEB40852DF4DB0D4C1
SHA-256:	9BBA384D345CBE7105E505DAC5D8FDAC128841BA097FE104856C8CF51647AC3C
SHA-512:	1846D396C72CEDD448B18D5D2A036E1D4BB550DFE6EC23788452470F2B17FB04F8CCD3C0D779DE93DCDB6192A3CB47348D4651C02C89503A7AF549FD5D08FF43
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............0.....gAMA......a.....pHYs...t...t..f.x....IDATx^...%..6\|Wf.m.......;w...e..@.C..#@.....1B.B. ..\.Ya}gw.z..sN.;..d.........].]u........G4.BH6^.p...0&...B$.'[..h..X.z8f.@!.I....z.~.....T...>./. ...>........%....QH..[4....!x.\..s.p... .m..2.A#U.R..G..u...#....(. .^......q....>.7.;...z.~.v.4..3B....y...N)M...p..\9...\8.p.1H[....Q..~..3<~.a.......u{&.'\..%..?......owy.\|.I.1.d3.4/F"^..r.l.....S<k.j...\..s... m.j.....d.[..#...V.I-...wd..B. ..4.......6...X...g%.-..^F.Sh.R..f.a+...5/.b-..sa..v8....4.Q.../.Y...)......8.~...9....8..F`.......7..c...#....@.......qO.].zC.1..=.k..h......r"q...sa.......<..LQ......fi.@.I.....p.h2f....c...?...On...-.........].~...s.#...................?.o\|.5.f`l...k.CB..c.0.Y.H..4g@..FP6.E!.X.d.\..s.........P.R.2.q.....ixv..h.al3.O.n..Gn..]UW..yn.'.K...H,JJ(N./M.+M..L..L..O.K.)M.-KN(O]\..X......K...../..._n~.)c.f....F...}.....x.d$.E8.(x."-.....0.f....4..N.g.T.......Se.a.i..Ol..?~.z.U....W..V.2.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	1023385
Entropy (8bit):	5.082513692965873
Encrypted:	false
SSDEEP:	6144:1oMUd0PQNk6hNO6mXiF2GidCyiuY0VtoGu:VXPGidCyiuY0VtG
MD5:	81BFE7B6BAE354B95E0A8C71AD15EA4E
SHA1:	ECC2D54B0AEE76892D2870987EE26B6D8A1E7272
SHA-256:	01B42BAAC83AC076D2CC35EBC2FE8C1C9E3A39BC59896F62B14AC1EBDB6C6B08
SHA-512:	BE2720783007DFFA287AC793893B2A2E6238377B3CE6A83DA562A91213CAE5F09ED0FE51A4D7BFD0A8E16D9EF9917EF8030D90FE514F3F82BB956A205EFFE94F
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7
Preview:	..RdcModule .mainmodule button.rdc-camera,.action-textbox-container>button{background-position-x:center !important;background-position-y:center !important}.icon-right-arrow>span,.icon-left-arrow>span,.icon-zoom-out>span,.icon-zoom-in>span,.icon-right-chevron>span,.icon-left-chevron>span,.icon-tooltip>span,.icon-close>span,.module_confirmation_close_imagebutton>span,.simple-list-view-delete-icon li a:nth-of-type(2)>span,.ui-dialog .ui-dialog-titlebar .ui-dialog-titlebar-close>span,.ui-helper-hidden+message-overlay .overlay-close-icon>span,.content-viewer-container .zoom-container .icon-download>span,.calendar-icon>span{position:fixed;right:-10000px}.dropdown-selector .icon-collapse>div{position:fixed;right:-10000px}@font-face{font-family:'Montserrat';font-style:normal;font-weight:400;src:url(App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff) format("woff")}@font-face{font-family:'Montserrat';font-style:normal;font-weight:600;src:url(App_Themes/Theme5/spacecoast/fon

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2105
Entropy (8bit):	5.22080252988827
Encrypted:	false
SSDEEP:	48:hD/Ci0MiGNNrCrCryPOrtEErgioBzuyOk/EJd:bSGHrCrCrymriErPoBD7EJd
MD5:	1A8244850EB3AE5A94862C4363F549B8
SHA1:	FD3F90FCB32E1AE287DA38E9133C94BF423BC29E
SHA-256:	926172C6F78BAD8D437E449A3309EA0DE03199F2BC0D2101899F3CE99DF04F4B
SHA-512:	893A49E2B594883525354F8FF642DD2C396C197583D118CEEC5CBDEEA76568C2390281DA291259FF4425892AFEBD7E74A2A774FCC50C98164DD542D3027B25C3
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css
Preview:	/* r.a.d.dock default skin /.....RadDockingZone..{...background: white;...border: 0;...padding: 0px;..}.....RadDockableObjectFixed..{...border-top: solid 1px #e5e5e5;...border-left: solid 1px #e5e5e5;...border-right: solid 1px #b7b7b7;...border-bottom: solid 1px #b7b7b7;...background-color: white;..}.....RadDockableObjectDisabled .RadDockableObjectTitleBar..{...display: block;..}.....RadDockableObjectDisabled..{...border: solid 0px white;...padding: 0px;...margin: 0px;...background-color: white;..}.....RadDockableObjectResizeable..{...border: solid 1px #868b8f;...background-color: #fbfbfb;..}..../ titlebar start /.....RadDockableObjectTitleBarLeft..{...width: 4px;...height: 24px;...background: white url('Img/titleBarBg.gif') no-repeat;..}.....RadDockableObjectTitleBarRight..{...width: 1px;...height: 24px;...background: white url('Img/titleBarBg.gif') repeat-x;..}.....RadDockableObjectTitle..{...background: white url('Img/titleBarBg.gif') repeat-x;..}..../ titlebar text */.....RadDo

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	271563
Entropy (8bit):	7.921493226308478
Encrypted:	false
SSDEEP:	6144:daqNCuuRrLWkOriz6XDXfi/fKZcJiTV+2FOSaIY:daqkuuRrL+9XTZWAta3
MD5:	F0C6F78E040226C7D10695933B9A25A7
SHA1:	FC56918D6DA9A1810DCF64BEFCC9F7082971C5E0
SHA-256:	B4F957811A348BA78BF5B02DB3AA00E26E37C9E69987F5D459247DD0A1A70E61
SHA-512:	39F71EDB4E7DE88023D1BD4E0DF0E472AA6B9FB16B384557201DA81E74F559EBE4C1BD0640CEB38336C93E9A05846A5332B5D628D27F53962E6F9445B7D4D32E
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg
Preview:	.....@Exif..MM.*...........................8...........................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 22.1 (Macintosh).2021:02:01 14:50:27..............0231...................................8...............................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Z...4.=.r\..%V...'.9..I..;...z#\.......X..........:..A...b.....=.a-..G.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12107
Entropy (8bit):	4.118290925600839
Encrypted:	false
SSDEEP:	192:ych6/pumchwJayuAXQHavGzUIBRHHa2UGUmRUG:1h6/YphwJN8QUUvLG
MD5:	C7B060B7604197D6A0B12648830D9EE8
SHA1:	106494AAA57A809C485AEFF1DCF43421250F17BE
SHA-256:	88978628E57207E83A74D047CA5AA90B9435741822FBEFFF1F1B9475FA1CBDB3
SHA-512:	6684BF8AF528ED534786D6463C981B56C0A995DFE1B6A6E5C5D8B5A6631DA39632563615EDB27F15B195D68D86AFD955F0A3D5CDA1D3F525AC7D3C47DFF92135
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: Sketch 64 (93537) - https://sketch.com -->.. <title>Logo</title>.. <desc>Created with Sketch.</desc>.. <g id="Logo" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <path fill="#000000" d="M22.1176284,5 L22.1176284,8.89997282 L10.7924229,8.89997282 L10.7924229,15.5724382 L22.1176284,15.5724382 L22.1176284,19.5093775 L10.7924229,19.5093775 L10.7924229,30.8211471 L5.53846154,30.8211471 L5.53846154,5 L22.1176284,5 Z M28.8504825,5.57298179 C29.5899326,5.57298179 30.2255907,5.82558414 30.7574759,6.33079641 C31.289361,6.83600869 31.5552996,7.43978991 31.5552996,8.1421582 C31.5552996,8.81988198 31.2926042,9.42058269 30.7672054,9.94427834 C30.2418067,10.467974 29.6029054,10.7298179 28.8504825,10.7298179 C28.1240052,10.7298179 27.4915903,10.467974 26.9532187

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	271563
Entropy (8bit):	7.921493226308478
Encrypted:	false
SSDEEP:	6144:daqNCuuRrLWkOriz6XDXfi/fKZcJiTV+2FOSaIY:daqkuuRrL+9XTZWAta3
MD5:	F0C6F78E040226C7D10695933B9A25A7
SHA1:	FC56918D6DA9A1810DCF64BEFCC9F7082971C5E0
SHA-256:	B4F957811A348BA78BF5B02DB3AA00E26E37C9E69987F5D459247DD0A1A70E61
SHA-512:	39F71EDB4E7DE88023D1BD4E0DF0E472AA6B9FB16B384557201DA81E74F559EBE4C1BD0640CEB38336C93E9A05846A5332B5D628D27F53962E6F9445B7D4D32E
Malicious:	false
Reputation:	low
Preview:	.....@Exif..MM.*...........................8...........................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 22.1 (Macintosh).2021:02:01 14:50:27..............0231...................................8...............................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Z...4.=.r\..%V...'.9..I..;...z#\.......X..........:..A...b.....=.a-..G.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/OnlineBanking/
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1282), with CRLF line terminators
Category:	downloaded
Size (bytes):	10675
Entropy (8bit):	4.891876124823063
Encrypted:	false
SSDEEP:	96:TsHiiXiVO0uLE9na7lJ+tYB6L42txbrZnRkOkJgNPxh5/pDV/Lz/bgBCqJ8E2K:TsHiiXiVruPlAqB6L42bZPlxh9HiZ
MD5:	0A3CE2228F2F22274863B65F36A963BD
SHA1:	98031AD699262164F204089F48BB9639618E42C9
SHA-256:	ACE2207853D903F423CCAE9AA51943B37190CB7CD90EA9107CDA631E0104AF6C
SHA-512:	72B3FD9BE68CC2CBE92A0A2E59D32E97EFC43AEA7AEF450B261DEC24CFFC275B9EBC41ADF0C23E5FB64AE7BE9D8CD2394DCAA7773A94C212B4C09778CB43EF23
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/personal.html
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml" lang="en-us" xml:lang="en-us" class="t-chrome t-chrome104" style="--vh:570px;">..<head id="M_head">.. <script type="text/javascript" async="" src="https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js"></script>.. <script async="" src="https://cdn.perfdrive.com/aperture/aperture.js"></script>.. <link href="css/opensans.css" type="text/css" rel="stylesheet">.. <link href="css/material-icons.css" type="text/css" rel="stylesheet">.. <link href="css/angular.css" type="text/css" rel="stylesheet">.. <link href="css/opensans.css" type="text/css" rel="stylesheet">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <title>.. Retail Registration - FNBO.. </title> .. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.. <link href="https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 29, 2024 12:13:12.397804022 CEST	49675	443	192.168.2.4	173.222.162.32
May 29, 2024 12:13:12.444745064 CEST	49678	443	192.168.2.4	104.46.162.224
May 29, 2024 12:13:21.540102959 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:21.540153027 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:21.540442944 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:21.540483952 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:21.540505886 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:21.540553093 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:21.540802002 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:21.540815115 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:21.541106939 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:21.541120052 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.008996964 CEST	49675	443	192.168.2.4	173.222.162.32
May 29, 2024 12:13:22.573889017 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.576510906 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:22.576527119 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.577563047 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.578787088 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:22.578787088 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:22.578851938 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.580461979 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:22.580468893 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.633241892 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:22.636661053 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.636925936 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:22.636945009 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.638030052 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.638108969 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:22.638448000 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:22.638534069 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.680228949 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:22.680247068 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:22.726269007 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.295310020 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.295334101 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.295341015 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.295362949 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.295382977 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.295408010 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.295424938 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.295444012 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.295470953 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.295491934 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.315716982 CEST	49737	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.315737963 CEST	443	49737	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.464844942 CEST	49740	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.464867115 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.464931011 CEST	49740	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.465650082 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.465687990 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.465729952 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.467938900 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.467951059 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.468076944 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.470518112 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.470527887 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.470581055 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.470973015 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.471788883 CEST	49740	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.471803904 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.472675085 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.472687960 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.473345041 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:23.473371029 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:23.473412991 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:23.475100994 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.475115061 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.475428104 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.475450993 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.476155996 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:23.476182938 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:23.476233959 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:23.479448080 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:23.479468107 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:23.480030060 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:23.480046988 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:23.481673956 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:23.481703997 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:23.481764078 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:23.482598066 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:23.482618093 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:23.482670069 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:23.483151913 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:23.483177900 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:23.483247995 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:23.483876944 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:23.483891010 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:23.484301090 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:23.484334946 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:23.484828949 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:23.484842062 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:23.512497902 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.882983923 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.883012056 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.883053064 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.883076906 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.883090019 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.883130074 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.887953997 CEST	49736	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:23.887978077 CEST	443	49736	152.42.220.64	192.168.2.4
May 29, 2024 12:13:23.967374086 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:23.968120098 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:23.968139887 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:23.969434023 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:23.969515085 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:23.971395969 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:23.971486092 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:23.972228050 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:23.972243071 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.024697065 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.027406931 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.029917955 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.031620026 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.031634092 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.031956911 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.031975031 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.032788038 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.032852888 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.033618927 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.033685923 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.035442114 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.035531044 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.036001921 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.036184072 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.036192894 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.036268950 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.036416054 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.036425114 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.072199106 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.072331905 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.072384119 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.072405100 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.072545052 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.072593927 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.072613001 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.072701931 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.072794914 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.072813988 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.072823048 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.072920084 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.072926998 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.073255062 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.073318005 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.073326111 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.073409081 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.073477983 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.073484898 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.085031986 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.085262060 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.116597891 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.116612911 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.121758938 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:24.121802092 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:24.121884108 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:24.122565985 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:24.122595072 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:24.163244009 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.163357973 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.163358927 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.163391113 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.163455009 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.163570881 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.163662910 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.163724899 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.163734913 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.163774014 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.163813114 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.163994074 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.164079905 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.166995049 CEST	49745	443	192.168.2.4	130.211.29.114
May 29, 2024 12:13:24.167015076 CEST	443	49745	130.211.29.114	192.168.2.4
May 29, 2024 12:13:24.205296040 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:24.205583096 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.205821037 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:24.205832005 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:24.206270933 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.206295967 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.206861973 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:24.206954002 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:24.207480907 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.207545042 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.208700895 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.208771944 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.208899975 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.208909035 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.209193945 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:24.209256887 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:24.209404945 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:24.209410906 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:24.227652073 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.227781057 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.227910995 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.227965117 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.227965117 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.229882002 CEST	49748	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.229896069 CEST	443	49748	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.255418062 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:24.255418062 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.447170973 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.468045950 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:24.468137026 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:24.468206882 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:24.469058037 CEST	49746	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:24.469073057 CEST	443	49746	54.195.39.4	192.168.2.4
May 29, 2024 12:13:24.489804983 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.494986057 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.494997978 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.495050907 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.495063066 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.495071888 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.495148897 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.495179892 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.495210886 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.495238066 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.495268106 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.534662008 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.534686089 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.534696102 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.534708977 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.534715891 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.534734964 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.534739971 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.534764051 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.534780979 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.534807920 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.537064075 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.537091017 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.537118912 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.537127972 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.537167072 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.537174940 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.537245989 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.544565916 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.544612885 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.544637918 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.544646978 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.544680119 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.544696093 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.566473007 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.566706896 CEST	49740	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.566723108 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.567061901 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.567481995 CEST	49740	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.567540884 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.567850113 CEST	49740	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.583775043 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.583875895 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.583933115 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.583975077 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.583992958 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.584027052 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.584156036 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.584203005 CEST	443	49744	13.227.219.49	192.168.2.4
May 29, 2024 12:13:24.584214926 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.584323883 CEST	49744	443	192.168.2.4	13.227.219.49
May 29, 2024 12:13:24.585222960 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.585439920 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.585458040 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.589082956 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.589163065 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.589483976 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.589613914 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.589620113 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.589664936 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.607043028 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.607069016 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.607111931 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.607135057 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.607148886 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.607177019 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.607451916 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.607964039 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.607976913 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.609039068 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.609102964 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.609607935 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.609607935 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.609620094 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.609694958 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.609829903 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.610019922 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.610033035 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.611148119 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.611563921 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.611660004 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.611740112 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.612495899 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.627263069 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.627286911 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.627361059 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.627377987 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.627404928 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.627423048 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.630424976 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.630434990 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.661654949 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.661658049 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.661674023 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:24.676379919 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:24.676417112 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:24.676630020 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:24.677342892 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.684839964 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:24.684863091 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:24.704068899 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:24.923094988 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.923108101 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.923145056 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.923261881 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.923307896 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.923317909 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.923348904 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.923358917 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.923378944 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.923401117 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.924185991 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.924215078 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.924248934 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.924254894 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.924271107 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.925301075 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.925328970 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.925369978 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.925379038 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.925425053 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.929666042 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.929703951 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.929742098 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.929752111 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.929783106 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.930531025 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.930556059 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.930600882 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.930605888 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.930633068 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.931478977 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:24.932586908 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.932615042 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.932672977 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.932679892 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.932718992 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.933437109 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.933458090 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.933506012 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.933511019 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.933552980 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.933737040 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:24.933756113 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:24.934767008 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:24.934859037 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:24.935543060 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.935585976 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.935600996 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.935606956 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.935637951 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.936631918 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.936654091 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.936686039 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.936691999 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.936723948 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.938440084 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.938461065 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.938519001 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.938525915 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.938540936 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.939699888 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.939726114 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.939755917 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.939762115 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.939790964 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.940182924 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:24.940273046 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:24.941314936 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.941334009 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.941370964 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.941380978 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.941415071 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.942508936 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.942534924 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.942573071 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.942579985 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.942609072 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.942899942 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.942923069 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.942967892 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.942974091 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.942996979 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.943861008 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.943914890 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.943923950 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.943932056 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.943980932 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.944134951 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.944152117 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.944186926 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.944191933 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.944220066 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.976227045 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.976269960 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.976394892 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.976394892 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.976433039 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.976524115 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.976540089 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.976572990 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.976582050 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.976598024 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.976778030 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.976808071 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.976840973 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.976846933 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.976861000 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.977114916 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.977152109 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.977175951 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.977181911 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.977209091 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.977358103 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.977375984 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.977437019 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.977443933 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.977464914 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.977804899 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.977828026 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.977857113 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.977863073 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.977895021 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.978323936 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.990060091 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:24.990082026 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:24.998186111 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.998209000 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.998258114 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.998269081 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.998302937 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.998492956 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.998519897 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.998554945 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:24.998560905 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:24.998653889 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.041101933 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:25.044058084 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.069196939 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069226980 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069266081 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069274902 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.069293022 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069330931 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.069386005 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.069679976 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069705009 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069741011 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.069746971 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069761992 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.069792032 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069824934 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069840908 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.069847107 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.069876909 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.070050001 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.070061922 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.070096016 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.070102930 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.070126057 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.070349932 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.070379019 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.070408106 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.070414066 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.070429087 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.091046095 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.091073990 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.091114998 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.091130018 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.091160059 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.091214895 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.091233969 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.091265917 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.091270924 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.091290951 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.102312088 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.162357092 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.162389994 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.162472010 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.162506104 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.162549973 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.162612915 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.162635088 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.162681103 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.162687063 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.162704945 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.162729025 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.163069010 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.163088083 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.163127899 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.163132906 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.163161039 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.163182974 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.163481951 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.163497925 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.163532972 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.163538933 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.163566113 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.163583994 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.163775921 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.163799047 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.163861036 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.163867950 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.163904905 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.164052010 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.164067984 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.164099932 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.164107084 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.164132118 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.164149046 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.184232950 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.184259892 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.184314013 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.184343100 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.184365034 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.184495926 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.184515953 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.184544086 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.184551954 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.184572935 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.184600115 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.238436937 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.254443884 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.254504919 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.254534006 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.254559994 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.254582882 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.254612923 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.255960941 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.255985022 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.256022930 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.256032944 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.256067038 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.256083012 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.256583929 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.256607056 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.256638050 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.256647110 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.256674051 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.256690979 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.256979942 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.256997108 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.257050991 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.257059097 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.257097006 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.257333040 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.257352114 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.257384062 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.257391930 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.257419109 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.257433891 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.257654905 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.257678032 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.257707119 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.257713079 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.257744074 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.257761002 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.277484894 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.277508974 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.277553082 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.277578115 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.277612925 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.277635098 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.277826071 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.277842045 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.277873039 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.277879953 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.277904034 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.277919054 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.317516088 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.317542076 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.317548037 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.317609072 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:25.317615986 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.317656040 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:25.319346905 CEST	49742	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:25.319367886 CEST	443	49742	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.347136974 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.347166061 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.347220898 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.347255945 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.347278118 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.348850012 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.349495888 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.349514008 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.349580050 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.349589109 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.349605083 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.349627972 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.349633932 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.349649906 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.349659920 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.349697113 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.349701881 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.349746943 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.350143909 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350157976 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350200891 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.350208998 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350251913 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350255966 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.350261927 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350276947 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350306988 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.350312948 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350336075 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.350341082 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350353003 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.350357056 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350380898 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.350387096 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.350421906 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.370774984 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.370801926 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.370846033 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.370872021 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.370893002 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.370959997 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.370970011 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.370984077 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.371022940 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.371030092 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.371063948 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.379949093 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.379973888 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.380033970 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.380069971 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:25.380069971 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:25.381304979 CEST	49743	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:25.381325006 CEST	443	49743	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.440033913 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.440069914 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.440138102 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.440171957 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.440196037 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.440243006 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.442106009 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.442125082 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.442161083 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.442163944 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.442188025 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.442203999 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.442210913 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.442246914 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.442260981 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.442333937 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.442375898 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.443572044 CEST	49747	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:25.443593979 CEST	443	49747	66.22.0.11	192.168.2.4
May 29, 2024 12:13:25.570183992 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:25.570255995 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.578629017 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.578660011 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:25.579024076 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:25.627419949 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.716660976 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.760500908 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:25.904141903 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:25.917062044 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.917097092 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:25.917109013 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.917516947 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:25.917608976 CEST	443	49750	184.28.90.27	192.168.2.4
May 29, 2024 12:13:25.917660952 CEST	49750	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.962054968 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.962140083 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.962177992 CEST	49740	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:25.967884064 CEST	49740	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:25.967904091 CEST	443	49740	152.42.220.64	192.168.2.4
May 29, 2024 12:13:25.992456913 CEST	49751	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.992491007 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:25.992650986 CEST	49751	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.992867947 CEST	49751	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:25.992880106 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:26.088375092 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.088413954 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.088422060 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.088475943 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:26.088524103 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.143390894 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:26.401618958 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.401659012 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.401736021 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.402019978 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.402034998 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.424523115 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.424534082 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.424575090 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.424621105 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:26.424701929 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:26.425550938 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.425559998 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.425581932 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.425640106 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:26.426278114 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.426287889 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.426301003 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.426338911 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:26.426388025 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:26.427414894 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.427448034 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:26.427489996 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:26.427521944 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:26.496896982 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.496959925 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.497167110 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.497430086 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.497441053 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.497634888 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.497740984 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.497761965 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.497996092 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.498016119 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.500155926 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.500195980 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.500278950 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.500818968 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.500838041 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.500919104 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.501331091 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.501351118 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.501554012 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.501566887 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.666766882 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:26.666954041 CEST	49751	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:26.684109926 CEST	49751	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:26.684129953 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:26.684425116 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:26.687221050 CEST	49751	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:26.732501984 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:26.916084051 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.916512966 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.916527033 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.917064905 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.918464899 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.918548107 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.918714046 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.960510015 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:26.960537910 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:26.971447945 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:26.971534014 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:26.972223043 CEST	49751	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:26.973387957 CEST	49751	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:26.973411083 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:26.973844051 CEST	49751	443	192.168.2.4	184.28.90.27
May 29, 2024 12:13:26.973850965 CEST	443	49751	184.28.90.27	192.168.2.4
May 29, 2024 12:13:27.012976885 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.013818979 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.014138937 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.014156103 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.014636993 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.014672995 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.014729023 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.015302896 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.015357018 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.015366077 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.015377045 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.015757084 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.016036987 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.016108990 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.016165018 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.016217947 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.016410112 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.016446114 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.016458035 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.016460896 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.016820908 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.017057896 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.017148972 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.017616987 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.017672062 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.017930031 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.017941952 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.018557072 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.018629074 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.018949986 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.018959999 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.019392014 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.019397974 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.019427061 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.064508915 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.069444895 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.069447994 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.069598913 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.138338089 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.138391972 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.138561010 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.138561010 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.138621092 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.162686110 CEST	49752	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.162704945 CEST	443	49752	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.207555056 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.207580090 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.208211899 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.208504915 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.208518982 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.248110056 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.248214960 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.248383999 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.249142885 CEST	49754	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.249167919 CEST	443	49754	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.254961014 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.254990101 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.255136967 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.255357981 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.255374908 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.272311926 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.272350073 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.272362947 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.272382975 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.272392035 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.272412062 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.272442102 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.272461891 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.272474051 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.272531986 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.275579929 CEST	49756	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.275592089 CEST	443	49756	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.284497023 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.284540892 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.284641027 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.284977913 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.285017014 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.361167908 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.361205101 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.361278057 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.361324072 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.361324072 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.450638056 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.450664997 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.450711012 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.450762987 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.450787067 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.450834036 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.519401073 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.519427061 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.519510984 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.519531012 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.519572973 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.540165901 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.540198088 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.540251017 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.540283918 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.540302992 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.540328026 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.572508097 CEST	49755	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.572556973 CEST	443	49755	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.584245920 CEST	49761	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:27.584296942 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:27.584498882 CEST	49761	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:27.588896990 CEST	49761	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:27.588913918 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:27.590771914 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.590827942 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.591074944 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.591346979 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.591358900 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.597096920 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.597193003 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.597279072 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.597727060 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.597759962 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.608215094 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.608244896 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.608329058 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.608350039 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.608395100 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.609728098 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.609746933 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.609812021 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.609821081 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.609846115 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.609860897 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.610744953 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.610759974 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.610835075 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.610840082 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.610872984 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.629657030 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.629673958 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.629723072 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.629729986 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.629797935 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.650939941 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:27.651058912 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:27.651107073 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:27.651107073 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:27.651385069 CEST	49741	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:27.651405096 CEST	443	49741	152.42.220.64	192.168.2.4
May 29, 2024 12:13:27.697648048 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.697668076 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.697721958 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.697734118 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.697771072 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.698391914 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.698409081 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.698451042 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.698455095 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.698492050 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.699356079 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.699373007 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.699415922 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.699419975 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.699472904 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.700320959 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.700337887 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.700362921 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.700406075 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.700409889 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.700444937 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.701150894 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.701165915 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.701210976 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.701215982 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.701250076 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.702212095 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.702225924 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.702444077 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.702471018 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.702519894 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.719193935 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.719212055 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.719263077 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.719269991 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.719305992 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.726571083 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.726844072 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.726854086 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.727883101 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.727936983 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.728286028 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.728334904 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.728427887 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.728435040 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.768001080 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.786966085 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.786987066 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.787043095 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.787056923 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.787105083 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.787359953 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.787374973 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.787414074 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.787419081 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.787460089 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.787600040 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.787651062 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.787651062 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.787672997 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.787688971 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.787705898 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.787738085 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.788230896 CEST	49753	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.788249969 CEST	443	49753	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.795058012 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.795316935 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.795326948 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.798881054 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.798943043 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.799417973 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.799587965 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.799659967 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.799664974 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.806190014 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.810782909 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.810806036 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.811853886 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.811922073 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.812391996 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.812444925 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.812611103 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.812618017 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.848041058 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.852236032 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.947410107 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.947437048 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.947482109 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.947494984 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.947505951 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:27.947551012 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.948627949 CEST	49758	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:27.948632956 CEST	443	49758	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.010843039 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.010953903 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.011029005 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.011877060 CEST	49759	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.011897087 CEST	443	49759	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.024629116 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.024699926 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.024739981 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.024758101 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.024791002 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.024805069 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.024825096 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.024836063 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.024885893 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.024979115 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.025022984 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.026297092 CEST	49760	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.026318073 CEST	443	49760	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.102529049 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.104449034 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.108164072 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.108200073 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.108319044 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.108331919 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.109111071 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.109179020 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.109436035 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.109481096 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.110225916 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.110280991 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.110745907 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.110754013 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.111471891 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.111557961 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.111670971 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.111676931 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.163060904 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.163280010 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.259938955 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.259978056 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.260056973 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.260493994 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.260507107 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.303067923 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:28.329008102 CEST	49761	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:28.329025984 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:28.329551935 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:28.330462933 CEST	49761	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:28.330559969 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:28.330876112 CEST	49761	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:28.335841894 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.335865021 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.335927010 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.335933924 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.335983992 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.376496077 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:28.381530046 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.381558895 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.381568909 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.381601095 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.381614923 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.381618023 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.381618977 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.381642103 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.381722927 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.448612928 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.448714972 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.448734045 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.448766947 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.564543962 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:28.564640999 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:28.564838886 CEST	49761	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:28.793020010 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.854331017 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.927694082 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:28.927700996 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.928203106 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:28.930716038 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:28.930818081 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:28.930912018 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:28.972491980 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.048989058 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:29.049026012 CEST	443	49767	152.42.220.64	192.168.2.4
May 29, 2024 12:13:29.049130917 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:29.050693035 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.050807953 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.051925898 CEST	49761	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:29.051949978 CEST	443	49761	54.195.39.4	192.168.2.4
May 29, 2024 12:13:29.052908897 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:29.052968025 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:29.054958105 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.100507975 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.200045109 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:29.200063944 CEST	443	49767	152.42.220.64	192.168.2.4
May 29, 2024 12:13:29.247005939 CEST	49763	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.247066975 CEST	443	49763	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.250206947 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.250233889 CEST	443	49762	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.250250101 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.250422955 CEST	49762	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.314743996 CEST	49768	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:29.314790964 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:29.314898968 CEST	49768	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:29.315093040 CEST	49768	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:29.315109968 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:29.400830030 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.400863886 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.400870085 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.400944948 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.400990009 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.401000023 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.401026964 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.401055098 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.401084900 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.401084900 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.401086092 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.401221991 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.471873999 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.471898079 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.472018957 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.472032070 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.472470045 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.493700981 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.493733883 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.493834019 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.493840933 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.493876934 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.493876934 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.564214945 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.564291954 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.564333916 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.564343929 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.564371109 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.564414978 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.565855980 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.565902948 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.565969944 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.565974951 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.565993071 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.566023111 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.573482037 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.573527098 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.573590994 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.573590994 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.573600054 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.573632956 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.586615086 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.586673021 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.586724997 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.586733103 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.586776972 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.586776972 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.656959057 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.656989098 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.657074928 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.657088041 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.657150984 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.657778978 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.657794952 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.657854080 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.657866001 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.657908916 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.657908916 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.659713984 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.659739971 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.659782887 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.659789085 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.659821033 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.659821033 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.660804033 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.660820961 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.660881042 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.660881042 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.660887003 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.661026955 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.679208040 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.679225922 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.679317951 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.679328918 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.679382086 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.679784060 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.679805994 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.679863930 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.679863930 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.679869890 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.679987907 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.696715117 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.749743938 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.749773979 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.750181913 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.750233889 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.750233889 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.750247955 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.750354052 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.751111984 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.751131058 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.751358986 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.751368046 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.751853943 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.751920938 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.751929045 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.751983881 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.751996994 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:29.752015114 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.752075911 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.780654907 CEST	49764	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:29.780677080 CEST	443	49764	66.22.0.11	192.168.2.4
May 29, 2024 12:13:30.171674013 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.175255060 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.175271988 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.176827908 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.176897049 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.178431034 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.178534985 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.180433035 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.180440903 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.224525928 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.303920984 CEST	443	49767	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.330564022 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.330583096 CEST	443	49767	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.334192991 CEST	443	49767	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.334302902 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.357939005 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.358161926 CEST	443	49767	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.374337912 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.374690056 CEST	49768	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.374702930 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.375000954 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.375906944 CEST	49768	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.375983953 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.376276016 CEST	49768	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.412152052 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.412166119 CEST	443	49767	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.420515060 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.458862066 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.906400919 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.906433105 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.906466961 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.906502962 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.906522036 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:30.906547070 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:30.958864927 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.097902060 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.097991943 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.098083973 CEST	49768	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.100078106 CEST	49768	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.100109100 CEST	443	49768	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.221370935 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.221410036 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.221426964 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.221564054 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.221564054 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.222115993 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.222136974 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.222153902 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.222167969 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.222187996 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.222207069 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.223114967 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.223135948 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.223170042 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.223192930 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.223777056 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.223798037 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.223840952 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.223860979 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.537282944 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.537410975 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:31.537451982 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:31.537477016 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:32.781270981 CEST	49766	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:32.781303883 CEST	443	49766	152.42.220.64	192.168.2.4
May 29, 2024 12:13:34.681413889 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:34.681476116 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:34.681540012 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:36.084899902 CEST	49749	443	192.168.2.4	142.250.185.132
May 29, 2024 12:13:36.084939957 CEST	443	49749	142.250.185.132	192.168.2.4
May 29, 2024 12:13:36.225953102 CEST	49775	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:36.226047993 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:36.226047039 CEST	49776	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:36.226100922 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:36.226146936 CEST	49775	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:36.226160049 CEST	49776	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:36.226440907 CEST	49776	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:36.226457119 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:36.227287054 CEST	49775	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:36.227308035 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:36.491091013 CEST	49777	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:36.491142988 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:36.491300106 CEST	49777	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:36.492984056 CEST	49777	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:36.493000031 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:36.507489920 CEST	49778	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:36.507534027 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:36.507658958 CEST	49778	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:36.509087086 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:36.509129047 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:36.509188890 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:36.511255026 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:36.511269093 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:36.511493921 CEST	49778	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:36.511509895 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:37.010570049 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.035595894 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.052356958 CEST	49777	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.082164049 CEST	49777	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.082175016 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.082545042 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.082613945 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.083126068 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.083699942 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.083791018 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.083878994 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.085381985 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.086158991 CEST	49777	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.086359978 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.087086916 CEST	49777	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.128531933 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.132508039 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.227680922 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:37.235851049 CEST	49778	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:37.235866070 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:37.236243963 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:37.236620903 CEST	49778	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:37.236690044 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:37.236831903 CEST	49778	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:37.276789904 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.277004004 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.277095079 CEST	49777	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.284507990 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:37.294648886 CEST	49777	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.294667006 CEST	443	49777	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.337429047 CEST	49782	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.337521076 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.337595940 CEST	49782	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.337852001 CEST	49782	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.337897062 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.351221085 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.351243973 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.351294994 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.351304054 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.351308107 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.351341009 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.351372004 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.351372004 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.351403952 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.357353926 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.357425928 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.357594967 CEST	443	49779	66.22.0.11	192.168.2.4
May 29, 2024 12:13:37.357597113 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.357642889 CEST	49779	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:37.412575960 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:37.413263083 CEST	49775	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:37.413295031 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:37.413784981 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:37.414267063 CEST	49775	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:37.414347887 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:37.463625908 CEST	49775	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:37.488991976 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:37.489197969 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:37.489360094 CEST	49778	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:37.526505947 CEST	49778	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:37.526532888 CEST	443	49778	54.195.39.4	192.168.2.4
May 29, 2024 12:13:38.174984932 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:38.176796913 CEST	49782	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:38.176860094 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:38.178215981 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:38.178257942 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:38.178854942 CEST	49782	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:38.179056883 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:38.179707050 CEST	49776	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:38.179718971 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:38.179847002 CEST	49782	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:38.180901051 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:38.182964087 CEST	49776	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:38.183137894 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:38.220526934 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:38.228507996 CEST	49776	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:38.576351881 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:38.576435089 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:38.576613903 CEST	49782	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:38.603579998 CEST	49782	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:38.603661060 CEST	443	49782	66.22.0.11	192.168.2.4
May 29, 2024 12:13:40.083686113 CEST	49785	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:40.083738089 CEST	443	49785	66.22.0.11	192.168.2.4
May 29, 2024 12:13:40.083801031 CEST	49785	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:40.084238052 CEST	49786	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:40.084273100 CEST	443	49786	54.195.39.4	192.168.2.4
May 29, 2024 12:13:40.084507942 CEST	49786	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:40.085488081 CEST	49785	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:40.085510015 CEST	443	49785	66.22.0.11	192.168.2.4
May 29, 2024 12:13:40.085589886 CEST	49786	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:40.085602999 CEST	443	49786	54.195.39.4	192.168.2.4
May 29, 2024 12:13:40.094821930 CEST	49775	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:40.140503883 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:40.538765907 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:40.538945913 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:40.539580107 CEST	49775	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:40.539968014 CEST	49775	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:40.540011883 CEST	443	49775	152.42.220.64	192.168.2.4
May 29, 2024 12:13:40.782310009 CEST	443	49785	66.22.0.11	192.168.2.4
May 29, 2024 12:13:40.782668114 CEST	49785	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:40.782721043 CEST	443	49785	66.22.0.11	192.168.2.4
May 29, 2024 12:13:40.783075094 CEST	443	49785	66.22.0.11	192.168.2.4
May 29, 2024 12:13:40.783411980 CEST	49785	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:40.783482075 CEST	443	49785	66.22.0.11	192.168.2.4
May 29, 2024 12:13:40.804734945 CEST	443	49786	54.195.39.4	192.168.2.4
May 29, 2024 12:13:40.805003881 CEST	49786	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:40.805015087 CEST	443	49786	54.195.39.4	192.168.2.4
May 29, 2024 12:13:40.806124926 CEST	443	49786	54.195.39.4	192.168.2.4
May 29, 2024 12:13:40.806576967 CEST	49786	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:40.806747913 CEST	443	49786	54.195.39.4	192.168.2.4
May 29, 2024 12:13:40.833153009 CEST	49785	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:40.849250078 CEST	49786	443	192.168.2.4	54.195.39.4
May 29, 2024 12:13:50.083262920 CEST	49787	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:50.083326101 CEST	443	49787	152.42.220.64	192.168.2.4
May 29, 2024 12:13:50.084219933 CEST	49787	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:50.084219933 CEST	49787	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:50.084269047 CEST	443	49787	152.42.220.64	192.168.2.4
May 29, 2024 12:13:50.089261055 CEST	49776	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:50.132538080 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:50.502197027 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:50.502275944 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:50.504264116 CEST	49776	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:50.505081892 CEST	49776	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:50.505099058 CEST	443	49776	152.42.220.64	192.168.2.4
May 29, 2024 12:13:50.514559031 CEST	443	49785	66.22.0.11	192.168.2.4
May 29, 2024 12:13:50.514648914 CEST	443	49785	66.22.0.11	192.168.2.4
May 29, 2024 12:13:50.514802933 CEST	49785	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:50.552423000 CEST	49785	443	192.168.2.4	66.22.0.11
May 29, 2024 12:13:50.552447081 CEST	443	49785	66.22.0.11	192.168.2.4
May 29, 2024 12:13:51.492393017 CEST	443	49787	152.42.220.64	192.168.2.4
May 29, 2024 12:13:51.492746115 CEST	49787	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:51.492772102 CEST	443	49787	152.42.220.64	192.168.2.4
May 29, 2024 12:13:51.493257999 CEST	443	49787	152.42.220.64	192.168.2.4
May 29, 2024 12:13:51.493736029 CEST	49787	443	192.168.2.4	152.42.220.64
May 29, 2024 12:13:51.493824005 CEST	443	49787	152.42.220.64	192.168.2.4
May 29, 2024 12:13:51.537014961 CEST	49787	443	192.168.2.4	152.42.220.64
May 29, 2024 12:14:06.785510063 CEST	443	49786	54.195.39.4	192.168.2.4
May 29, 2024 12:14:06.785690069 CEST	443	49786	54.195.39.4	192.168.2.4
May 29, 2024 12:14:06.785748959 CEST	49786	443	192.168.2.4	54.195.39.4
May 29, 2024 12:14:08.063709974 CEST	49786	443	192.168.2.4	54.195.39.4
May 29, 2024 12:14:08.063786030 CEST	443	49786	54.195.39.4	192.168.2.4
May 29, 2024 12:14:15.428210974 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:14:15.428226948 CEST	443	49767	152.42.220.64	192.168.2.4
May 29, 2024 12:14:24.192316055 CEST	49790	443	192.168.2.4	142.250.185.132
May 29, 2024 12:14:24.192367077 CEST	443	49790	142.250.185.132	192.168.2.4
May 29, 2024 12:14:24.194243908 CEST	49790	443	192.168.2.4	142.250.185.132
May 29, 2024 12:14:24.194463968 CEST	49790	443	192.168.2.4	142.250.185.132
May 29, 2024 12:14:24.194483042 CEST	443	49790	142.250.185.132	192.168.2.4
May 29, 2024 12:14:24.843061924 CEST	443	49790	142.250.185.132	192.168.2.4
May 29, 2024 12:14:24.843400002 CEST	49790	443	192.168.2.4	142.250.185.132
May 29, 2024 12:14:24.843420982 CEST	443	49790	142.250.185.132	192.168.2.4
May 29, 2024 12:14:24.843750000 CEST	443	49790	142.250.185.132	192.168.2.4
May 29, 2024 12:14:24.844177008 CEST	49790	443	192.168.2.4	142.250.185.132
May 29, 2024 12:14:24.844239950 CEST	443	49790	142.250.185.132	192.168.2.4
May 29, 2024 12:14:24.897051096 CEST	49790	443	192.168.2.4	142.250.185.132
May 29, 2024 12:14:32.056432009 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:14:32.056571007 CEST	443	49767	152.42.220.64	192.168.2.4
May 29, 2024 12:14:32.056651115 CEST	49767	443	192.168.2.4	152.42.220.64
May 29, 2024 12:14:34.747246027 CEST	443	49790	142.250.185.132	192.168.2.4
May 29, 2024 12:14:34.747314930 CEST	443	49790	142.250.185.132	192.168.2.4
May 29, 2024 12:14:34.747384071 CEST	49790	443	192.168.2.4	142.250.185.132
May 29, 2024 12:14:36.055644035 CEST	49790	443	192.168.2.4	142.250.185.132
May 29, 2024 12:14:36.055682898 CEST	443	49790	142.250.185.132	192.168.2.4
May 29, 2024 12:14:36.506418943 CEST	49787	443	192.168.2.4	152.42.220.64
May 29, 2024 12:14:36.506449938 CEST	443	49787	152.42.220.64	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 29, 2024 12:13:19.892013073 CEST	53	58572	1.1.1.1	192.168.2.4
May 29, 2024 12:13:19.910561085 CEST	53	62808	1.1.1.1	192.168.2.4
May 29, 2024 12:13:20.923058987 CEST	53	53366	1.1.1.1	192.168.2.4
May 29, 2024 12:13:21.344789982 CEST	62292	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:21.345005989 CEST	55249	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:21.504430056 CEST	53	62292	1.1.1.1	192.168.2.4
May 29, 2024 12:13:21.792514086 CEST	53	55249	1.1.1.1	192.168.2.4
May 29, 2024 12:13:23.457123041 CEST	58359	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:23.458755016 CEST	49750	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:23.460298061 CEST	57085	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:23.463401079 CEST	62603	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:23.464984894 CEST	53	58359	1.1.1.1	192.168.2.4
May 29, 2024 12:13:23.466299057 CEST	53	49750	1.1.1.1	192.168.2.4
May 29, 2024 12:13:23.466696978 CEST	51416	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:23.467303991 CEST	59283	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:23.467943907 CEST	53	57085	1.1.1.1	192.168.2.4
May 29, 2024 12:13:23.469007969 CEST	55816	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:23.469486952 CEST	59553	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:23.471853971 CEST	53	62603	1.1.1.1	192.168.2.4
May 29, 2024 12:13:23.474200964 CEST	53	51416	1.1.1.1	192.168.2.4
May 29, 2024 12:13:23.477313995 CEST	53	55816	1.1.1.1	192.168.2.4
May 29, 2024 12:13:23.478497028 CEST	53	59553	1.1.1.1	192.168.2.4
May 29, 2024 12:13:23.479121923 CEST	53	59283	1.1.1.1	192.168.2.4
May 29, 2024 12:13:24.104516983 CEST	52974	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:24.104516983 CEST	55314	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:24.120100975 CEST	53	55314	1.1.1.1	192.168.2.4
May 29, 2024 12:13:24.120312929 CEST	53	52974	1.1.1.1	192.168.2.4
May 29, 2024 12:13:26.506855011 CEST	53	59966	1.1.1.1	192.168.2.4
May 29, 2024 12:13:27.189347029 CEST	54550	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:27.189904928 CEST	60707	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:27.197443008 CEST	53	54550	1.1.1.1	192.168.2.4
May 29, 2024 12:13:27.206537008 CEST	53	60707	1.1.1.1	192.168.2.4
May 29, 2024 12:13:28.259318113 CEST	63975	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:28.259428978 CEST	50928	53	192.168.2.4	1.1.1.1
May 29, 2024 12:13:28.411741018 CEST	53	50928	1.1.1.1	192.168.2.4
May 29, 2024 12:13:28.418544054 CEST	53	63975	1.1.1.1	192.168.2.4
May 29, 2024 12:13:39.250624895 CEST	53	53302	1.1.1.1	192.168.2.4
May 29, 2024 12:13:42.984040976 CEST	138	138	192.168.2.4	192.168.2.255
May 29, 2024 12:13:57.702261925 CEST	53	58865	1.1.1.1	192.168.2.4
May 29, 2024 12:14:19.503998995 CEST	53	55695	1.1.1.1	192.168.2.4
May 29, 2024 12:14:20.459764004 CEST	53	65295	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 29, 2024 12:13:21.792678118 CEST	192.168.2.4	1.1.1.1	c23f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 29, 2024 12:13:21.344789982 CEST	192.168.2.4	1.1.1.1	0xf1d9	Standard query (0)	mail.fnbo-in.selfip.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:21.345005989 CEST	192.168.2.4	1.1.1.1	0xb926	Standard query (0)	mail.fnbo-in.selfip.com	65	IN (0x0001)	false
May 29, 2024 12:13:23.457123041 CEST	192.168.2.4	1.1.1.1	0x8950	Standard query (0)	cdn.appdynamics.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.458755016 CEST	192.168.2.4	1.1.1.1	0x52a7	Standard query (0)	cdn.appdynamics.com	65	IN (0x0001)	false
May 29, 2024 12:13:23.460298061 CEST	192.168.2.4	1.1.1.1	0x9c64	Standard query (0)	cdn.perfdrive.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.463401079 CEST	192.168.2.4	1.1.1.1	0x79f2	Standard query (0)	cdn.perfdrive.com	65	IN (0x0001)	false
May 29, 2024 12:13:23.466696978 CEST	192.168.2.4	1.1.1.1	0x9619	Standard query (0)	olb.sccu.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.467303991 CEST	192.168.2.4	1.1.1.1	0x3b52	Standard query (0)	olb.sccu.com	65	IN (0x0001)	false
May 29, 2024 12:13:23.469007969 CEST	192.168.2.4	1.1.1.1	0x5d32	Standard query (0)	mpsnare.iesnare.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.469486952 CEST	192.168.2.4	1.1.1.1	0x13d9	Standard query (0)	mpsnare.iesnare.com	65	IN (0x0001)	false
May 29, 2024 12:13:24.104516983 CEST	192.168.2.4	1.1.1.1	0x48ac	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:24.104516983 CEST	192.168.2.4	1.1.1.1	0x2062	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 29, 2024 12:13:27.189347029 CEST	192.168.2.4	1.1.1.1	0xe3bb	Standard query (0)	olb.sccu.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:27.189904928 CEST	192.168.2.4	1.1.1.1	0xb0d7	Standard query (0)	olb.sccu.com	65	IN (0x0001)	false
May 29, 2024 12:13:28.259318113 CEST	192.168.2.4	1.1.1.1	0x77cc	Standard query (0)	mail.fnbo-in.selfip.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:28.259428978 CEST	192.168.2.4	1.1.1.1	0xd6e6	Standard query (0)	mail.fnbo-in.selfip.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 29, 2024 12:13:21.504430056 CEST	1.1.1.1	192.168.2.4	0xf1d9	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:21.504430056 CEST	1.1.1.1	192.168.2.4	0xf1d9	No error (0)	fnbo-in.selfip.com		152.42.220.64	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:21.792514086 CEST	1.1.1.1	192.168.2.4	0xb926	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:23.464984894 CEST	1.1.1.1	192.168.2.4	0x8950	No error (0)	cdn.appdynamics.com		13.227.219.49	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.464984894 CEST	1.1.1.1	192.168.2.4	0x8950	No error (0)	cdn.appdynamics.com		13.227.219.115	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.464984894 CEST	1.1.1.1	192.168.2.4	0x8950	No error (0)	cdn.appdynamics.com		13.227.219.2	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.464984894 CEST	1.1.1.1	192.168.2.4	0x8950	No error (0)	cdn.appdynamics.com		13.227.219.85	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.467943907 CEST	1.1.1.1	192.168.2.4	0x9c64	No error (0)	cdn.perfdrive.com		130.211.29.114	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.474200964 CEST	1.1.1.1	192.168.2.4	0x9619	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:23.474200964 CEST	1.1.1.1	192.168.2.4	0x9619	No error (0)	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		66.22.0.11	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.477313995 CEST	1.1.1.1	192.168.2.4	0x5d32	No error (0)	mpsnare.iesnare.com	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:23.477313995 CEST	1.1.1.1	192.168.2.4	0x5d32	No error (0)	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		54.195.39.4	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.477313995 CEST	1.1.1.1	192.168.2.4	0x5d32	No error (0)	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		54.228.71.178	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:23.478497028 CEST	1.1.1.1	192.168.2.4	0x13d9	No error (0)	mpsnare.iesnare.com	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:23.479121923 CEST	1.1.1.1	192.168.2.4	0x3b52	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:24.120100975 CEST	1.1.1.1	192.168.2.4	0x2062	No error (0)	www.google.com			65	IN (0x0001)	false
May 29, 2024 12:13:24.120312929 CEST	1.1.1.1	192.168.2.4	0x48ac	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:27.197443008 CEST	1.1.1.1	192.168.2.4	0xe3bb	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:27.197443008 CEST	1.1.1.1	192.168.2.4	0xe3bb	No error (0)	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		66.22.0.11	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:27.206537008 CEST	1.1.1.1	192.168.2.4	0xb0d7	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:28.411741018 CEST	1.1.1.1	192.168.2.4	0xd6e6	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:28.418544054 CEST	1.1.1.1	192.168.2.4	0x77cc	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:28.418544054 CEST	1.1.1.1	192.168.2.4	0x77cc	No error (0)	fnbo-in.selfip.com		152.42.220.64	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:36.576452971 CEST	1.1.1.1	192.168.2.4	0xfa1a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:36.576452971 CEST	1.1.1.1	192.168.2.4	0xfa1a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:50.205769062 CEST	1.1.1.1	192.168.2.4	0x98e9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:50.205769062 CEST	1.1.1.1	192.168.2.4	0x98e9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:12.801577091 CEST	1.1.1.1	192.168.2.4	0xd679	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:12.801577091 CEST	1.1.1.1	192.168.2.4	0xd679	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:32.829154015 CEST	1.1.1.1	192.168.2.4	0x46bf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:32.829154015 CEST	1.1.1.1	192.168.2.4	0x46bf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ipinfo.io

mail.fnbo-in.selfip.com

https:

cdn.perfdrive.com

olb.sccu.com

cdn.appdynamics.com

mpsnare.iesnare.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49730	34.117.186.192	443

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:11 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-05-29 10:13:11 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Wed, 29 May 2024 10:13:11 GMT content-type: application/json; charset=utf-8 Content-Length: 321 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-29 10:13:11 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.175", "hostname": "static-cpe-8-46-123-175.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49737	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:22 UTC	681	OUT	GET /x/personal.html HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:23 UTC	207	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:13:23 GMT Server: Apache Last-Modified: Sat, 13 Jan 2024 11:48:36 GMT Accept-Ranges: bytes Content-Length: 10675 Connection: close Content-Type: text/html
2024-05-29 10:13:23 UTC	7985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 74 2d 63 68 72 6f 6d 65 20 74 2d 63 68 72 6f 6d 65 31 30 34 22 20 73 74 79 6c 65 3d 22 2d 2d 76 68 3a 35 37 30 70 78 3b 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 4d 5f 68 65 61 64 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 70 70 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 61 64 72 75 6d 2d 65 78 74 2e 65 62 66 31 36 32 30 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-us" xml:lang="en-us" class="t-chrome t-chrome104" style="--vh:570px;"><head id="M_head"> <script type="text/javascript" async="" src="https://cdn.appdynamics.com/adrum-ext.ebf1620
2024-05-29 10:13:23 UTC	2690	IN	Data Raw: 6e 74 72 6f 6c 24 63 6d 64 53 75 62 6d 69 74 27 2c 27 27 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 3c 2f 70 3e 3c 70 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 20 20 20 20 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 69 6e 70 75 74 5b 74 79 Data Ascii: ntrol$cmdSubmit',''); return false;"></p><p></p> </div> </div> </div> </div> </div> </div> </div> <style> input[ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:23 UTC	578	OUT	GET /x/css/opensans.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/personal.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:23 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:13:23 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 2431 Connection: close Content-Type: text/css
2024-05-29 10:13:23 UTC	2431	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 20 53 61 6e 73 27 29 2c 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 53 61 6e 73 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6f 70 65 6e 73 61 6e 73 2f 76 31 33 2f 4b 38 38 70 52 33 67 6f 41 57 54 37 42 54 74 33 32 5a 30 31 6d 78 4a 74 6e 4b 49 54 70 70 4f 49 5f 49 76 63 58 58 44 4e 72 73 63 2e 77 6f 66 66 32 Data Ascii: /* cyrillic-ext */@font-face { font-family: 'Open Sans'; font-style: normal; font-weight: 400; src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/K88pR3goAWT7BTt32Z01mxJtnKITppOI_IvcXXDNrsc.woff2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	130.211.29.114	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:23 UTC	544	OUT	GET /aperture/aperture.js HTTP/1.1 Host: cdn.perfdrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:24 UTC	424	IN	HTTP/1.1 200 OK Server: nginx/1.10.1 Content-Length: 26692 Access-Control-Allow-Origin: * Accept-Ranges: bytes Via: 1.1 google Date: Wed, 29 May 2024 10:02:57 GMT Cache-Control: max-age=3600,public Last-Modified: Mon, 13 May 2024 04:56:42 GMT ETag: "66419d8a-6844" Content-Type: application/javascript Vary: Accept-Encoding Age: 627 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-29 10:13:24 UTC	966	IN	Data Raw: 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 44 28 62 2c 63 29 7b 76 61 72 20 66 3d 6e 75 6c 6c 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 21 30 3d 3d 3d 63 7c 7c 22 74 72 75 65 22 3d 3d 3d 63 29 7b 4b 3d 67 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 76 61 72 20 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 22 2b 62 2b 22 3d 5c 5c 73 2a 28 2e 2a 3f 29 5c 5c 73 2a 24 22 29 7d 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 30 3d 3d 63 7c 7c 22 66 61 6c 73 65 22 3d 3d 63 7c 7c 30 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 63 29 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 22 2b 62 2b 68 2b 22 3d 5c 5c 73 Data Ascii: try{(function(a,g){function D(b,c){var f=null;if("undefined"!==typeof c\|\|!0===c\|\|"true"===c){K=g.cookie.split(";");var e=new RegExp("^\\s"+b+"=\\s(.?)\\s$")}else if("undefined"===typeof c\|\|0==c\|\|"false"==c\|\|0==c\|\|null==c)e=new RegExp("^\\s*"+b+h+"=\\s
2024-05-29 10:13:24 UTC	1390	IN	Data Raw: 2b 32 7d 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 31 3b 65 6c 73 65 20 72 65 74 75 72 6e 21 31 7d 76 61 72 20 42 3d 7b 22 38 34 61 61 22 3a 22 73 65 6e 64 22 2c 74 65 73 74 61 65 66 64 3a 22 73 65 6e 64 22 2c 0a 20 20 20 20 20 20 20 20 22 39 35 35 66 22 3a 22 73 65 6e 64 22 2c 62 66 62 65 3a 22 73 65 6e 64 22 2c 39 39 31 36 3a 22 73 65 6e 64 22 2c 63 38 63 32 3a 22 73 65 6e 64 22 2c 22 39 30 64 64 22 3a 22 73 65 6e 64 22 2c 61 32 63 38 3a 22 73 65 6e 64 22 2c 38 30 38 33 3a 22 73 65 6e 64 22 2c 22 38 65 62 63 22 3a 22 73 65 6e 64 22 2c 62 37 61 61 3a 22 73 65 6e 64 22 2c 22 38 64 33 39 22 3a 22 73 65 6e 64 22 2c 62 62 62 38 3a 22 73 65 6e 64 22 2c 61 35 64 66 3a 22 73 65 6e 64 22 2c 22 38 61 61 65 22 3a 22 73 65 6e 64 22 2c 62 30 63 61 3a 22 73 65 6e 64 22 Data Ascii: +2}}else return!1;else return!1}var B={"84aa":"send",testaefd:"send", "955f":"send",bfbe:"send",9916:"send",c8c2:"send","90dd":"send",a2c8:"send",8083:"send","8ebc":"send",b7aa:"send","8d39":"send",bbb8:"send",a5df:"send","8aae":"send",b0ca:"send"
2024-05-29 10:13:24 UTC	1390	IN	Data Raw: 79 54 65 73 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 29 7b 76 61 72 20 65 3d 30 2c 64 3d 30 2c 6c 3d 30 2c 6b 3d 30 2c 71 3d 30 2c 70 3d 30 2c 6d 3d 30 2c 72 3d 30 2c 76 3d 30 2c 48 3d 30 2c 49 3d 30 2c 4d 3d 2d 31 2c 4e 3d 30 2c 4f 3d 30 2c 50 3d 30 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 73 73 50 65 72 66 6f 72 6d 61 6e 63 65 4d 65 74 72 69 63 53 65 6e 74 26 26 30 3d 3d 77 69 6e 64 6f 77 2e 73 73 50 65 72 66 6f 72 6d 61 6e 63 65 4d 65 74 72 69 63 53 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 73 73 50 65 72 66 6f 72 6d 61 6e 63 65 4d 65 74 72 69 63 53 65 6e 74 3d 21 30 3b 74 72 79 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 Data Ascii: yTester=function(b,c,f){var e=0,d=0,l=0,k=0,q=0,p=0,m=0,r=0,v=0,H=0,I=0,M=-1,N=0,O=0,P=0;if("undefined"!==typeof window.ssPerformanceMetricSent&&0==window.ssPerformanceMetricSent){window.ssPerformanceMetricSent=!0;try{"undefined"!==typeof window.ssTimeLog
2024-05-29 10:13:24 UTC	1390	IN	Data Raw: 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 2b 22 3d 5c 5c 73 2a 28 2e 2a 3f 29 5c 5c 73 2a 24 22 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 56 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 56 5b 63 5d 2e 6d 61 74 63 68 28 5a 29 2c 6e 75 6c 6c 21 3d 3d 62 29 7b 4d 3d 62 5b 31 5d 2e 73 75 62 73 74 72 28 34 2c 31 29 3b 62 72 65 61 6b 7d 4e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 66 3f 66 3a 22 75 6e 64 22 3b 4f 3d 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 73 2e 69 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 3b 50 3d 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 73 2e 73 73 41 6e 61 6c 79 74 69 63 73 46 6c 61 67 7d 63 61 74 63 68 28 51 29 7b 50 3d 4f 3d 4e 3d 4d 3d 49 3d 48 3d 76 3d 72 3d 6d Data Ascii: .SSJSConnectorObj.domain_info+"=\\s(.?)\\s*$");for(c=0;c<V.length;c++)if(b=V[c].match(Z),null!==b){M=b[1].substr(4,1);break}N="undefined"!==typeof f?f:"und";O=window.ssTimeLogs.initialCookie;P=window.ssTimeLogs.ssAnalyticsFlag}catch(Q){P=O=N=M=I=H=v=r=m
2024-05-29 10:13:24 UTC	1390	IN	Data Raw: 66 20 65 2e 63 61 6e 50 6c 61 79 54 79 70 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 65 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 6d 70 65 67 22 29 26 26 0a 20 20 20 20 28 64 3d 65 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 6c 5b 30 5d 29 29 3b 76 61 72 20 6b 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 32 3c 64 2e 6c 65 6e 67 74 68 3f 21 30 3a 21 31 7d 63 61 74 63 68 28 71 29 7b 6b 3d 21 31 7d 65 3d 7b 69 65 3a 22 54 72 69 64 65 6e 74 22 2c 65 64 67 65 3a 22 45 64 67 65 48 54 4d 4c 22 2c 77 65 62 6b 69 74 3a 22 57 65 62 6b 69 74 22 2c 6d 6f 7a 3a 22 47 65 63 6b 6f 22 2c 6b 68 74 6d 6c 3a 22 4b 68 74 6d 6c 22 7d 3b 64 3d 7b 65 64 67 65 3a 22 45 64 67 65 22 2c 69 65 3a 22 49 45 22 2c 6b 68 74 6d 6c 3a Data Ascii: f e.canPlayType&&"string"===typeof e.canPlayType("audio/mpeg")&& (d=e.canPlayType(l[0]));var k="string"===typeof d&&2<d.length?!0:!1}catch(q){k=!1}e={ie:"Trident",edge:"EdgeHTML",webkit:"Webkit",moz:"Gecko",khtml:"Khtml"};d={edge:"Edge",ie:"IE",khtml:
2024-05-29 10:13:24 UTC	1390	IN	Data Raw: 5b 31 5d 3a 22 6e 75 6c 6c 22 3a 22 6e 75 6c 6c 22 29 3a 22 74 72 69 64 65 6e 74 22 3d 3d 3d 66 3f 28 62 3d 7b 6c 61 79 6f 75 74 65 6e 67 69 6e 65 3a 65 2e 69 65 2c 62 72 6f 77 73 65 72 3a 64 2e 69 65 7d 2c 62 2e 76 65 72 73 69 6f 6e 3d 22 6d 73 49 6d 65 41 6c 69 67 6e 22 69 6e 20 42 72 6f 77 73 65 72 53 74 79 6c 65 3f 64 2e 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 2e 49 45 5b 34 5d 3a 22 6d 73 55 73 65 72 53 65 6c 65 63 74 22 69 6e 20 42 72 6f 77 73 65 72 53 74 79 6c 65 3f 64 2e 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 2e 49 45 5b 33 5d 3a 22 66 69 6c 6c 22 69 6e 20 42 72 6f 77 73 65 72 53 74 79 6c 65 3f 64 2e 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 2e 49 45 5b 32 5d 3a 0a 20 20 20 20 20 20 20 20 22 77 69 64 6f 77 73 22 69 6e 20 42 72 6f 77 Data Ascii: [1]:"null":"null"):"trident"===f?(b={layoutengine:e.ie,browser:d.ie},b.version="msImeAlign"in BrowserStyle?d.browser_version.IE[4]:"msUserSelect"in BrowserStyle?d.browser_version.IE[3]:"fill"in BrowserStyle?d.browser_version.IE[2]: "widows"in Brow
2024-05-29 10:13:24 UTC	1390	IN	Data Raw: 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 26 26 22 61 75 74 6f 22 3d 3d 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 3f 28 68 3d 32 2c 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 3d 32 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 26 26 28 68 3d 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 3f 70 61 72 73 65 49 6e 74 28 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 29 3a 32 29 3b 65 6c 73 65 22 75 6e 64 65 66 69 6e 65 64 Data Ascii: a.SSJSConnectorObj.domain_info&&"auto"==a.SSJSConnectorObj.domain_info?(h=2,a.SSJSConnectorObj.domain_info=2):"undefined"!==typeof a.SSJSConnectorObj.domain_info&&(h=a.SSJSConnectorObj.domain_info?parseInt(a.SSJSConnectorObj.domain_info):2);else"undefined
2024-05-29 10:13:24 UTC	1390	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 73 2e 69 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 3d 0a 20 20 20 20 20 20 20 20 75 5b 31 5d 2c 77 69 6e 64 6f 77 2e 73 73 4a 53 41 63 74 69 6f 6e 54 61 6b 65 72 28 75 5b 31 5d 5b 34 5d 29 29 3b 76 61 72 20 77 3d 21 31 2c 53 3d 5b 22 5f 5f 75 7a 6d 61 6a 22 2c 22 5f 5f 75 7a 6d 62 6a 22 2c 22 5f 5f 75 7a 6d 63 6a 22 2c 22 5f 5f 75 7a 6d 64 6a 22 5d 2c 7a 3d 21 31 2c 43 3d 6e 75 6c 6c 3b 7a 3d 21 30 3b 79 2b 3d 22 3f 22 3b 75 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 7b 76 61 72 20 63 3d 6e 65 77 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 3b 63 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 62 29 7d 72 65 Data Ascii: (window.ssTimeLogs.initialCookie= u[1],window.ssJSActionTaker(u[1][4]));var w=!1,S=["__uzmaj","__uzmbj","__uzmcj","__uzmdj"],z=!1,C=null;z=!0;y+="?";u=function(b){if("undefined"!==typeof XDomainRequest){var c=new XDomainRequest;c.open("POST",b)}re
2024-05-29 10:13:24 UTC	1390	IN	Data Raw: 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 36 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 37 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 0a 20 20 20 20 20 20 20 20 74 79 70 65 6f 66 20 61 2e 73 63 72 65 65 6e 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 73 63 72 65 65 6e 2e 63 6f Data Ascii: gator.webdriver?a.navigator.webdriver:"":"")+'","j6":"'+("undefined"!==typeof a.navigator?"undefined"!==typeof a.navigator.maxTouchPoints?a.navigator.maxTouchPoints:"":"")+'","j7":"'+("undefined"!== typeof a.screen?"undefined"!==typeof a.screen.co
2024-05-29 10:13:24 UTC	1390	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 2e 62 75 69 6c 64 49 44 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 62 75 69 6c 64 49 44 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 32 30 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 4d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 4d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 32 31 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 3f 22 74 22 3a 22 66 22 29 2b Data Ascii: ndefined"!==typeof a.navigator.buildID?a.navigator.buildID:"":"")+'","j20":"'+("undefined"!==typeof a.navigator?"undefined"!==typeof a.navigator.msMaxTouchPoints?a.navigator.msMaxTouchPoints:"":"")+'","j21":"'+("undefined"!==typeof a.callPhantom?"t":"f")+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:24 UTC	758	OUT	GET /OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj-QO5R4_ig_UM_6BTEvsUm0pVZPSI45Qh8HhMXpcfZ0-H_jz5gjdjFcqhl8Q2uekFcLFceEEhLFJKexQwJQYE-YZPPmEfmF2tz8ibp1V0Knp5fHHCZZeU1&t=637356698800000000 HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:24 UTC	1527	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 811 Connection: close Set-Cookie: __uzma=bf0547e4-9e76-416e-8653-a68eed0494e2; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977604; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7127; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=965751021727; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977604; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000cc70c564-be0c-49e6-914e-39b195f554a317169776041170-749b74a2fff269ef10; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90001087ddcf-a1d9-42c9-8270-b5a422c69abe1-17169776041170-93797b3dece49e3b10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Expires: Thu, 29 May 2025 05:16:04 GMT Last-Modified: Mon, 14 Sep 2020 12:44:40 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:23 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4dB48eXDWfsuRH_yvQde6DiwuvIiluWyg5K4cSA65uNmBShVsK_d7NVWsYMkwOtqLX6yM; path=/; SameSite=None; Secure
2024-05-29 10:13:24 UTC	811	IN	Data Raw: ef bb bf 2e 52 61 64 41 6a 61 78 20 2e 72 61 44 69 76 2c 2e 52 61 64 41 6a 61 78 20 2e 72 61 43 6f 6c 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 52 61 64 41 6a 61 78 20 2e 72 61 44 69 76 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 52 61 64 41 6a 61 78 20 2e 72 61 43 6f 6c 6f 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 Data Ascii: .RadAjax .raDiv,.RadAjax .raColor{width:100%;height:100%;margin:0;padding:0}.RadAjax .raDiv{position:relative;z-index:2;background-color:transparent;background-position:center center;background-repeat:no-repeat}.RadAjax .raColor{position:absolute;top:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:24 UTC	596	OUT	GET /OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:24 UTC	2077	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1023385 Connection: close Set-Cookie: __uzma=428aceee-f4bf-4b63-a6b7-844a41296af2; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977604; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=1407; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=285121083652; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977604; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000bfea4d23-c285-4214-b9e3-c9c898b7010617169776041110-056463856c7e548c10; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90003ffabd45-8c87-42aa-ae1e-c3165768f35a1-17169776041110-5086e49f356ca1ad10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:24 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public, no-cache="Set-Cookie" Expires: Thu, 29 May 2025 10:13:24 GMT Last-Modified: Wed, 29 May 2024 10:13:24 GMT Set-Cookie: ASP.NET_SessionId=deyv1nt1z4cq0vikv5rztrwj; path=/; HttpOnly; SameSite=Lax Set-Cookie: PortalLanguage_2173=en-US; expires=Tue, 29-May-2074 10:13:24 GMT; path=/; HttpOnly Set-Cookie: ADRUM_BTa=R:32\|g:9a8d345d-33ba-4799-a5ce-0520912dee08\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:13:54 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:13:54 GMT; path=/ Set-Cookie: ADRUM_BT1=R:32\|i:1168032\|e:24; expires=Wed, 29-May-2024 10:13:54 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:23 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE; path=/; SameSite=None; Secure
2024-05-29 10:13:24 UTC	14307	IN	Data Raw: ef bb bf 2e 52 64 63 4d 6f 64 75 6c 65 20 2e 6d 61 69 6e 6d 6f 64 75 6c 65 20 62 75 74 74 6f 6e 2e 72 64 63 2d 63 61 6d 65 72 61 2c 2e 61 63 74 69 6f 6e 2d 74 65 78 74 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 79 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 63 6f 6e 2d 72 69 67 68 74 2d 61 72 72 6f 77 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 6c 65 66 74 2d 61 72 72 6f 77 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 72 69 67 68 74 2d 63 68 Data Ascii: .RdcModule .mainmodule button.rdc-camera,.action-textbox-container>button{background-position-x:center !important;background-position-y:center !important}.icon-right-arrow>span,.icon-left-arrow>span,.icon-zoom-out>span,.icon-zoom-in>span,.icon-right-ch
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 2d 73 74 61 72 74 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 65 6e 64 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 62 61 73 65 6c 69 6e 65 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 62 61 73 65 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 73 74 72 65 74 63 68 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 72 65 74 63 68 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 Data Ascii: -start{align-self:flex-start !important}.align-self-lg-end{align-self:flex-end !important}.align-self-lg-center{align-self:center !important}.align-self-lg-baseline{align-self:baseline !important}.align-self-lg-stretch{align-self:stretch !important}}@medi
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 78 6c 2d 34 2c 2e 6d 79 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 78 6c 2d 34 2c 2e 6d 78 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 78 6c 2d 34 2c 2e 6d 79 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 78 6c 2d 34 2c 2e 6d 78 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 78 6c 2d 35 7b 6d 61 72 67 69 6e 3a 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 78 6c 2d 35 2c 2e 6d 79 2d 78 6c 2d 35 7b 6d 61 72 Data Ascii: mportant}.mt-xl-4,.my-xl-4{margin-top:1.5rem !important}.mr-xl-4,.mx-xl-4{margin-right:1.5rem !important}.mb-xl-4,.my-xl-4{margin-bottom:1.5rem !important}.ml-xl-4,.mx-xl-4{margin-left:1.5rem !important}.m-xl-5{margin:3rem !important}.mt-xl-5,.my-xl-5{mar
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 Data Ascii: ut[type="submit"].causesValidation:focus,.btn-group-vertical>input[type="submit"].button:focus,.btn-group-vertical>input[type="button"].message_reply_button:focus,.btn-group-vertical>input[type="button"].message_send_button:focus,.btn-group-vertical>input
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 75 74 74 6f 6e 5f 63 6c 65 61 72 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e Data Ascii: button,.btn-group input[type="button"].message_send_button+input[type="submit"].message_reply_button,.btn-group input[type="button"].CommandButton+input[type="submit"].message_reply_button,.btn-group input[type="button"].button_clear+input[type="submit"].
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 75 74 74 Data Ascii: button+input[type="button"].causesValidation,.btn-group input[type="submit"].message_send_button+input[type="button"].causesValidation,.btn-group input[type="submit"].CommandButton+input[type="button"].causesValidation,.btn-group input[type="submit"].butt
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 65 6c 70 2d 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 75 74 74 6f 6e 5f 63 6c 65 61 72 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 2e 64 65 66 61 75 6c 74 2d 64 69 61 6c 6f 67 3e 2e 6d 6f 64 75 6c 65 2d 73 69 6e 67 6c 65 20 2e 6d 6f 64 61 6c 2d 68 65 6c 70 2d 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 75 74 74 6f 6e 5f 63 6c 65 61 72 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 2e 64 65 66 61 75 6c 74 2d 64 69 61 6c 6f 67 3e 2e 6d 6f 64 75 6c 65 2d 73 69 6e 67 6c 65 Data Ascii: elp-submit_button input[type="button"].button_clear+input[type="button"],.default-dialog>.module-single .modal-help-submit_button .btn-group-vertical input[type="button"].button_clear+input[type="button"],.btn-group-vertical .default-dialog>.module-single
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 73 56 61 6c 69 64 61 74 69 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 Data Ascii: sValidation+input[type="button"].message_send_button,.btn-group-vertical input[type="submit"].button+input[type="button"].message_send_button,.btn-group-vertical input[type="button"].message_reply_button+input[type="button"].message_send_button,.btn-group
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e Data Ascii: t[type="submit"].message_reply_button,.btn-group>.btn-group:not(:first-child)>input[type="submit"].message_send_button,.btn-group>.btn-group:not(:first-child)>input[type="submit"].CommandButton,.btn-group>.btn-group:not(:first-child)>input[type="submit"].
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 Data Ascii: on+input[type="submit"].message_send_button,.btn-group-vertical>input[type="button"].message_send_button+input[type="submit"].message_send_button,.btn-group-vertical>input[type="button"].CommandButton+input[type="submit"].message_send_button,.btn-group-ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	13.227.219.49	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:24 UTC	571	OUT	GET /adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js HTTP/1.1 Host: cdn.appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:24 UTC	775	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 52854 Connection: close Date: Wed, 29 May 2024 10:02:57 GMT Server: nginx/1.16.1 Last-Modified: Fri, 15 Apr 2022 21:40:35 GMT ETag: "6259e653-ce76" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: public, max-age=2678400, s-max-age=14400 timing-allow-origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3649c20f8adf8628b43dbef00864e392.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: j3S6QqA-AHpBPJqIGL0LSqfPLVf4i5COBik0BAtBJ1vC3oecZA72wA== Age: 627
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 3b 2f 2a 20 56 65 72 73 69 6f 6e 20 65 62 66 31 36 32 30 62 33 62 38 34 37 64 66 62 66 37 36 66 36 65 31 30 39 64 63 61 63 64 38 65 20 76 3a 32 32 2e 34 2e 30 2e 33 37 32 31 2c 20 63 3a 62 34 37 33 66 39 34 62 61 34 63 36 63 64 66 35 30 66 61 30 39 32 33 39 35 62 39 38 39 36 62 39 38 64 30 38 36 36 32 37 2c 20 62 3a 32 32 2e 34 2e 30 2e 33 37 32 31 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2c 20 41 70 70 44 79 6e 61 6d 69 63 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 0a 20 44 65 72 69 76 61 74 69 76 65 20 6f 66 20 47 6f 6f 67 6c 65 20 45 70 69 73 6f 64 65 73 3a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 20 47 6f 6f 67 6c 65 20 49 Data Ascii: ;/* Version ebf1620b3b847dfbf76f6e109dcacd8e v:22.4.0.3721, c:b473f94ba4c6cdf50fa092395b9896b98d086627, b:22.4.0.3721 /(function(){/ Copyright (c) 2013, AppDynamics, Inc. All rights reserved. Derivative of Google Episodes: Copyright 2010 Google I
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 6e 29 26 26 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 63 3d 22 3c 3c 3c 22 2b 6c 2e 42 62 28 64 29 2b 22 3e 3e 3e 22 3b 73 3d 73 2e 72 65 70 6c 61 63 65 28 64 2c 63 29 7d 29 3b 6b 3d 73 7d 65 6c 73 65 20 6b 3d 65 2e 4f 63 28 6b 2c 64 2e 63 6f 6e 66 2e 58 69 29 3b 65 2e 51 6c 28 63 29 26 26 28 6b 3d 68 2e 55 63 2e 74 6b 28 6b 2c 6d 29 29 3b 72 65 74 75 72 6e 20 6b 7d 2c 65 2e 71 6d 29 3b 63 5b 65 2e 45 64 28 22 67 75 69 64 73 22 29 5d 3d 6d 2e 65 63 3b 63 5b 65 2e 45 64 28 22 75 72 6c 50 61 72 74 73 22 29 5d 3d 6c 2e 65 63 3b 72 65 74 75 72 6e 20 63 7d 3b 65 2e 63 6d 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 22 65 76 65 6e 74 55 72 6c 22 3d 3d 64 7c 7c 22 Data Ascii: .utils.isDefined(n)&&n.forEach(function(d){var c="<<<"+l.Bb(d)+">>>";s=s.replace(d,c)});k=s}else k=e.Oc(k,d.conf.Xi);e.Ql(c)&&(k=h.Uc.tk(k,m));return k},e.qm);c[e.Ed("guids")]=m.ec;c[e.Ed("urlParts")]=l.ec;return c};e.cm=function(d){return"eventUrl"==d\|\|"
2024-05-29 10:13:24 UTC	16384	IN	Data Raw: 70 65 3d 3d 3d 64 2e 45 76 65 6e 74 54 79 70 65 2e 50 61 67 65 56 69 65 77 7c 7c 71 2e 65 76 65 6e 74 54 79 70 65 3d 3d 3d 64 2e 45 76 65 6e 74 54 79 70 65 2e 49 46 52 41 4d 45 29 6e 3d 71 3b 73 2e 70 75 73 68 28 71 29 7d 7d 63 3d 73 3b 69 66 28 30 3c 6b 2e 6c 65 6e 67 74 68 29 66 6f 72 28 6e 26 26 28 6e 2e 65 72 72 6f 72 73 3d 6b 2e 73 70 6c 69 63 65 28 30 2c 64 2e 63 6f 6e 66 2e 55 69 29 29 3b 30 3c 6b 2e 6c 65 6e 67 74 68 3b 29 71 3d 6b 2e 73 70 6c 69 63 65 28 30 2c 64 2e 63 6f 6e 66 2e 54 69 29 2c 6e 3d 65 2e 48 6d 2e 48 28 29 2c 6e 2e 65 72 72 6f 72 73 3d 71 2c 6e 2e 69 73 45 72 72 6f 72 45 76 65 6e 74 3d 21 30 2c 6e 2e 63 6f 6f 6b 69 65 4d 65 74 72 69 63 73 3d 6e 75 6c 6c 2c 6e 2e 6d 65 74 72 69 63 73 3d 6e 75 6c 6c 2c 6e 2e 72 65 73 6f 75 72 63 65 Data Ascii: pe===d.EventType.PageView\|\|q.eventType===d.EventType.IFRAME)n=q;s.push(q)}}c=s;if(0<k.length)for(n&&(n.errors=k.splice(0,d.conf.Ui));0<k.length;)q=k.splice(0,d.conf.Ti),n=e.Hm.H(),n.errors=q,n.isErrorEvent=!0,n.cookieMetrics=null,n.metrics=null,n.resource
2024-05-29 10:13:24 UTC	3702	IN	Data Raw: 73 2e 63 68 61 6e 6e 65 6c 2e 6f 6e 52 65 73 6f 6c 76 65 72 52 65 61 64 79 28 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 61 64 79 7c 7c 64 2e 6c 6f 67 28 22 4d 33 30 39 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 61 64 79 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 68 69 73 2e 63 68 61 6e 6e 65 6c 3d 64 7d 3b 72 65 74 75 72 6e 20 62 7d 28 29 3b 68 2e 79 6a 3d 61 7d 29 28 64 2e 63 6f 6d 6d 61 6e 64 73 7c 7c 28 64 2e 63 6f 6d 6d 61 6e 64 73 3d 7b 7d 29 29 7d 29 28 6b 7c 7c 28 6b 3d 7b 7d 29 29 3b 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 61 3d 6e 65 77 20 68 2e 79 6a 3b 64 Data Ascii: s.channel.onResolverReady()};b.prototype.isReady=function(){this.ready\|\|d.log("M309");return this.ready};b.prototype.init=function(d){this.channel=d};return b}();h.yj=a})(d.commands\|\|(d.commands={}))})(k\|\|(k={}));(function(d){(function(h){var a=new h.yj;d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	54.195.39.4	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:24 UTC	583	OUT	GET /5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:24 UTC	654	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 29 May 2024 10:13:24 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 505 Connection: close Last-Modified: Tue, 06 May 2014 00:01:40 GMT Expires: Thu, 29 May 2025 10:13:24 GMT Cache-Control: private p3p: CP="NON DSP COR CURa" Accept-CH: Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-WoW64, ua, ua-arch, ua-platform, ua-model, ua-mobile, ua-full-version, ua-platform-version Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-29 10:13:24 UTC	505	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 28 63 29 20 32 30 32 32 20 54 72 61 6e 73 55 6e 69 6f 6e 20 4c 4c 43 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 38 30 38 30 38 62 61 65 2d 64 34 63 33 2d 34 37 61 63 2d 39 39 32 39 2d 35 64 37 37 32 36 34 64 38 32 33 63 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 28 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2c 62 3d 61 2e 69 6f 5f 67 6c 6f 62 61 6c 5f 6f 62 6a 65 63 74 5f 6e 61 6d 65 7c 7c 22 49 47 4c 4f 4f 22 3b 61 3d 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 7b 7d 3b 61 3d 61 2e 69 6f 3d 61 2e 69 6f 7c 7c 7b 7d 3b 62 3d 61 2e 69 6f 5f 64 64 70 3b 69 66 28 61 2e 6c 6f 67 6f 4d 61 69 6e 29 72 65 74 75 72 6e 21 31 3b 61 2e 6c 6f 67 6f 4d 61 69 6e 3d 63 3b 61 2e Data Ascii: /* Copyright(c) 2022 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c*/(function(){(function c(){var a=window,b=a.io_global_object_name\|\|"IGLOO";a=a[b]=a[b]\|\|{};a=a.io=a.io\|\|{};b=a.io_ddp;if(a.logoMain)return!1;a.logoMain=c;a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49740	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:24 UTC	584	OUT	GET /x/css/material-icons.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/personal.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:25 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:13:25 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 1105 Connection: close Content-Type: text/css
2024-05-29 10:13:25 UTC	1105	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 61 74 65 72 69 61 6c 20 49 63 6f 6e 73 27 3b 0d 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 2e 65 6f 74 29 3b 20 2f 2a 20 46 6f 72 20 49 45 36 2d 38 20 2a 2f 0d 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4d 61 74 65 72 69 61 6c 20 49 63 6f 6e 73 27 29 2c 0d 0a 20 20 20 20 20 20 20 6c 6f 63 61 6c 28 27 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 27 29 2c 0d 0a 20 20 20 20 20 20 20 75 72 6c 28 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 2e 74 Data Ascii: @font-face { font-family: 'Material Icons'; font-style: normal; font-weight: 400; src: url(MaterialIcons-Regular.eot); /* For IE6-8 */ src: local('Material Icons'), local('MaterialIcons-Regular'), url(MaterialIcons-Regular.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49742	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:24 UTC	577	OUT	GET /x/css/angular.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/personal.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:25 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:13:25 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 5436 Connection: close Content-Type: text/css
2024-05-29 10:13:25 UTC	5436	IN	Data Raw: 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 74 61 62 6c 65 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 75 6c 20 7b 0d 0a 09 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 75 6c 6c 65 74 65 64 2d 6c 69 73 74 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 75 6c 6c 65 74 65 64 2d 6c 69 73 74 20 6c 69 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 Data Ascii: input[type="text"] {width: 100%;}table {border: 0;}ul {list-style-type: none;}.bulleted-list {padding-left: 0px;}.bulleted-list li {display: inline-block;width: 100%;overflow: visible;margin: 0;padding: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49743	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:24 UTC	587	OUT	GET /x/css/RadDockableObject.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/personal.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:25 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:13:25 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 2105 Connection: close Content-Type: text/css
2024-05-29 10:13:25 UTC	2105	IN	Data Raw: 2f 2a 20 72 2e 61 2e 64 2e 64 6f 63 6b 20 64 65 66 61 75 6c 74 20 73 6b 69 6e 20 2a 2f 0d 0a 0d 0a 2e 52 61 64 44 6f 63 6b 69 6e 67 5a 6f 6e 65 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 52 61 64 44 6f 63 6b 61 62 6c 65 4f 62 6a 65 63 74 46 69 78 65 64 0d 0a 7b 0d 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 65 35 65 35 65 35 3b 0d 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 65 35 65 35 65 35 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 62 37 62 37 62 37 3b 0d 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 Data Ascii: /* r.a.d.dock default skin */.RadDockingZone{background: white;border: 0;padding: 0px;}.RadDockableObjectFixed{border-top: solid 1px #e5e5e5;border-left: solid 1px #e5e5e5;border-right: solid 1px #b7b7b7;border-bottom: s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49741	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:24 UTC	622	OUT	GET /x/img/BANGOR.png HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.fnbo-in.selfip.com/x/personal.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:26 UTC	207	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:13:25 GMT Server: Apache Last-Modified: Sat, 13 Jan 2024 12:05:46 GMT Accept-Ranges: bytes Content-Length: 45863 Connection: close Content-Type: image/png
2024-05-29 10:13:26 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 00 83 08 02 00 00 00 e4 84 30 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 b2 c9 49 44 41 54 78 5e ed bd 05 80 25 c5 d5 36 7c 57 66 c7 6d 15 0d f1 84 c8 8b ac 8c df 3b 77 dc dd dd 65 05 d7 40 82 43 84 10 23 40 9c 84 10 81 18 31 42 12 42 d0 20 81 10 5c 16 59 61 7d 67 77 fc 7a ff cf 73 4e df 9e 3b b3 bb 64 87 b0 bc fb bd ff d4 9c e9 db 5d dd 5d 75 ea d4 a9 a7 ce a9 ae ae b6 19 47 34 04 42 48 36 5e c3 70 1b 86 cb 30 26 85 b0 03 42 24 c8 27 5b eb 14 68 c2 08 58 fb 7a 38 66 f8 40 21 f1 81 49 bf d7 e5 f3 7a 02 7e af 11 98 9e db 54 f0 fb fd 3e 9f 2f 80 20 b9 b8 02 3e 97 c7 ed 0b f8 a7 ae 0e 25 09 f8 c5 95 e6 51 48 a4 c6 5b Data Ascii: PNGIHDR0gAMAapHYsttfxIDATx^%6\|Wfm;we@C#@1BB \Ya}gwzsN;d]]uG4BH6^p0&B$'[hXz8f@!Iz~T>/ >%QH[
2024-05-29 10:13:26 UTC	8000	IN	Data Raw: 91 1d f3 c2 7f 28 01 14 40 41 17 43 31 08 fb 88 19 1f 0e 4e 4a 72 0f ff 6e e3 53 c7 94 a7 1f d3 96 17 dd 9c 29 b3 78 84 3a 33 d1 90 60 9e 84 b5 f1 c1 56 44 67 76 5c 4d fa 8d 7f bf 0b e9 70 50 83 ce 17 d5 6b 4a 93 b0 a7 18 e4 31 46 77 01 15 39 cf 18 bc bd 6a 8c ad 19 6c f8 40 4b 41 4c 53 26 87 ba d0 6e fb 73 12 36 94 c1 4f 59 58 93 12 df 95 37 bf 99 eb 3a 52 8f a1 cd 41 85 06 00 a1 fd 87 75 38 63 3a 73 3e d0 5b f6 2f 63 78 97 f0 3f 0c 77 53 73 0d ca 57 73 46 b6 5a 2e fe 04 31 48 36 8c 50 d2 43 33 04 cf c1 97 d4 6b 34 06 3b a8 97 e6 9b ae 04 6f 00 cd c8 9e dc b0 a6 8c a5 83 25 b6 96 74 8e be 75 f1 a5 5f b3 e1 59 96 29 7a 8e e6 f4 65 03 25 c7 f7 96 2c 6f cb 8b ac 4e 8d 6b ca 5c d2 57 64 2b 39 3d aa 70 d5 49 55 ce 93 8a d3 b7 1a 3e ed 27 c0 ea 14 78 07 99 47 Data Ascii: (@AC1NJrnS)x:3`VDgv\MpPkJ1Fw9jl@KALS&ns6OYX7:RAu8c:s>[/cx?wSsWsFZ.1H6PC3k4;o%tu_Y)ze%,oNk\Wd+9=pIU>'xG
2024-05-29 10:13:26 UTC	8000	IN	Data Raw: 7b 6b 7f f7 e2 13 68 c9 bb 03 7c 29 51 67 f0 a2 33 06 e7 1c 27 52 ee 95 82 bf b8 c0 ed e5 f3 38 10 87 32 82 ee bc 1c 73 0b b5 51 00 ba fc e7 df 59 56 94 7c 52 47 51 44 4d 2a ac ce 98 de 7c ce 1a 6b cd e0 64 ba 3e 0e a1 92 ff ff 48 0a a0 82 a1 ac b5 da d5 f3 9b 33 96 f7 14 45 16 ad 8a 72 7c ba ef 2b 57 bc e1 19 86 9d c8 99 e2 7e ea b0 35 5c cd 79 5b 16 63 12 ac a3 43 11 c2 c1 30 48 9a 2a 5a 0b 5a 6f 64 7d 06 31 68 20 87 6f a5 8b fe 29 73 d8 41 8d 86 62 10 fa 2b 34 12 38 53 cf 8f ef 82 64 91 02 6d 87 e9 be 58 f0 97 81 93 f4 e4 00 e2 23 ac c2 0e 7a f4 6f c7 17 a7 45 f3 f9 ce c1 08 96 51 47 06 3f 77 d1 96 3e af c3 ce af 23 f4 65 85 f5 c9 5a 39 a8 ec f7 00 83 50 14 9f 9f ab 18 f1 99 94 ff e3 ed 25 8b 2a 92 22 bb 72 60 1b f2 99 37 aa aa 33 93 da 26 1a 69 ca 0a Data Ascii: {kh\|)Qg3'R82sQYV\|RGQDM\|kd>H3Er\|+W~5\y[cC0HZZod}1h o)sAb+48SdmX#zoEQG?w>#eZ9P%*"r`73&i
2024-05-29 10:13:26 UTC	8000	IN	Data Raw: 07 56 99 29 aa 80 f9 a2 af 4a 68 72 7e b8 31 ff 6f 6f 3c 07 c9 8f 7b dd 5a c4 d0 77 74 55 11 cd 8c 45 9e 10 ef 88 df fc b8 eb 5f 9e 79 fc 84 72 79 c0 04 47 52 32 32 75 1d 5a 1e cc 1a c5 61 2d a3 bd a1 03 68 b7 c7 34 d8 ef 79 e5 5f b8 57 f5 1b 74 98 18 c4 95 cb d7 16 71 52 12 df 2c a5 ed 00 87 28 bc e0 f4 f3 7f 7c e3 c3 6f be c8 9a 42 e0 53 7f 88 09 24 2a 74 88 a0 08 eb 93 d5 97 b1 33 31 31 f1 9b 07 ef 3d a1 36 4b 5e 82 3d 8d 23 f4 ed 69 50 5a 3e 51 6a 49 d5 dc a7 94 c4 aa a9 1e 67 5c 7d fa df 36 3e 0d 9d 97 2f dc 7a 50 df e8 ac 76 19 ee e6 af 5e 4a 8b a3 8f af 4c a2 f7 0d 83 fc d1 bb 40 f8 d0 40 6b 5e 05 d2 01 1e c1 45 e8 ca 46 45 2f ab cb 6c fd f2 67 61 19 ec 1a 87 3c 0c cf 30 f4 45 78 3d 58 e0 7c 11 09 e3 44 0f 86 d7 f7 ed fc c2 3d 3f 07 0e 00 cb e6 d5 Data Ascii: V)Jhr~1oo<{ZwtUE_yryGR22uZa-h4y_WtqR,(\|oBS$*t311=6K^=#iPZ>QjIg\}6>/zPv^JL@@k^EFE/lga<0Ex=X\|D=?
2024-05-29 10:13:26 UTC	8000	IN	Data Raw: 5b 97 04 21 10 b0 25 23 bb 66 ea 6f 43 12 f0 8b 06 bf df f0 ff 6a d3 d3 31 55 a9 c7 f6 97 f2 59 6a 53 2a 9d 26 14 a1 8b f3 bf 95 01 93 25 d6 9a 70 d5 96 11 df 68 ef bc e9 ca 1d 1c 96 f2 7b 3d 90 22 f4 df f7 f0 a6 e7 4f 6e 29 8c ad 4f b7 35 25 c3 5f b3 75 a4 d0 1b e8 e6 9b 59 11 bd 79 e0 5f 2a 3d 93 8b 0a e9 fa ee 6d b9 4b 4a 52 fe be f3 d5 2d 81 71 88 65 5c 5e 23 77 05 64 0d 0d 8b 55 25 4b f3 95 42 4e a1 ec 6f 19 13 af 1a 93 6b 36 34 2d 6f c9 a1 1d d7 26 18 0a 6b 23 58 11 28 82 96 c2 d4 b7 f6 74 f8 9b 11 0d 19 a7 6c 68 d8 28 03 d2 90 9c b9 94 35 08 c9 ca 2f 52 d6 66 88 08 db 0c 96 f8 0f 3e 70 95 7c 2b 15 87 e0 1b 65 80 5f d7 f5 a5 cf 2e af cc 80 a7 a7 e2 53 c2 be 99 b7 ea 07 08 8d b0 2d 35 ea bc 0a 5b 4b 32 98 8b ab 49 3f be c2 fe dd 47 ef d1 65 25 51 a9 Data Ascii: [!%#foCj1UYjS&%ph{="On)O5%_uYy_=mKJR-qe\^#wdU%KBNok64-o&k#X(tlh(5/Rf>p\|+e_.S-5[K2I?Ge%Q
2024-05-29 10:13:27 UTC	5878	IN	Data Raw: 5c 30 b4 22 7e 68 4e 84 e0 de 3f 7a 10 00 02 49 00 06 e9 91 ee a0 76 60 13 e9 49 c4 40 ef 86 0c f7 0e 59 74 f8 eb 0f ff 3e aa 60 e5 e2 e0 5c 13 08 50 39 01 81 b7 50 b2 0a 62 11 22 95 73 10 6e d4 7b c3 5b f9 dc 06 9d 5c 6c 49 d2 29 3d 55 5f fd f3 2f d0 ef ee 32 5c 50 8f a1 91 61 be 55 0a b6 75 61 ac 77 e4 07 cc 7e 4c 3a 34 a8 54 44 69 f6 bb 27 00 ea 4f ec d9 f4 f1 e6 a2 d8 ea 34 3e 29 a3 7e c8 fc 2e 4e 8b 80 f3 92 8e fa 06 70 00 7d d0 18 ac 62 a3 e6 4c fd b0 f4 4c f4 1b f1 90 88 8a 03 72 99 79 a5 e8 13 08 d7 30 fe f0 30 08 52 db 68 b8 4e 1e a8 46 f7 18 db 91 43 53 1f 4c 02 01 65 21 5e e6 2b df 2c 04 93 e8 b5 98 2c 72 e9 4a 83 11 be f0 9c 52 18 11 e8 6f 17 54 27 bf af ab f8 f8 2a c7 37 ee fd f5 73 63 fc aa 37 5a 1a 9c 73 4a 5e a5 71 24 83 e6 80 ce d0 e7 a3 Data Ascii: \0"~hN?zIv`I@Yt>`\P9Pb"sn{[\lI)=U_/2\PaUuaw~L:4TDi'O4>)~.Np}bLLry00RhNFCSLe!^+,,rJRoT'*7sc7ZsJ^q$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	184.28.90.27	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:25 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-29 10:13:25 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=21346 Date: Wed, 29 May 2024 10:13:25 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:26 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-29 10:13:26 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=21438 Date: Wed, 29 May 2024 10:13:26 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-29 10:13:26 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:26 UTC	837	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:27 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1281 Connection: close Set-Cookie: __uzma=3bd86b79-9a95-4630-8d18-cbe36e8e1e20; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977606; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=2825; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=584301010051; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977606; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000213c1c60-7d3d-4a6d-b39a-6b896d73525717169776070080-ba9ad09bc18d437110; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90000510b66c-6b2c-4bd8-a351-8a341916f75c1-17169776070080-e9f104e224bde5af10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:27 GMT
2024-05-29 10:13:27 UTC	1281	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 71 75 61 6c 20 4f 70 70 6f 72 74 75 6e 69 74 79 20 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 22 20 73 74 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Equal Opportunity Logo</title> <g id="Components" str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49754	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:27 UTC	827	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:27 UTC	1614	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzma=6badfaa5-15f0-4c5e-8b68-4e64fdff89cf; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=4333; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=874661084436; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f600026f5f79b-497e-4973-b2f6-9251815186c817169776071060-bc71000c18e0ab6910; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f900082b49b6f-0d90-407d-a949-d6ce16323ca51-17169776071060-f5ca01c2cc8e94da10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:84\|g:05ccaba1-1492-49da-8d67-3db1727ab65b\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:13:57 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:13:57 GMT; path=/ Set-Cookie: ADRUM_BT1=R:84\|i:371912\|e:6; expires=Wed, 29-May-2024 10:13:57 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:27 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:27 UTC	823	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:27 UTC	1355	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12107 Connection: close Set-Cookie: __uzma=47d244e7-5b43-43bb-880a-5d98c21d10db; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7359; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=848461015310; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f600055722d3c-056a-4561-b8e8-c3431ffc096c17169776071050-e2e1b036b227be0910; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000876cd7c6-d99a-44de-86e6-cf4f6c6312551-17169776071050-1562ead08e7c926810; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:27 GMT
2024-05-29 10:13:27 UTC	12107	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 31 70 78 22 20 68 65 69 67 68 74 3d 22 37 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 31 20 37 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 36 34 20 28 39 33 35 33 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 64 (93537) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:27 UTC	807	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:27 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1612 Connection: close Set-Cookie: __uzma=55469983-a7a4-460c-b4a9-e065fd2564ed; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=9435; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=730871081838; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000c6fe01e6-cd5d-4a96-9492-9d02a0936af917169776071050-9fd0a4d260fb591610; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90005f3d5d8f-4f5e-4e22-880c-2d96630308981-17169776071050-3cce536ea6b6d8ce10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:27 GMT
2024-05-29 10:13:27 UTC	1612	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 09 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 38 20 28 38 34 36 36 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 09 3c 74 69 74 6c 65 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com --><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49753	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:27 UTC	801	OUT	GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:27 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 271563 Connection: close Last-Modified: Tue, 27 Apr 2021 13:46:46 GMT Accept-Ranges: bytes ETag: "0679bc36b3bd71:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:27 GMT
2024-05-29 10:13:27 UTC	16009	IN	Data Raw: ff d8 ff e1 13 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 07 80 00 00 01 01 00 03 00 00 00 01 04 38 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 30 32 3a 30 31 20 31 34 3a 35 30 3a 32 37 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: @ExifMM*8(1!2i$''Adobe Photoshop 22.1 (Macintosh)2021:02:01 14:50:27
2024-05-29 10:13:27 UTC	16384	IN	Data Raw: 16 04 a6 28 b8 da e3 c6 2c 83 74 cb ca c6 96 c0 c9 52 b9 8b 62 25 f2 b9 63 4b 6a a5 f1 17 73 94 4e 31 8d 30 d3 12 5c 65 a6 37 d4 38 d7 6c 4f 7c 34 d6 64 51 01 b3 7a 94 e9 89 03 8f 1b 6e 71 a4 da a2 ca 7b e2 aa 6b 81 8b 63 95 f8 e0 a6 42 5d e8 9c bc 4d 5e b8 a0 df 03 60 6c 63 a9 94 36 c7 0c 09 70 cb cd 9b 14 b7 95 4c bc ac 52 d1 db 28 1c 7d 31 a4 62 ae cb cc 06 62 31 43 ab 9b ae 56 62 71 4a d6 18 91 14 c5 c0 ae 31 c6 28 21 48 91 4c c9 b9 c6 b8 a0 c6 a9 a1 c2 c2 f7 44 95 a8 c4 1c 11 8a 09 3c 72 e9 cb 03 23 ba 16 b4 c6 93 5c 5d e2 3d 46 25 c0 8c 93 02 0a cc ac 71 19 5d 31 62 d6 5e 6c ba 62 96 b2 c1 c6 e5 e2 ad 96 cc 0d 32 b3 60 55 50 f5 ca 23 1a 3a e2 9d 71 65 cd 4f 1c 32 c8 a6 36 b4 c5 57 9a 53 7c 66 62 72 b0 2b 79 63 2b 2f 15 5c b8 a2 ed 89 ae 3c 60 64 17 Data Ascii: (,tRb%cKjsN10\e78lO\|4dQznq{kcB]M^`lc6pLR(}1bb1CVbqJ1(!HLD<r#\]=F%q]1b^lb2`UP#:qeO26WS\|fbr+yc+/\<`d
2024-05-29 10:13:27 UTC	16384	IN	Data Raw: 95 cc 13 2e 7d 1c a8 d4 68 0e 48 33 54 35 fa 46 69 05 56 a3 f6 4d 3e 83 f6 71 47 5f 83 dc 6e 3e 47 fe 69 6c 4e 26 0a dc 5f ec b0 e2 7e 9f f9 a7 31 88 a3 c2 79 49 b8 1b df b9 48 a8 0c 2a 68 0d 3f 1f f9 a7 0c bd 43 19 4b 93 f6 64 01 64 f9 fd 95 7c 2f 78 c8 56 46 fb 51 9f c0 fd ac 74 17 2d 0c 4d 13 8e 48 ea 78 8c 71 cc 63 91 bd af d5 7f cd 9c 7f 1c 0b 38 f1 80 46 fd 2b be 3f 8f 5a 95 ea a4 72 b2 c7 40 06 d8 15 e4 5e fb e2 8c 17 a7 5f a4 62 32 2a 81 d3 ae 60 e4 24 93 20 00 bd e9 c9 80 a0 01 df cd 4d a5 43 db 12 de 4a 95 04 d0 12 69 d8 0c 11 2c be a1 56 90 29 e2 29 4a 52 a3 fc ac 40 aa 84 01 43 7a b5 ea 3a 11 f2 cc 6c 82 c9 df 6f 93 74 79 72 dd a5 b5 9a 5e 3c 14 9e 4a 59 7d c0 fb 58 85 2a 36 26 9d f1 78 e7 96 dc 2f 06 fb 2d cc 53 b1 e9 ff 00 0d 82 62 bd 68 e6 Data Ascii: .}hH3T5FiVM>qG_n>GilN&_~1yIHh?CKdd\|/xVFQt-MHxqc8F+?Zr@^_b2`$ MCJi,V))JR@Cz:lotyr^<JY}X*6&x/-Sbh
2024-05-29 10:13:27 UTC	16384	IN	Data Raw: c6 29 0a 83 35 31 a0 e5 d7 03 26 c8 ca e3 9a b8 a0 c5 35 6a 24 1c d4 c5 a9 96 29 8d a7 85 40 8c d8 bb 01 8c a6 2b c2 a7 97 8f e3 95 c7 15 a5 a4 63 71 52 b8 c2 b8 ad 2d a6 60 31 d4 cd 4c 55 c3 1e 31 b4 a6 38 02 70 32 0d e3 d4 57 30 4c 78 14 c0 cc 05 ca a3 2f e5 94 31 e0 57 03 36 d4 63 a9 94 06 38 0a e0 4b 59 44 63 e9 9a 94 c5 56 ae d9 79 67 19 5c 52 bb 8d 72 f8 65 03 8e ae 05 5a 45 33 05 c7 93 95 4c 52 da 83 8e 39 43 2e b8 15 a2 73 63 1b 30 63 8a b6 c3 12 23 16 ad 71 8e 08 c0 a5 44 9c 61 38 e7 18 cc 58 36 32 f3 66 c5 2d e6 cd 5c d8 15 d9 86 6c d8 a5 bc d9 59 ab 8a b7 97 95 5c bc 09 76 5e 56 5e 2a de 6c d9 b0 25 d8 e1 8d cb c0 95 d9 78 d1 97 8a 5b cb ca cd 81 57 0c bc 6e 6a e0 4a ec bc 6e 5e 29 5d 9b 2a b9 b0 2a ec bc 6e 5e 29 5d 97 8d cb c5 5b cb c6 d7 2c Data Ascii: )51&5j$)@+cqR-`1LU18p2W0Lx/1W6c8KYDcVyg\RreZE3LR9C.sc0c#qDa8X62f-\lY\v^V^l%x[WnjJn^)]*n^)][,
2024-05-29 10:13:27 UTC	16384	IN	Data Raw: d9 b3 65 e0 57 0c ba 66 03 2f 14 bb 36 5e 6c 55 d9 79 b3 62 ad e5 e5 65 e2 96 f2 c6 56 5e 2a de 5e 56 5e 14 b6 33 65 65 e2 ad e6 cd 9b 15 6f 36 56 5e 04 b7 9b 2b 36 2a de 6c ac bc 55 bc d9 59 b0 a1 bc d9 b3 62 ad d7 35 72 b3 62 ad e6 ca ae 5e 28 6f 36 56 5e 15 76 5e 56 6c 50 de 6c ac ba e1 57 66 ca ae 5d 71 57 66 cd 5c d5 c5 5b cd 95 97 8a bb 2f 2b 2c 61 43 b2 f2 b2 f0 a1 bc bc ac d8 55 bc d9 59 75 c2 87 65 d7 2a b9 b1 56 eb 9b 2b 36 2a de 6c ac ba e1 57 66 ae 6c d8 a1 d9 b3 66 c5 2e cd 9b 2b 02 bb 36 6c d8 15 d8 d7 de 83 c4 e5 e5 77 18 0a ad 93 7d bc 7f ae 26 3a 7d 27 f0 18 a9 fb 43 18 ab f0 b7 d3 95 c8 59 66 39 35 4f b3 fe a1 c4 e9 41 5f 0e 07 17 a6 e3 e4 46 27 4a a9 f7 41 f8 64 24 3f 1f e6 a4 15 09 47 15 07 ba 92 3f e3 65 c7 76 db fc e9 ff 00 36 e3 a6 Data Ascii: eWf/6^lUybeV^^V^3eeo6V^+6lUYb5rb^(o6V^v^VlPlWf]qWf\[/+,aCUYueV+6lWflf.+6lw}&:}'CYf95OA_F'JAd$?G?ev6
2024-05-29 10:13:27 UTC	16384	IN	Data Raw: 8a e3 cb 63 49 c5 05 67 1a 63 4e d8 e6 38 c3 d3 0b 12 b5 9b 11 23 1c 6a 0d 31 a4 61 6b 3b ad 22 99 58 f2 b8 d2 30 a2 9d 9a 99 86 5e 04 86 b3 53 2f 35 71 4b 54 c5 14 e3 6b 8e 5c 0c 82 a0 c7 8a 62 75 cd cb 03 30 bc b6 34 65 63 97 14 bb 2c 1c d9 b6 c0 ad d7 36 55 72 c6 29 6a 99 b2 ce 30 9c 55 d9 b3 57 2b 14 37 9b 36 6c 55 bc d9 59 78 ab b1 d8 dc ba e0 4a ec d9 43 2f 14 b7 9b 28 65 e2 96 f2 c6 56 58 c0 ad e5 e5 65 e2 c9 bc bc ac bc 0a de 6c d9 78 19 3b 36 6c bc 55 d9 79 59 b0 25 bc dd 33 65 d3 15 5b 95 8e a6 55 31 56 b3 65 d3 35 31 57 66 cd 9b 02 b5 97 d3 36 6c 0a de 5e 56 6c 52 de 5e 37 2e b8 ab 79 78 da e6 ae 29 5d 95 5c aa e6 ae 05 6e b9 ab 8d ae 6a e3 4b 6b eb 95 5c 6d 73 57 1a 5b 5d 5c d5 c6 d7 2a b8 d2 da fa e6 ae 32 b9 ab 86 96 d7 57 31 38 ca e5 d7 0d Data Ascii: cIgcN8#j1ak;"X0^S/5qKTk\bu04ec,6Ur)j0UW+76lUYxJC/(eVXelx;6lUyY%3e[U1Ve51Wf6l^VlR^7.yx)]\njKk\msW[]\*2W18
2024-05-29 10:13:27 UTC	16384	IN	Data Raw: 61 cb 51 39 cf 83 18 df ac 8f d3 07 69 0d 2e 2c 58 c4 f3 6e 3f 86 23 ea c9 2f e8 fe 3f d2 7f 11 be 98 97 3a a9 33 73 21 5f 66 9b a6 df ef 9b 44 fd 88 ff 00 9a 4f da c3 4b ad 52 d3 45 45 b5 8c 72 97 a2 44 9d 77 fe 76 fd 9f f6 58 49 77 e6 19 af 80 83 4b 5f 46 02 78 2c 94 f8 9b fc 8b 68 bf e3 6c 33 d2 74 08 ec 87 ab 70 39 ce 77 25 b7 a1 ff 00 8d 9f 04 67 2e 2e 0c 5e b3 fc 79 67 f4 c7 fa ab 96 31 10 f1 35 15 8e 1f e4 f4 f8 fe a9 7f 5d 31 82 27 97 8c d7 3b c8 3a 2f ec af fa ab fb 5f eb b6 0b c6 f4 1b f4 c0 b2 ea 96 d0 37 a6 5f 9c 87 a2 46 39 b1 ff 00 62 9f f1 b6 66 92 23 cc ba d0 27 94 fa 45 fb bf 85 19 5c b0 70 1c 37 2f 3e ec 8d 0f 80 75 df fe 17 e0 5c 52 6b a8 ac c5 6e 24 54 ff 00 58 d3 fe 05 70 71 c6 b8 8e c3 cf d2 c8 e2 98 97 00 1c 52 ee 8f af fd ca 2c 1c Data Ascii: aQ9i.,Xn?#/?:3s!_fDOKREErDwvXIwK_Fx,hl3tp9w%g..^yg15]1';:/_7_F9bf#'E\p7/>u\Rkn$TXpqR,
2024-05-29 10:13:27 UTC	16384	IN	Data Raw: fe ee 2f f8 c7 73 f1 e0 9b 34 41 fe 93 73 f1 33 1a 16 71 49 1d be cb 2c 67 e1 93 fd 7e 12 3f 1f b1 1f ed e4 5e da e6 49 1c df 5f 7e ff 00 99 00 ef 46 6a 7f ba e2 6f 8b 82 a7 ed fc 2b c3 fd 7c 37 83 50 25 c4 af 53 30 14 58 86 ca 8b fb 29 13 b7 fb cf 1f fc 5f cb d6 7f f7 52 27 f7 98 63 2b e6 c6 78 f8 45 44 7b cb 2e 8e 69 24 24 49 f0 84 fd 9a ec bf e4 c8 df 6b 92 ff 00 27 db ff 00 53 04 c7 70 08 aa 6e a3 ab 9d 97 fd 8e 47 60 bd 11 00 6e 9d 05 06 cb 4a 22 0f f8 ae 1f b4 ff 00 f1 92 e1 e1 4f f8 c9 86 29 a9 c7 21 0d 1a b3 90 36 2d db fd 56 6f 81 3f e7 9c 7c 7f e2 cc b8 17 06 70 3d db 27 0a 6a 2b fd 98 ea e0 28 26 92 6d e9 51 e2 2a df f0 df 63 fe 1b 05 8a f7 c9 34 11 45 ba e5 d7 1b 9b 14 2e cb ae 37 2e b8 a5 75 72 eb 8c e5 9a b8 aa fa e6 ae 32 b9 ab 81 2b eb 9b Data Ascii: /s4As3qI,g~?^I_~Fjo+\|7P%S0X)_R'c+xED{.i$$Ik'SpnG`nJ"O)!6-Vo?\|p='j+(&mQ*c4E.7.ur2+
2024-05-29 10:13:27 UTC	16384	IN	Data Raw: 6a ec 7d 81 ff 00 25 7e 05 f8 9b fd 86 08 e6 23 3c 2e be 2d be c9 20 ee 77 e4 1a 36 e0 af fe 57 c4 c9 80 10 2a 6e eb cb c0 56 83 fe 17 e2 ff 00 88 63 6a 7e 43 c3 2a 3b ee e4 01 5b 74 08 e4 91 a3 25 a3 aa a3 7e c8 6e 42 9f f1 2c 69 64 7f 83 75 7a d6 a7 a1 fa 31 04 5f 1d 8f 8f 86 28 d7 44 0e 2a 7b 00 4d 07 6c 81 1d dc db 3d ea a1 f8 28 46 e2 69 53 d3 7d ff 00 63 7f 87 11 67 24 d3 f0 c4 be 26 eb 8a 80 28 7a d4 63 5d eb 6b 69 d8 f5 c5 43 19 54 2d 14 70 24 d6 9f 17 fb 26 f8 b9 2a e3 5e 9c 43 af c9 8d 36 1f cb 86 7a 76 9f 6f 74 a1 96 71 15 c0 3f 65 c5 14 7f be e4 0d fe ec 8b fd f9 fb 71 fd af 8d 32 71 16 c2 72 11 16 50 ab 34 96 d0 95 f4 d4 a3 d5 79 b2 1a 82 7e 2f 81 db f6 d3 19 08 92 45 32 22 ef 08 05 a9 4f b3 fc ec bf f1 b2 e1 e6 a1 6f 1c 70 cd 24 2e 16 47 21 Data Ascii: j}%~#<.- w6WnVcj~C;[t%~nB,iduz1_(D{Ml=(FiS}cg$&(zc]kiCT-p$&^C6zvotq?eq2qrP4y~/E2"Oop$.G!
2024-05-29 10:13:27 UTC	16384	IN	Data Raw: 98 ab 59 b2 ce 56 28 75 73 65 66 c5 5b ca cd 9b 0a 1d 95 97 95 8a ba b9 79 59 b1 43 75 cb c6 e5 8c 52 dd 31 45 51 8d 03 1e 05 30 24 05 c0 63 c2 d7 28 2e 29 4a 60 6c 01 c0 01 91 ff 00 3c 59 1b bd 21 d9 45 5a 06 59 7e 81 f0 bf fc 2b 64 82 b8 85 e4 1f 5b b7 96 df fd f8 8c bf 78 c0 45 8a 6c c7 2e 09 89 77 17 86 34 9c cf c0 29 4e f8 89 ad 6b 8a 33 70 62 bd c1 a7 ca 98 a9 52 16 84 d4 d2 b4 1e 19 8a ef 39 20 dd 0f 72 30 5a 49 0b 46 aa 3f bd 1b 12 29 42 3e 9c 48 9e 26 94 d8 f8 e3 40 de aa 01 c1 4b 6f 42 fc bb d4 40 f5 b4 d7 3d fd 58 ab dc 74 99 53 fe 4e 64 ea 99 c5 f4 0d 49 74 dd 4a de e6 45 d9 24 15 a6 db 37 ee db fe 25 cb 3b 61 1b e6 4e 33 71 ae e7 53 ab c7 c3 93 88 72 96 ff 00 15 80 63 80 cb cd 96 38 ae cb 19 80 ae 58 18 15 ba 66 a6 06 bf ba 7b 28 4c e9 19 94 Data Ascii: YV(usef[yYCuR1EQ0$c(.)J`l<Y!EZY~+d[xEl.w4)Nk3pbR9 r0ZIF?)B>H&@KoB@=XtSNdItJE$7%;aN3qSrc8Xf{(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49758	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:27 UTC	542	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:27 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1281 Connection: close Set-Cookie: __uzma=4be0e9c3-ade9-492f-9166-d9c75902ef52; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=5239; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=869431072018; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000f27a42d1-00fd-403a-b7eb-f2c2ee7bf76b17169776078190-8607bc355330740310; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000ee27d168-02ba-4ff1-ba1b-cb2f9d2fdf421-17169776078190-e22eead68f85517310; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:27 GMT
2024-05-29 10:13:27 UTC	1281	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 71 75 61 6c 20 4f 70 70 6f 72 74 75 6e 69 74 79 20 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 22 20 73 74 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Equal Opportunity Logo</title> <g id="Components" str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49759	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:27 UTC	532	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:28 UTC	1612	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzma=a2717099-0896-4855-81c1-550ae9b3a017; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=6473; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=940471018472; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000e893c9a2-ec42-4fdb-9fe2-2b0167d986d917169776078850-df8bf93695d451ee10; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000eea58c65-8579-438b-8515-99f2daf1dd681-17169776078850-a0ab51dbfd6d94e610; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:0\|g:82d5defc-bef1-40cb-94bc-12093914f258\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:13:57 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:13:57 GMT; path=/ Set-Cookie: ADRUM_BT1=R:0\|i:371912\|e:6; expires=Wed, 29-May-2024 10:13:57 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:27 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49760	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:27 UTC	528	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:28 UTC	1355	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12107 Connection: close Set-Cookie: __uzma=4629b859-86d9-49d5-a9bc-ae48728b7271; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=9709; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=121691077582; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977607; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60007eb7f26e-1589-46a0-9438-c3b60434e9b717169776078960-0e6824b0d63c1e0b10; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90008ef75d43-dfb3-41cc-b233-8215d83911e91-17169776078960-8d09715e43d86d1f10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:27 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:27 GMT
2024-05-29 10:13:28 UTC	12107	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 31 70 78 22 20 68 65 69 67 68 74 3d 22 37 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 31 20 37 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 36 34 20 28 39 33 35 33 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 64 (93537) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:28 UTC	512	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:28 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1612 Connection: close Set-Cookie: __uzma=1b68201f-c229-4d7d-b791-b0babb7942b6; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:28 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977608; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:28 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7583; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:28 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=449991080474; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:28 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977608; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:28 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000fcc829c9-4aa1-48c1-994e-0e9dce4bd7e717169776081940-ae11e0e658b78d2510; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:28 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000f4dc32df-6999-4c70-8a17-bc9a8e4a707a1-17169776081940-2a2246a96a7453a110; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:28 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:28 GMT
2024-05-29 10:13:28 UTC	1612	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 09 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 38 20 28 38 34 36 36 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 09 3c 74 69 74 6c 65 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com --><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49762	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:28 UTC	690	OUT	GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.fnbo-in.selfip.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:28 UTC	514	IN	HTTP/1.1 200 OK Content-Type: font/x-woff Content-Length: 24388 Connection: close Last-Modified: Tue, 17 Nov 2020 15:59:52 GMT Accept-Ranges: bytes ETag: "08c20affabcd61:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:28 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4dhrEn2NGfNF_KJLeAewJWz3yv_UEsnqRbgZt2vm6hPTALmK6NTtnEFHw4awFviE_9PFc; path=/; SameSite=None; Secure
2024-05-29 10:13:28 UTC	15870	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 5f 44 00 12 00 00 00 00 b3 dc 00 07 00 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 5f 28 00 00 00 1c 00 00 00 1c 80 42 54 5c 47 44 45 46 00 00 48 40 00 00 00 32 00 00 00 36 03 b6 04 85 47 50 4f 53 00 00 4a 34 00 00 14 f3 00 00 32 4e f0 59 0d 67 47 53 55 42 00 00 48 74 00 00 01 c0 00 00 03 be cb 34 ff 55 4f 53 2f 32 00 00 02 0c 00 00 00 4e 00 00 00 60 53 a9 aa 1a 63 6d 61 70 00 00 04 c4 00 00 01 81 00 00 01 da 1f de 17 36 63 76 74 20 00 00 0d 74 00 00 00 5d 00 00 00 e4 2f 52 15 48 66 70 67 6d 00 00 06 48 00 00 06 70 00 00 0d 6d 4d 24 8e 7c 67 61 73 70 00 00 48 38 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0f ec 00 00 33 a6 00 00 5c 54 2c e1 59 b0 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFF_DFFTM_(BT\GDEFH@26GPOSJ42NYgGSUBHt4UOS/2N`Scmap6cvt t]/RHfpgmHpmM$\|gaspH8glyf3\T,Yhead
2024-05-29 10:13:28 UTC	8518	IN	Data Raw: 6f fd 7a 3a 7e 05 f0 e5 5a 18 bf 14 6d 78 82 b1 03 67 d8 91 71 87 d3 6f 36 59 ca 8e 95 2e 67 d8 51 8a 8c f4 8d 27 2b b2 23 6c d7 81 c6 63 fb da 75 23 8d 93 06 3d e5 46 6b c7 e0 1e 23 c6 3f 2d ec fc 53 7b 53 b8 3b cd 0e d7 bf fa 8f 81 90 78 81 d6 5b 40 7e e8 bb 10 76 f2 85 85 40 6c 11 08 8e 9e 05 fd 22 d5 16 98 12 c8 15 99 cd bc fa 24 13 be 30 b2 3f e0 3a a3 bb a4 ac 0c d6 d1 55 e6 b4 59 29 fd 10 fd ab 40 fe 9c 59 b5 3f 8b 35 0a d4 63 d6 67 bd af 03 07 c6 27 7a 37 6c b9 66 9b b5 59 ab 75 07 92 eb 49 61 32 50 1d 89 84 82 7c 6b cb c5 ee 70 4b df 8e 2d db f6 e5 e7 79 b5 63 03 9a 3c 9b eb 27 b5 6e 4f 6d 9d bb 22 48 d7 c1 03 5f b7 c1 3a a8 d0 60 e6 1d 28 c5 30 21 bd f4 8a 13 19 3d b9 0b 94 cf 88 ea 61 e2 0d e9 17 9c 2c bb b2 e4 ed 26 4a fa 76 13 ce a1 a5 c2 80 Data Ascii: oz:~Zmxgqo6Y.gQ'+#lcu#=Fk#?-S{S;x[@~v@l"$0?:UY)@Y?5cg'z7lfYuIa2P\|kpK-yc<'nOm"H_:`(0!=a,&Jv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49761	54.195.39.4	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:28 UTC	580	OUT	GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://mail.fnbo-in.selfip.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-29 10:13:28 UTC	372	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Wed, 29 May 2024 10:13:28 GMT Content-Type: audio/mpeg Content-Length: 504 Connection: close Content-Disposition: inline; filename=time.mp3 Content-Range: bytes 0-503/504 Accept-Ranges: bytes Pragma: public Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-29 10:13:28 UTC	504	IN	Data Raw: ff e3 48 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 69 6e 67 00 00 00 0f 08 2e 7b af 00 00 02 40 00 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 0a 4c 41 4d 45 33 2e 39 38 72 04 28 00 00 00 00 00 00 00 00 14 08 24 06 c0 2d 00 01 9a 00 00 02 40 c6 6c f8 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HdXing.{@@@@@@@@@@@@@@@@@@@@@@@@@LAME3.98r($-@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49764	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:29 UTC	949	OUT	GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE; __uzmb=1716977607; __uzmd=1716977607; ADRUM_BTa=R:0\|g:82d5defc-bef1-40cb-94bc-12093914f258\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; SameSite=None; ADRUM_BT1=R:0\|i:371912\|e:6; __uzma=4629b859-86d9-49d5-a9bc-ae48728b7271; __uzme=9709; __uzmc=121691077582; __uzmf=7f60007eb7f26e-1589-46a0-9438-c3b60434e9b717169776078960-0e6824b0d63c1e0b10; uzmx=7f90008ef75d43-dfb3-41cc-b233-8215d83911e91-17169776078960-8d09715e43d86d1f10
2024-05-29 10:13:29 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 271563 Connection: close Last-Modified: Tue, 27 Apr 2021 13:46:46 GMT Accept-Ranges: bytes ETag: "0679bc36b3bd71:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:28 GMT
2024-05-29 10:13:29 UTC	16009	IN	Data Raw: ff d8 ff e1 13 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 07 80 00 00 01 01 00 03 00 00 00 01 04 38 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 30 32 3a 30 31 20 31 34 3a 35 30 3a 32 37 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: @ExifMM*8(1!2i$''Adobe Photoshop 22.1 (Macintosh)2021:02:01 14:50:27
2024-05-29 10:13:29 UTC	16384	IN	Data Raw: 16 04 a6 28 b8 da e3 c6 2c 83 74 cb ca c6 96 c0 c9 52 b9 8b 62 25 f2 b9 63 4b 6a a5 f1 17 73 94 4e 31 8d 30 d3 12 5c 65 a6 37 d4 38 d7 6c 4f 7c 34 d6 64 51 01 b3 7a 94 e9 89 03 8f 1b 6e 71 a4 da a2 ca 7b e2 aa 6b 81 8b 63 95 f8 e0 a6 42 5d e8 9c bc 4d 5e b8 a0 df 03 60 6c 63 a9 94 36 c7 0c 09 70 cb cd 9b 14 b7 95 4c bc ac 52 d1 db 28 1c 7d 31 a4 62 ae cb cc 06 62 31 43 ab 9b ae 56 62 71 4a d6 18 91 14 c5 c0 ae 31 c6 28 21 48 91 4c c9 b9 c6 b8 a0 c6 a9 a1 c2 c2 f7 44 95 a8 c4 1c 11 8a 09 3c 72 e9 cb 03 23 ba 16 b4 c6 93 5c 5d e2 3d 46 25 c0 8c 93 02 0a cc ac 71 19 5d 31 62 d6 5e 6c ba 62 96 b2 c1 c6 e5 e2 ad 96 cc 0d 32 b3 60 55 50 f5 ca 23 1a 3a e2 9d 71 65 cd 4f 1c 32 c8 a6 36 b4 c5 57 9a 53 7c 66 62 72 b0 2b 79 63 2b 2f 15 5c b8 a2 ed 89 ae 3c 60 64 17 Data Ascii: (,tRb%cKjsN10\e78lO\|4dQznq{kcB]M^`lc6pLR(}1bb1CVbqJ1(!HLD<r#\]=F%q]1b^lb2`UP#:qeO26WS\|fbr+yc+/\<`d
2024-05-29 10:13:29 UTC	16384	IN	Data Raw: 95 cc 13 2e 7d 1c a8 d4 68 0e 48 33 54 35 fa 46 69 05 56 a3 f6 4d 3e 83 f6 71 47 5f 83 dc 6e 3e 47 fe 69 6c 4e 26 0a dc 5f ec b0 e2 7e 9f f9 a7 31 88 a3 c2 79 49 b8 1b df b9 48 a8 0c 2a 68 0d 3f 1f f9 a7 0c bd 43 19 4b 93 f6 64 01 64 f9 fd 95 7c 2f 78 c8 56 46 fb 51 9f c0 fd ac 74 17 2d 0c 4d 13 8e 48 ea 78 8c 71 cc 63 91 bd af d5 7f cd 9c 7f 1c 0b 38 f1 80 46 fd 2b be 3f 8f 5a 95 ea a4 72 b2 c7 40 06 d8 15 e4 5e fb e2 8c 17 a7 5f a4 62 32 2a 81 d3 ae 60 e4 24 93 20 00 bd e9 c9 80 a0 01 df cd 4d a5 43 db 12 de 4a 95 04 d0 12 69 d8 0c 11 2c be a1 56 90 29 e2 29 4a 52 a3 fc ac 40 aa 84 01 43 7a b5 ea 3a 11 f2 cc 6c 82 c9 df 6f 93 74 79 72 dd a5 b5 9a 5e 3c 14 9e 4a 59 7d c0 fb 58 85 2a 36 26 9d f1 78 e7 96 dc 2f 06 fb 2d cc 53 b1 e9 ff 00 0d 82 62 bd 68 e6 Data Ascii: .}hH3T5FiVM>qG_n>GilN&_~1yIHh?CKdd\|/xVFQt-MHxqc8F+?Zr@^_b2`$ MCJi,V))JR@Cz:lotyr^<JY}X*6&x/-Sbh
2024-05-29 10:13:29 UTC	16384	IN	Data Raw: c6 29 0a 83 35 31 a0 e5 d7 03 26 c8 ca e3 9a b8 a0 c5 35 6a 24 1c d4 c5 a9 96 29 8d a7 85 40 8c d8 bb 01 8c a6 2b c2 a7 97 8f e3 95 c7 15 a5 a4 63 71 52 b8 c2 b8 ad 2d a6 60 31 d4 cd 4c 55 c3 1e 31 b4 a6 38 02 70 32 0d e3 d4 57 30 4c 78 14 c0 cc 05 ca a3 2f e5 94 31 e0 57 03 36 d4 63 a9 94 06 38 0a e0 4b 59 44 63 e9 9a 94 c5 56 ae d9 79 67 19 5c 52 bb 8d 72 f8 65 03 8e ae 05 5a 45 33 05 c7 93 95 4c 52 da 83 8e 39 43 2e b8 15 a2 73 63 1b 30 63 8a b6 c3 12 23 16 ad 71 8e 08 c0 a5 44 9c 61 38 e7 18 cc 58 36 32 f3 66 c5 2d e6 cd 5c d8 15 d9 86 6c d8 a5 bc d9 59 ab 8a b7 97 95 5c bc 09 76 5e 56 5e 2a de 6c d9 b0 25 d8 e1 8d cb c0 95 d9 78 d1 97 8a 5b cb ca cd 81 57 0c bc 6e 6a e0 4a ec bc 6e 5e 29 5d 9b 2a b9 b0 2a ec bc 6e 5e 29 5d 97 8d cb c5 5b cb c6 d7 2c Data Ascii: )51&5j$)@+cqR-`1LU18p2W0Lx/1W6c8KYDcVyg\RreZE3LR9C.sc0c#qDa8X62f-\lY\v^V^l%x[WnjJn^)]*n^)][,
2024-05-29 10:13:29 UTC	16384	IN	Data Raw: d9 b3 65 e0 57 0c ba 66 03 2f 14 bb 36 5e 6c 55 d9 79 b3 62 ad e5 e5 65 e2 96 f2 c6 56 5e 2a de 5e 56 5e 14 b6 33 65 65 e2 ad e6 cd 9b 15 6f 36 56 5e 04 b7 9b 2b 36 2a de 6c ac bc 55 bc d9 59 b0 a1 bc d9 b3 62 ad d7 35 72 b3 62 ad e6 ca ae 5e 28 6f 36 56 5e 15 76 5e 56 6c 50 de 6c ac ba e1 57 66 ca ae 5d 71 57 66 cd 5c d5 c5 5b cd 95 97 8a bb 2f 2b 2c 61 43 b2 f2 b2 f0 a1 bc bc ac d8 55 bc d9 59 75 c2 87 65 d7 2a b9 b1 56 eb 9b 2b 36 2a de 6c ac ba e1 57 66 ae 6c d8 a1 d9 b3 66 c5 2e cd 9b 2b 02 bb 36 6c d8 15 d8 d7 de 83 c4 e5 e5 77 18 0a ad 93 7d bc 7f ae 26 3a 7d 27 f0 18 a9 fb 43 18 ab f0 b7 d3 95 c8 59 66 39 35 4f b3 fe a1 c4 e9 41 5f 0e 07 17 a6 e3 e4 46 27 4a a9 f7 41 f8 64 24 3f 1f e6 a4 15 09 47 15 07 ba 92 3f e3 65 c7 76 db fc e9 ff 00 36 e3 a6 Data Ascii: eWf/6^lUybeV^^V^3eeo6V^+6lUYb5rb^(o6V^v^VlPlWf]qWf\[/+,aCUYueV+6lWflf.+6lw}&:}'CYf95OA_F'JAd$?G?ev6
2024-05-29 10:13:29 UTC	16384	IN	Data Raw: 8a e3 cb 63 49 c5 05 67 1a 63 4e d8 e6 38 c3 d3 0b 12 b5 9b 11 23 1c 6a 0d 31 a4 61 6b 3b ad 22 99 58 f2 b8 d2 30 a2 9d 9a 99 86 5e 04 86 b3 53 2f 35 71 4b 54 c5 14 e3 6b 8e 5c 0c 82 a0 c7 8a 62 75 cd cb 03 30 bc b6 34 65 63 97 14 bb 2c 1c d9 b6 c0 ad d7 36 55 72 c6 29 6a 99 b2 ce 30 9c 55 d9 b3 57 2b 14 37 9b 36 6c 55 bc d9 59 78 ab b1 d8 dc ba e0 4a ec d9 43 2f 14 b7 9b 28 65 e2 96 f2 c6 56 58 c0 ad e5 e5 65 e2 c9 bc bc ac bc 0a de 6c d9 78 19 3b 36 6c bc 55 d9 79 59 b0 25 bc dd 33 65 d3 15 5b 95 8e a6 55 31 56 b3 65 d3 35 31 57 66 cd 9b 02 b5 97 d3 36 6c 0a de 5e 56 6c 52 de 5e 37 2e b8 ab 79 78 da e6 ae 29 5d 95 5c aa e6 ae 05 6e b9 ab 8d ae 6a e3 4b 6b eb 95 5c 6d 73 57 1a 5b 5d 5c d5 c6 d7 2a b8 d2 da fa e6 ae 32 b9 ab 86 96 d7 57 31 38 ca e5 d7 0d Data Ascii: cIgcN8#j1ak;"X0^S/5qKTk\bu04ec,6Ur)j0UW+76lUYxJC/(eVXelx;6lUyY%3e[U1Ve51Wf6l^VlR^7.yx)]\njKk\msW[]\*2W18
2024-05-29 10:13:29 UTC	16384	IN	Data Raw: 61 cb 51 39 cf 83 18 df ac 8f d3 07 69 0d 2e 2c 58 c4 f3 6e 3f 86 23 ea c9 2f e8 fe 3f d2 7f 11 be 98 97 3a a9 33 73 21 5f 66 9b a6 df ef 9b 44 fd 88 ff 00 9a 4f da c3 4b ad 52 d3 45 45 b5 8c 72 97 a2 44 9d 77 fe 76 fd 9f f6 58 49 77 e6 19 af 80 83 4b 5f 46 02 78 2c 94 f8 9b fc 8b 68 bf e3 6c 33 d2 74 08 ec 87 ab 70 39 ce 77 25 b7 a1 ff 00 8d 9f 04 67 2e 2e 0c 5e b3 fc 79 67 f4 c7 fa ab 96 31 10 f1 35 15 8e 1f e4 f4 f8 fe a9 7f 5d 31 82 27 97 8c d7 3b c8 3a 2f ec af fa ab fb 5f eb b6 0b c6 f4 1b f4 c0 b2 ea 96 d0 37 a6 5f 9c 87 a2 46 39 b1 ff 00 62 9f f1 b6 66 92 23 cc ba d0 27 94 fa 45 fb bf 85 19 5c b0 70 1c 37 2f 3e ec 8d 0f 80 75 df fe 17 e0 5c 52 6b a8 ac c5 6e 24 54 ff 00 58 d3 fe 05 70 71 c6 b8 8e c3 cf d2 c8 e2 98 97 00 1c 52 ee 8f af fd ca 2c 1c Data Ascii: aQ9i.,Xn?#/?:3s!_fDOKREErDwvXIwK_Fx,hl3tp9w%g..^yg15]1';:/_7_F9bf#'E\p7/>u\Rkn$TXpqR,
2024-05-29 10:13:29 UTC	16384	IN	Data Raw: fe ee 2f f8 c7 73 f1 e0 9b 34 41 fe 93 73 f1 33 1a 16 71 49 1d be cb 2c 67 e1 93 fd 7e 12 3f 1f b1 1f ed e4 5e da e6 49 1c df 5f 7e ff 00 99 00 ef 46 6a 7f ba e2 6f 8b 82 a7 ed fc 2b c3 fd 7c 37 83 50 25 c4 af 53 30 14 58 86 ca 8b fb 29 13 b7 fb cf 1f fc 5f cb d6 7f f7 52 27 f7 98 63 2b e6 c6 78 f8 45 44 7b cb 2e 8e 69 24 24 49 f0 84 fd 9a ec bf e4 c8 df 6b 92 ff 00 27 db ff 00 53 04 c7 70 08 aa 6e a3 ab 9d 97 fd 8e 47 60 bd 11 00 6e 9d 05 06 cb 4a 22 0f f8 ae 1f b4 ff 00 f1 92 e1 e1 4f f8 c9 86 29 a9 c7 21 0d 1a b3 90 36 2d db fd 56 6f 81 3f e7 9c 7c 7f e2 cc b8 17 06 70 3d db 27 0a 6a 2b fd 98 ea e0 28 26 92 6d e9 51 e2 2a df f0 df 63 fe 1b 05 8a f7 c9 34 11 45 ba e5 d7 1b 9b 14 2e cb ae 37 2e b8 a5 75 72 eb 8c e5 9a b8 aa fa e6 ae 32 b9 ab 81 2b eb 9b Data Ascii: /s4As3qI,g~?^I_~Fjo+\|7P%S0X)_R'c+xED{.i$$Ik'SpnG`nJ"O)!6-Vo?\|p='j+(&mQ*c4E.7.ur2+
2024-05-29 10:13:29 UTC	16384	IN	Data Raw: 6a ec 7d 81 ff 00 25 7e 05 f8 9b fd 86 08 e6 23 3c 2e be 2d be c9 20 ee 77 e4 1a 36 e0 af fe 57 c4 c9 80 10 2a 6e eb cb c0 56 83 fe 17 e2 ff 00 88 63 6a 7e 43 c3 2a 3b ee e4 01 5b 74 08 e4 91 a3 25 a3 aa a3 7e c8 6e 42 9f f1 2c 69 64 7f 83 75 7a d6 a7 a1 fa 31 04 5f 1d 8f 8f 86 28 d7 44 0e 2a 7b 00 4d 07 6c 81 1d dc db 3d ea a1 f8 28 46 e2 69 53 d3 7d ff 00 63 7f 87 11 67 24 d3 f0 c4 be 26 eb 8a 80 28 7a d4 63 5d eb 6b 69 d8 f5 c5 43 19 54 2d 14 70 24 d6 9f 17 fb 26 f8 b9 2a e3 5e 9c 43 af c9 8d 36 1f cb 86 7a 76 9f 6f 74 a1 96 71 15 c0 3f 65 c5 14 7f be e4 0d fe ec 8b fd f9 fb 71 fd af 8d 32 71 16 c2 72 11 16 50 ab 34 96 d0 95 f4 d4 a3 d5 79 b2 1a 82 7e 2f 81 db f6 d3 19 08 92 45 32 22 ef 08 05 a9 4f b3 fc ec bf f1 b2 e1 e6 a1 6f 1c 70 cd 24 2e 16 47 21 Data Ascii: j}%~#<.- w6WnVcj~C;[t%~nB,iduz1_(D{Ml=(FiS}cg$&(zc]kiCT-p$&^C6zvotq?eq2qrP4y~/E2"Oop$.G!
2024-05-29 10:13:29 UTC	16384	IN	Data Raw: 98 ab 59 b2 ce 56 28 75 73 65 66 c5 5b ca cd 9b 0a 1d 95 97 95 8a ba b9 79 59 b1 43 75 cb c6 e5 8c 52 dd 31 45 51 8d 03 1e 05 30 24 05 c0 63 c2 d7 28 2e 29 4a 60 6c 01 c0 01 91 ff 00 3c 59 1b bd 21 d9 45 5a 06 59 7e 81 f0 bf fc 2b 64 82 b8 85 e4 1f 5b b7 96 df fd f8 8c bf 78 c0 45 8a 6c c7 2e 09 89 77 17 86 34 9c cf c0 29 4e f8 89 ad 6b 8a 33 70 62 bd c1 a7 ca 98 a9 52 16 84 d4 d2 b4 1e 19 8a ef 39 20 dd 0f 72 30 5a 49 0b 46 aa 3f bd 1b 12 29 42 3e 9c 48 9e 26 94 d8 f8 e3 40 de aa 01 c1 4b 6f 42 fc bb d4 40 f5 b4 d7 3d fd 58 ab dc 74 99 53 fe 4e 64 ea 99 c5 f4 0d 49 74 dd 4a de e6 45 d9 24 15 a6 db 37 ee db fe 25 cb 3b 61 1b e6 4e 33 71 ae e7 53 ab c7 c3 93 88 72 96 ff 00 15 80 63 80 cb cd 96 38 ae cb 19 80 ae 58 18 15 ba 66 a6 06 bf ba 7b 28 4c e9 19 94 Data Ascii: YV(usef[yYCuR1EQ0$c(.)J`l<Y!EZY~+d[xEl.w4)Nk3pbR9 r0ZIF?)B>H&@KoB@=XtSNdItJE$7%;aN3qSrc8Xf{(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49766	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:30 UTC	403	OUT	GET /x/img/BANGOR.png HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:13:30 UTC	207	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:13:30 GMT Server: Apache Last-Modified: Sat, 13 Jan 2024 12:05:46 GMT Accept-Ranges: bytes Content-Length: 45863 Connection: close Content-Type: image/png
2024-05-29 10:13:30 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 00 83 08 02 00 00 00 e4 84 30 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 b2 c9 49 44 41 54 78 5e ed bd 05 80 25 c5 d5 36 7c 57 66 c7 6d 15 0d f1 84 c8 8b ac 8c df 3b 77 dc dd dd 65 05 d7 40 82 43 84 10 23 40 9c 84 10 81 18 31 42 12 42 d0 20 81 10 5c 16 59 61 7d 67 77 fc 7a ff cf 73 4e df 9e 3b b3 bb 64 87 b0 bc fb bd ff d4 9c e9 db 5d dd 5d 75 ea d4 a9 a7 ce a9 ae ae b6 19 47 34 04 42 48 36 5e c3 70 1b 86 cb 30 26 85 b0 03 42 24 c8 27 5b eb 14 68 c2 08 58 fb 7a 38 66 f8 40 21 f1 81 49 bf d7 e5 f3 7a 02 7e af 11 98 9e db 54 f0 fb fd 3e 9f 2f 80 20 b9 b8 02 3e 97 c7 ed 0b f8 a7 ae 0e 25 09 f8 c5 95 e6 51 48 a4 c6 5b Data Ascii: PNGIHDR0gAMAapHYsttfxIDATx^%6\|Wfm;we@C#@1BB \Ya}gwzsN;d]]uG4BH6^p0&B$'[hXz8f@!Iz~T>/ >%QH[
2024-05-29 10:13:31 UTC	8000	IN	Data Raw: 91 1d f3 c2 7f 28 01 14 40 41 17 43 31 08 fb 88 19 1f 0e 4e 4a 72 0f ff 6e e3 53 c7 94 a7 1f d3 96 17 dd 9c 29 b3 78 84 3a 33 d1 90 60 9e 84 b5 f1 c1 56 44 67 76 5c 4d fa 8d 7f bf 0b e9 70 50 83 ce 17 d5 6b 4a 93 b0 a7 18 e4 31 46 77 01 15 39 cf 18 bc bd 6a 8c ad 19 6c f8 40 4b 41 4c 53 26 87 ba d0 6e fb 73 12 36 94 c1 4f 59 58 93 12 df 95 37 bf 99 eb 3a 52 8f a1 cd 41 85 06 00 a1 fd 87 75 38 63 3a 73 3e d0 5b f6 2f 63 78 97 f0 3f 0c 77 53 73 0d ca 57 73 46 b6 5a 2e fe 04 31 48 36 8c 50 d2 43 33 04 cf c1 97 d4 6b 34 06 3b a8 97 e6 9b ae 04 6f 00 cd c8 9e dc b0 a6 8c a5 83 25 b6 96 74 8e be 75 f1 a5 5f b3 e1 59 96 29 7a 8e e6 f4 65 03 25 c7 f7 96 2c 6f cb 8b ac 4e 8d 6b ca 5c d2 57 64 2b 39 3d aa 70 d5 49 55 ce 93 8a d3 b7 1a 3e ed 27 c0 ea 14 78 07 99 47 Data Ascii: (@AC1NJrnS)x:3`VDgv\MpPkJ1Fw9jl@KALS&ns6OYX7:RAu8c:s>[/cx?wSsWsFZ.1H6PC3k4;o%tu_Y)ze%,oNk\Wd+9=pIU>'xG
2024-05-29 10:13:31 UTC	8000	IN	Data Raw: 7b 6b 7f f7 e2 13 68 c9 bb 03 7c 29 51 67 f0 a2 33 06 e7 1c 27 52 ee 95 82 bf b8 c0 ed e5 f3 38 10 87 32 82 ee bc 1c 73 0b b5 51 00 ba fc e7 df 59 56 94 7c 52 47 51 44 4d 2a ac ce 98 de 7c ce 1a 6b cd e0 64 ba 3e 0e a1 92 ff ff 48 0a a0 82 a1 ac b5 da d5 f3 9b 33 96 f7 14 45 16 ad 8a 72 7c ba ef 2b 57 bc e1 19 86 9d c8 99 e2 7e ea b0 35 5c cd 79 5b 16 63 12 ac a3 43 11 c2 c1 30 48 9a 2a 5a 0b 5a 6f 64 7d 06 31 68 20 87 6f a5 8b fe 29 73 d8 41 8d 86 62 10 fa 2b 34 12 38 53 cf 8f ef 82 64 91 02 6d 87 e9 be 58 f0 97 81 93 f4 e4 00 e2 23 ac c2 0e 7a f4 6f c7 17 a7 45 f3 f9 ce c1 08 96 51 47 06 3f 77 d1 96 3e af c3 ce af 23 f4 65 85 f5 c9 5a 39 a8 ec f7 00 83 50 14 9f 9f ab 18 f1 99 94 ff e3 ed 25 8b 2a 92 22 bb 72 60 1b f2 99 37 aa aa 33 93 da 26 1a 69 ca 0a Data Ascii: {kh\|)Qg3'R82sQYV\|RGQDM\|kd>H3Er\|+W~5\y[cC0HZZod}1h o)sAb+48SdmX#zoEQG?w>#eZ9P%*"r`73&i
2024-05-29 10:13:31 UTC	8000	IN	Data Raw: 07 56 99 29 aa 80 f9 a2 af 4a 68 72 7e b8 31 ff 6f 6f 3c 07 c9 8f 7b dd 5a c4 d0 77 74 55 11 cd 8c 45 9e 10 ef 88 df fc b8 eb 5f 9e 79 fc 84 72 79 c0 04 47 52 32 32 75 1d 5a 1e cc 1a c5 61 2d a3 bd a1 03 68 b7 c7 34 d8 ef 79 e5 5f b8 57 f5 1b 74 98 18 c4 95 cb d7 16 71 52 12 df 2c a5 ed 00 87 28 bc e0 f4 f3 7f 7c e3 c3 6f be c8 9a 42 e0 53 7f 88 09 24 2a 74 88 a0 08 eb 93 d5 97 b1 33 31 31 f1 9b 07 ef 3d a1 36 4b 5e 82 3d 8d 23 f4 ed 69 50 5a 3e 51 6a 49 d5 dc a7 94 c4 aa a9 1e 67 5c 7d fa df 36 3e 0d 9d 97 2f dc 7a 50 df e8 ac 76 19 ee e6 af 5e 4a 8b a3 8f af 4c a2 f7 0d 83 fc d1 bb 40 f8 d0 40 6b 5e 05 d2 01 1e c1 45 e8 ca 46 45 2f ab cb 6c fd f2 67 61 19 ec 1a 87 3c 0c cf 30 f4 45 78 3d 58 e0 7c 11 09 e3 44 0f 86 d7 f7 ed fc c2 3d 3f 07 0e 00 cb e6 d5 Data Ascii: V)Jhr~1oo<{ZwtUE_yryGR22uZa-h4y_WtqR,(\|oBS$*t311=6K^=#iPZ>QjIg\}6>/zPv^JL@@k^EFE/lga<0Ex=X\|D=?
2024-05-29 10:13:31 UTC	8000	IN	Data Raw: 5b 97 04 21 10 b0 25 23 bb 66 ea 6f 43 12 f0 8b 06 bf df f0 ff 6a d3 d3 31 55 a9 c7 f6 97 f2 59 6a 53 2a 9d 26 14 a1 8b f3 bf 95 01 93 25 d6 9a 70 d5 96 11 df 68 ef bc e9 ca 1d 1c 96 f2 7b 3d 90 22 f4 df f7 f0 a6 e7 4f 6e 29 8c ad 4f b7 35 25 c3 5f b3 75 a4 d0 1b e8 e6 9b 59 11 bd 79 e0 5f 2a 3d 93 8b 0a e9 fa ee 6d b9 4b 4a 52 fe be f3 d5 2d 81 71 88 65 5c 5e 23 77 05 64 0d 0d 8b 55 25 4b f3 95 42 4e a1 ec 6f 19 13 af 1a 93 6b 36 34 2d 6f c9 a1 1d d7 26 18 0a 6b 23 58 11 28 82 96 c2 d4 b7 f6 74 f8 9b 11 0d 19 a7 6c 68 d8 28 03 d2 90 9c b9 94 35 08 c9 ca 2f 52 d6 66 88 08 db 0c 96 f8 0f 3e 70 95 7c 2b 15 87 e0 1b 65 80 5f d7 f5 a5 cf 2e af cc 80 a7 a7 e2 53 c2 be 99 b7 ea 07 08 8d b0 2d 35 ea bc 0a 5b 4b 32 98 8b ab 49 3f be c2 fe dd 47 ef d1 65 25 51 a9 Data Ascii: [!%#foCj1UYjS&%ph{="On)O5%_uYy_=mKJR-qe\^#wdU%KBNok64-o&k#X(tlh(5/Rf>p\|+e_.S-5[K2I?Ge%Q
2024-05-29 10:13:31 UTC	5878	IN	Data Raw: 5c 30 b4 22 7e 68 4e 84 e0 de 3f 7a 10 00 02 49 00 06 e9 91 ee a0 76 60 13 e9 49 c4 40 ef 86 0c f7 0e 59 74 f8 eb 0f ff 3e aa 60 e5 e2 e0 5c 13 08 50 39 01 81 b7 50 b2 0a 62 11 22 95 73 10 6e d4 7b c3 5b f9 dc 06 9d 5c 6c 49 d2 29 3d 55 5f fd f3 2f d0 ef ee 32 5c 50 8f a1 91 61 be 55 0a b6 75 61 ac 77 e4 07 cc 7e 4c 3a 34 a8 54 44 69 f6 bb 27 00 ea 4f ec d9 f4 f1 e6 a2 d8 ea 34 3e 29 a3 7e c8 fc 2e 4e 8b 80 f3 92 8e fa 06 70 00 7d d0 18 ac 62 a3 e6 4c fd b0 f4 4c f4 1b f1 90 88 8a 03 72 99 79 a5 e8 13 08 d7 30 fe f0 30 08 52 db 68 b8 4e 1e a8 46 f7 18 db 91 43 53 1f 4c 02 01 65 21 5e e6 2b df 2c 04 93 e8 b5 98 2c 72 e9 4a 83 11 be f0 9c 52 18 11 e8 6f 17 54 27 bf af ab f8 f8 2a c7 37 ee fd f5 73 63 fc aa 37 5a 1a 9c 73 4a 5e a5 71 24 83 e6 80 ce d0 e7 a3 Data Ascii: \0"~hN?zIv`I@Yt>`\P9Pb"sn{[\lI)=U_/2\PaUuaw~L:4TDi'O4>)~.Np}bLLry00RhNFCSLe!^+,,rJRoT'*7sc7ZsJ^q$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49768	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:30 UTC	657	OUT	GET /favicon.ico HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.fnbo-in.selfip.com/x/personal.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:13:31 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 29 May 2024 10:13:30 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-29 10:13:31 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49779	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:37 UTC	690	OUT	GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.fnbo-in.selfip.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:13:37 UTC	514	IN	HTTP/1.1 200 OK Content-Type: font/x-woff Content-Length: 24388 Connection: close Last-Modified: Tue, 17 Nov 2020 15:59:52 GMT Accept-Ranges: bytes ETag: "08c20affabcd61:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:36 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4d15GD2k7m_tqGhfbdMs7gLr_pf5nneUNhSy7GV7y8XrqsImyi5eh0dPdcT2FZdxZ0PM4; path=/; SameSite=None; Secure
2024-05-29 10:13:37 UTC	15870	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 5f 44 00 12 00 00 00 00 b3 dc 00 07 00 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 5f 28 00 00 00 1c 00 00 00 1c 80 42 54 5c 47 44 45 46 00 00 48 40 00 00 00 32 00 00 00 36 03 b6 04 85 47 50 4f 53 00 00 4a 34 00 00 14 f3 00 00 32 4e f0 59 0d 67 47 53 55 42 00 00 48 74 00 00 01 c0 00 00 03 be cb 34 ff 55 4f 53 2f 32 00 00 02 0c 00 00 00 4e 00 00 00 60 53 a9 aa 1a 63 6d 61 70 00 00 04 c4 00 00 01 81 00 00 01 da 1f de 17 36 63 76 74 20 00 00 0d 74 00 00 00 5d 00 00 00 e4 2f 52 15 48 66 70 67 6d 00 00 06 48 00 00 06 70 00 00 0d 6d 4d 24 8e 7c 67 61 73 70 00 00 48 38 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0f ec 00 00 33 a6 00 00 5c 54 2c e1 59 b0 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFF_DFFTM_(BT\GDEFH@26GPOSJ42NYgGSUBHt4UOS/2N`Scmap6cvt t]/RHfpgmHpmM$\|gaspH8glyf3\T,Yhead

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49777	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:37 UTC	827	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE
2024-05-29 10:13:37 UTC	1614	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzma=0533b696-4032-4fdc-9eaf-ada0ea5ddd91; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:37 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977617; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:37 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7247; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:37 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=272471039974; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:37 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977617; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:37 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60008f53b9fe-ba01-451e-889a-0d19ae62118217169776171570-98cf5aba0657c48c10; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:37 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000c452e1d2-0e66-41b5-976e-9e07761e6b321-17169776171570-32addd77734aa9b710; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:37 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:84\|g:ea6eb629-be7d-4782-ae0e-af024c060c35\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:14:07 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:14:07 GMT; path=/ Set-Cookie: ADRUM_BT1=R:84\|i:371912\|e:6; expires=Wed, 29-May-2024 10:14:07 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:36 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49778	54.195.39.4	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:37 UTC	580	OUT	GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://mail.fnbo-in.selfip.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-29 10:13:37 UTC	372	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Wed, 29 May 2024 10:13:37 GMT Content-Type: audio/mpeg Content-Length: 504 Connection: close Content-Disposition: inline; filename=time.mp3 Content-Range: bytes 0-503/504 Accept-Ranges: bytes Pragma: public Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-29 10:13:37 UTC	504	IN	Data Raw: ff e3 48 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 69 6e 67 00 00 00 0f 08 2e 7b af 00 00 02 40 00 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 0a 4c 41 4d 45 33 2e 39 38 72 04 28 00 00 00 00 00 00 00 00 14 08 24 06 c0 2d 00 01 9a 00 00 02 40 c6 6c f8 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HdXing.{@@@@@@@@@@@@@@@@@@@@@@@@@LAME3.98r($-@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49782	66.22.0.11	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:38 UTC	975	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dITgusM6VBvU_rfE-T07vdoDToQqubWCNoRV_BPYc6nzBvHFZgrNU2yzOIQ_CYLkDygE; ADRUM_BTa=R:0\|g:82d5defc-bef1-40cb-94bc-12093914f258\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; SameSite=None; ADRUM_BT1=R:0\|i:371912\|e:6; __uzma=1b68201f-c229-4d7d-b791-b0babb7942b6; __uzmb=1716977608; __uzme=7583; __uzmc=449991080474; __uzmd=1716977608; __uzmf=7f6000fcc829c9-4aa1-48c1-994e-0e9dce4bd7e717169776081940-ae11e0e658b78d2510; uzmx=7f9000f4dc32df-6999-4c70-8a17-bc9a8e4a707a1-17169776081940-2a2246a96a7453a110
2024-05-29 10:13:38 UTC	1243	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzmc=716591315092; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977618; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000fcc829c9-4aa1-48c1-994e-0e9dce4bd7e7171697760819410255-a06cc9713e71300513; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000f4dc32df-6999-4c70-8a17-bc9a8e4a707a1-171697760819410255-4a5c590c32529e8513; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:13:38 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:0\|g:5726fb1e-ef60-4c13-bffc-df09b7b76137\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:14:08 GMT; path=/ Set-Cookie: ADRUM_BT1=R:0\|i:371912\|e:6; expires=Wed, 29-May-2024 10:14:08 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:14:08 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:13:37 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49775	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:40 UTC	700	OUT	GET /OnlineBanking/ HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:13:40 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 29 May 2024 10:13:40 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-29 10:13:40 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49776	152.42.220.64	443	4908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:13:50 UTC	700	OUT	GET /OnlineBanking/ HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:13:50 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 29 May 2024 10:13:50 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-29 10:13:50 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4324, Parent PID: 2836

General

Target ID:	0
Start time:	06:13:15
Start date:	29/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4908, Parent PID: 4324

General

Target ID:	2
Start time:	06:13:17
Start date:	29/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1704 --field-trial-handle=2000,i,14024384308356499503,16145808132580207214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6508, Parent PID: 2836

General

Target ID:	3
Start time:	06:13:20
Start date:	29/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.fnbo-in.selfip.com/x/personal.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mail.fnbo-in.selfip.com/x/personal.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
https://mail.fnbo-in.selfip.com/x/personal.html