Edit tour

Windows Analysis Report
https://mail.fnbo-in.selfip.com/x/otp2.html

Overview

General Information

Sample URL:	https://mail.fnbo-in.selfip.com/x/otp2.html
Analysis ID:	1448782
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Detected non-DNS traffic on DNS port

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6052 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2236,i,3752641880106210170,12902061291128347922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 1732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.fnbo-in.selfip.com/x/otp2.html" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://mail.fnbo-in.selfip.com/x/otp2.html	Avira URL Cloud: detection malicious, Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/otp2.html	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://mail.fnbo-in.selfip.com/x/img/BANGOR.png	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/opensans.css	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/angular.css	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/material-icons.css	Avira URL Cloud: Label: phishing

Multi AV Scanner detection for submitted file

Source: https://mail.fnbo-in.selfip.com/x/otp2.html

Virustotal: Detection: 16%

Perma Link

Phishing

AI detected phishing page

Source: https://mail.fnbo-in.selfip.com/x/otp2.html	LLM: Score: 9 brands: FNBO Reasons: The URL 'mail.fnbo-in.selfip.com/x/otp2.html' is highly suspicious. The legitimate domain for FNBO is 'fnbo.com', and the use of 'selfip.com' is a common tactic in phishing attacks to create a subdomain that appears legitimate. The presence of a login form asking for a verification code is another red flag. Additionally, the use of social engineering techniques to prompt immediate action (confirming identity) is evident. Therefore, this site is highly likely to be a phishing site. DOM: 0.0.pages.csv
Source: https://mail.fnbo-in.selfip.com/x/otp2.html#mainContent	LLM: Score: 9 brands: FNBO Reasons: The URL 'https://mail.fnbo-in.selfip.com/x/otp2.html#mainContent' is highly suspicious. The domain 'selfip.com' is not associated with FNBO, which typically uses 'fnbo.com'. The page contains a login form asking for a verification code, which is a common tactic used in phishing attacks. The use of a subdomain 'fnbo-in' and the presence of 'selfip.com' in the URL are strong indicators of a phishing attempt. DOM: 1.1.pages.csv

Source: https://mail.fnbo-in.selfip.com/x/otp2.html	HTTP Parser: No favicon
Source: https://mail.fnbo-in.selfip.com/OnlineBanking/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49758 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.10:50184 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.10:58647 -> 162.159.36.2:53

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /x/otp2.html HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/opensans.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/otp2.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aperture/aperture.js HTTP/1.1Host: cdn.perfdrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj-QO5R4_ig_UM_6BTEvsUm0pVZPSI45Qh8HhMXpcfZ0-H_jz5gjdjFcqhl8Q2uekFcLFceEEhLFJKexQwJQYE-YZPPmEfmF2tz8ibp1V0Knp5fHHCZZeU1&t=637356698800000000 HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js HTTP/1.1Host: cdn.appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/material-icons.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/otp2.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/angular.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/otp2.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/RadDockableObject.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/otp2.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/img/BANGOR.png HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.fnbo-in.selfip.com/x/otp2.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://mail.fnbo-in.selfip.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.fnbo-in.selfip.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.fnbo-in.selfip.com/x/otp2.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
Source: global traffic	HTTP traffic detected: GET /x/img/BANGOR.png HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
Source: global traffic	HTTP traffic detected: GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://mail.fnbo-in.selfip.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.fnbo-in.selfip.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ; __uzmb=1716977680; __uzmd=1716977680; __uzma=6c06ca7c-483d-4fad-b1fb-d11f6291aa63; __uzme=7055; __uzmc=496131060034; __uzmf=7f60003f8684cd-2fd7-47ca-ab80-c60d8d4cac0617169776801390-361b3dce5970c7f410; uzmx=7f900025f0b33b-a3b8-4a8c-8c96-79b099e3b03c1-17169776801390-f25539bd83e54bf210; ADRUM_BTa=R:0\|g:72da773e-a256-496e-a4eb-4c42fe96868d\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; SameSite=None; ADRUM_BT1=R:0\|i:371912\|e:9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/ HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/ HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e

Source: global traffic	DNS traffic detected: DNS query: mail.fnbo-in.selfip.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.appdynamics.com
Source: global traffic	DNS traffic detected: DNS query: cdn.perfdrive.com
Source: global traffic	DNS traffic detected: DNS query: olb.sccu.com
Source: global traffic	DNS traffic detected: DNS query: mpsnare.iesnare.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 29 May 2024 10:14:41 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 29 May 2024 10:14:50 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 29 May 2024 10:14:59 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_85.3.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_85.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_86.3.dr	String found in binary or memory: https://cas.avalon.perfdrive.com/jsdata
Source: chromecache_92.3.dr	String found in binary or memory: https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js
Source: chromecache_92.3.dr	String found in binary or memory: https://cdn.perfdrive.com/aperture/aperture.js
Source: chromecache_81.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/59ZRklaO5bWGqF5A9baEERJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_81.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/K88pR3goAWT7BTt32Z01mxJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_81.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/LWCjsQkB6EMdfHrEVqA1KRJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_81.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5URJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_81.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2)
Source: chromecache_81.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/u-WUoqrET9fUeobQW7jkRRJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_81.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/xozscpT2726on7jbcb_pAhJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_92.3.dr	String found in binary or memory: https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js
Source: chromecache_92.3.dr	String found in binary or memory: https://mpsnare.iesnare.com/time.mp3?nocache=0.22714454500364867
Source: chromecache_92.3.dr	String found in binary or memory: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7
Source: chromecache_92.3.dr	String found in binary or memory: https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2N
Source: chromecache_78.3.dr, chromecache_94.3.dr, chromecache_87.3.dr, chromecache_75.3.dr	String found in binary or memory: https://sketch.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49758 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@19/47@16/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2236,i,3752641880106210170,12902061291128347922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.fnbo-in.selfip.com/x/otp2.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2236,i,3752641880106210170,12902061291128347922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://mail.fnbo-in.selfip.com/x/otp2.html	100%	Avira URL Cloud	phishing
https://mail.fnbo-in.selfip.com/x/otp2.html	17%	Virustotal		Browse
https://mail.fnbo-in.selfip.com/x/otp2.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
https://sketch.com	0%	URL Reputation	safe
http://code.google.com/p/episodes/	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://cas.avalon.perfdrive.com/jsdata	0%	Avira URL Cloud	safe
https://mail.fnbo-in.selfip.com/x/img/BANGOR.png	100%	Avira URL Cloud	phishing
https://mail.fnbo-in.selfip.com/favicon.ico	100%	Avira URL Cloud	phishing
https://cdn.perfdrive.com/aperture/aperture.js	0%	Avira URL Cloud	safe
https://mail.fnbo-in.selfip.com/x/css/opensans.css	100%	Avira URL Cloud	phishing
https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7	0%	Avira URL Cloud	safe
https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js	0%	Avira URL Cloud	safe
https://mail.fnbo-in.selfip.com/x/css/angular.css	100%	Avira URL Cloud	phishing
https://cdn.perfdrive.com/aperture/aperture.js	0%	Virustotal		Browse
https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css	100%	Avira URL Cloud	phishing
https://cas.avalon.perfdrive.com/jsdata	0%	Virustotal		Browse
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7	0%	Virustotal		Browse
https://mail.fnbo-in.selfip.com/x/css/material-icons.css	100%	Avira URL Cloud	phishing
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg	0%	Avira URL Cloud	safe
https://mpsnare.iesnare.com/time.mp3?nocache=0.22714454500364867	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2N	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg	0%	Avira URL Cloud	safe
https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg	0%	Avira URL Cloud	safe
https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cdn.perfdrive.com	130.211.29.114	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
fnbo-in.selfip.com	152.42.220.64	true	true	unknown
cdn.appdynamics.com	18.165.201.79	true	false	unknown
wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com	54.228.71.178	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net	66.22.0.11	true	false	unknown
mail.fnbo-in.selfip.com	unknown	unknown	true	unknown
mpsnare.iesnare.com	unknown	unknown	false	unknown
olb.sccu.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://mail.fnbo-in.selfip.com/x/img/BANGOR.png	false	Avira URL Cloud: phishing	unknown
https://mail.fnbo-in.selfip.com/OnlineBanking/	false		unknown
https://mail.fnbo-in.selfip.com/x/css/opensans.css	false	Avira URL Cloud: phishing	unknown
https://cdn.perfdrive.com/aperture/aperture.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://mail.fnbo-in.selfip.com/x/otp2.html	true		unknown
https://mail.fnbo-in.selfip.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://mail.fnbo-in.selfip.com/x/otp2.html#mainContent	true		unknown
https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://mail.fnbo-in.selfip.com/x/css/angular.css	false	Avira URL Cloud: phishing	unknown
https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css	false	Avira URL Cloud: phishing	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg	false	Avira URL Cloud: safe	unknown
https://mail.fnbo-in.selfip.com/x/css/material-icons.css	false	Avira URL Cloud: phishing	unknown
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg	false	Avira URL Cloud: safe	unknown
https://mpsnare.iesnare.com/time.mp3?nocache=0.22714454500364867	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg	false	Avira URL Cloud: safe	unknown
https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_85.3.dr	false	URL Reputation: safe	unknown
https://sketch.com	chromecache_78.3.dr, chromecache_94.3.dr, chromecache_87.3.dr, chromecache_75.3.dr	false	URL Reputation: safe	unknown
https://cas.avalon.perfdrive.com/jsdata	chromecache_86.3.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://code.google.com/p/episodes/	chromecache_85.3.dr	false	URL Reputation: safe	unknown
https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2N	chromecache_92.3.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
130.211.29.114	cdn.perfdrive.com	United States	15169	GOOGLEUS	false
54.228.71.178	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
152.42.220.64	fnbo-in.selfip.com	United States	81	NCRENUS	true
18.165.201.79	cdn.appdynamics.com	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
66.22.0.11	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net	United States	48851	RADWAREIL	false

Private

IP
192.168.2.10

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448782
Start date and time:	2024-05-29 12:13:40 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mail.fnbo-in.selfip.com/x/otp2.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@19/47@16/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://mail.fnbo-in.selfip.com/x/otp2.html#mainContent Browse: https://mail.fnbo-in.selfip.com/OnlineBanking/ Browse: https://mail.fnbo-in.selfip.com/OnlineBanking/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, Sgrmuserer.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 142.250.186.46, 142.251.173.84, 34.104.35.123, 142.250.185.138, 216.58.206.42, 142.250.186.106, 142.250.186.170, 172.217.16.202, 142.250.185.74, 216.58.206.74, 142.250.186.74, 172.217.18.10, 142.250.185.170, 142.250.184.202, 216.58.212.170, 172.217.16.138, 172.217.18.106, 142.250.185.106, 142.250.186.138, 20.114.59.183, 95.101.54.129, 95.101.54.121, 20.166.126.56, 13.85.23.206, 142.250.181.227
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, d.4.1.9.1.6.7.1.0.0.0.0.0.0.0.0.1.0.0.9.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpa, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://mail.fnbo-in.selfip.com/x/otp2.html Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": true, "reasons": [ "The text contains the phrase 'Confirm your Identity'", "The text contains the phrase 'Another 6-digit code nas sent to your phone'", "The text contains the phrase 'Verification Enter Code'", "The text contains the phrase 'Submit'" ] }
G) fnbo Confirm your Identity To finalize your identity verification, Another 6-digit code nas sent to your phone. Verification Enter Code Submit O fnbo AO 2024 FNBO Equal Housing Lender Federally Insured
URL: https://mail.fnbo-in.selfip.com/x/otp2.html#mainContent Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": true, "reasons": [ "The text contains the phrase 'Confirm your Identity'", "The text contains the phrase 'Another 6-digit code nas sent to your phone'", "The text contains the phrase 'Verification Enter Code'", "The text contains the phrase 'Submit'" ] }
G) fnbo Confirm your Identity To finalize your identity verification, Another 6-digit code nas sent to your phone. Verification Enter Code Submit O fnbo AO 2024 FNBO Equal Housing Lender Federally Insured
URL: https://mail.fnbo-in.selfip.com/x/otp2.html Model: gpt-4o	```json { "phishing_score": 9, "brands": "FNBO", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "legitmate_domain": "fnbo.com", "reasons": "The URL 'mail.fnbo-in.selfip.com/x/otp2.html' is highly suspicious. The legitimate domain for FNBO is 'fnbo.com', and the use of 'selfip.com' is a common tactic in phishing attacks to create a subdomain that appears legitimate. The presence of a login form asking for a verification code is another red flag. Additionally, the use of social engineering techniques to prompt immediate action (confirming identity) is evident. Therefore, this site is highly likely to be a phishing site." }

URL: https://mail.fnbo-in.selfip.com/x/otp2.html#mainContent Model: gpt-4o	```json { "phishing_score": 9, "brands": "FNBO", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "legitmate_domain": "fnbo.com", "reasons": "The URL 'https://mail.fnbo-in.selfip.com/x/otp2.html#mainContent' is highly suspicious. The domain 'selfip.com' is not associated with FNBO, which typically uses 'fnbo.com'. The page contains a login form asking for a verification code, which is a common tactic used in phishing attacks. The use of a subdomain 'fnbo-in' and the presence of 'selfip.com' in the URL are strong indicators of a phishing attempt." }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:14:32 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9946904194681117
Encrypted:	false
SSDEEP:	48:8o1vbd3T4HHDidAKZdA1uehwiZUklqehZy+3:8oJ8+Oy
MD5:	F0AE1D30D88320944682A0C4F04D861B
SHA1:	62B5E40B7ADAA677CB3E411C0D7269CA63195E2C
SHA-256:	406B2B49E805409D3BA3C15A9879CFFF35FA564D32862845BB159DC90FF2C2CB
SHA-512:	B64863DD37BB3E28AAAD3F0906349D3D94FC9124444663DDBD88E92C84A5141888837F87CACF9747CB528047E4D45A5BB4D577D83E1861BE5DC2FDCF6369FD43
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....3...........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.X.Q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.X.Q....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.X.Q...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.Q....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:14:32 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.012912948417803
Encrypted:	false
SSDEEP:	48:8U1vbd3T4HHDidAKZdA1Heh/iZUkAQkqeh+y+2:80J8o9Q3y
MD5:	D077AFB7ACCCBA3151997AC6AC86B996
SHA1:	484342460ABF3CD73A1EAEAE804AD3F5DAA9103A
SHA-256:	C90785230CD69BDC0F19DBB59D8B9EBAFE4EF3879204007F18A378B290F482F9
SHA-512:	AF24613614925AB4CDA7978AC44A741E3FA51A3D99ED8DDD3CFA22D77F7FC889FDEBC52118F6A4DB7F47FAB7B0E3FA6531B2053989AD6133646931704A338CCD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....&}..........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.X.Q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.X.Q....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.X.Q...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.Q....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.016047681209437
Encrypted:	false
SSDEEP:	48:8Fvbd3T4bHDidAKZdA149eh7sFiZUkmgqeh7ssy+BX:8FJ8YnSy
MD5:	623E4B849D1B18B9641698764CFD9E4F
SHA1:	6EFD9CDBCEFBB76D2935E8DA13426EC653A5967B
SHA-256:	4432C75A5AB63B4E988949D22CB5064DF05BE3064AE6C090A1F4400E446B9678
SHA-512:	A42F57DFBF0AF3B4A812DF2419AF674620EA423D1FAC643A4F9F84EC123516AC211151E7C0995E55360DC50F90F35B18AA38AF1006F89AC2ED58115F79CCCA2A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.X.Q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.X.Q....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.X.Q...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:14:32 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.010212319638567
Encrypted:	false
SSDEEP:	48:86g1vbd3T4HHDidAKZdA14ehDiZUkwqehKy+R:86QJ8DEy
MD5:	F12A11AB368EC00BA1937D553D26C5B5
SHA1:	1841D5387772FD90F72E68F4AC14ABE26CC1CBEA
SHA-256:	0474CCA364EDF095907440EEB0558C36BA8BB58C1FCA1B27CF9B95B32B96A2A7
SHA-512:	429158CB72B4B5E416F5C8C337D7C24FE605528025085EEABE8EE91252562A70FB771DCFC59C534A4FA0ED891D928D9499E0FA5BFFDA74742FB0FAD5872752C0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,................y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.X.Q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.X.Q....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.X.Q...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.Q....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:14:32 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.999054138262577
Encrypted:	false
SSDEEP:	48:8G51vbd3T4HHDidAKZdA1mehBiZUk1W1qehgy+C:8GrJ8D9Ay
MD5:	E5705A89ADFC05B62DF9BFE233A66FDF
SHA1:	BF69E4F3660A3CDF6D6F9471B53CEC75DF9E5EE6
SHA-256:	1112741A71DF00D6293AE38AA13B52F2C1B732CEB40D803FC9A65DC9AA6BFF98
SHA-512:	61E95DDF60E81D70D2AC238AC353B4F7B5A8FA53827FCA29B263A1F761C2D9D9BBEC74322FB1B14BDA0A12A3062CEBD82B937013821E56535DF69AA8EECA1617
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,................y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.X.Q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.X.Q....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.X.Q...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.Q....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:14:32 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.010758155801373
Encrypted:	false
SSDEEP:	48:8N1vbd3T4HHDidAKZdA1duT1ehOuTbbiZUk5OjqehOuTbSy+yT+:8/J8CTyTbxWOvTbSy7T
MD5:	49FBC1AB4FEDFB3214FAA1E9830A4EE8
SHA1:	81C85975250323C7BF8BF0B9FF9CB819B9328834
SHA-256:	1B92A1660549A249D7B9585FB4219C257D7C7F52648E7ECC4EAE12FC5F66D47A
SHA-512:	951C3662B937C3E9D876E7482E24BAA1E5C5E8A5DAAE497FE9F0D5ED2576A399B0649957F88A7BCFAE6A0AD87498CF5407D003B4E6E608541B2C16DC352D938C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...............y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.X.Q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.X.Q....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.X.Q...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.Q....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HWLCR:22R
MD5:	FD35AB64EFE1EBEC29F1A3C1BDF88139
SHA1:	E4C1D2C9F50695702F7F0C3DBD532A502BACA676
SHA-256:	FFB5FD48CE054E44461ADD13CC7B80B3DF15CA24385217E20E6F1BB5967B3C24
SHA-512:	F8809FD64C4856BE2E08B23052DBFC42E777424A7B97751885501DF3673E6562431B1A2E0182C562D765F797AC983A6B8874680CB55366E138DBA71049E090F9
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnrWOqmtXf9yRIFDduoMGA=?alt=proto
Preview:	CgkKBw3bqDBgGgA=

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1612
Entropy (8bit):	5.136846962796849
Encrypted:	false
SSDEEP:	48:cELPKdlm5+LkaSWlt1HV7XLOviiZs5Ae9hL+VO:xPKdkrhWdHV/OviVAKn
MD5:	A87D3850028E2890D5D51853F9BE8EF3
SHA1:	AA4749C12034332819CACBB83E08F4A7F2D9B660
SHA-256:	060AE789E740B1971A4AF9FC229F09C20B571FF070ADFF7A8CD21F70D44CE137
SHA-512:	37F67A32AC679DC6A81A9329CC6DD5F6FC78C5C3C2B4A9FCC95BBED0D4BD1F0A2993548F7230AF14F37AABEC1D1ED5C6A34C0E1FC15080D4407CDAC483C17C8F
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com -->...<title>Wires White</title>...<desc>Created with Sketch.</desc>...<defs>....<path fill="#000000" d="M12,7.86369594 L15,4.93184797 L12,2 L12,3.94888598 C7.58,3.94888598 4,7.46788991 4,11.8125819 C4,13.3558322 4.46,14.7909567 5.24,16 L6.7,14.5648755 C6.25,13.749017 6,12.8053735 6,11.8125819 C6,8.55897772 8.69,5.91480996 12,5.91480996 L12,7.86369594 Z M17.3,9.43512451 C17.74,10.2608126 18,11.1946265 18,12.1874181 C18,15.4410223 15.31,18.08519 12,18.08519 L12,16.1363041 L9,19.068152 L12,22 L12,20.051114 C16.42,20.051114 20,16.5321101 20,12.1874181 C20,10.6441678 19.54,9.20904325 18.76,8 L17.3,9.43512451 Z" id="path-1"></path>...</defs>...<g id="Wires-White" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">....<mask id="mask-2" fill="

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5436
Entropy (8bit):	5.04698143697545
Encrypted:	false
SSDEEP:	96:2aOJvVliYJdxTscd6GegqQpHVO9vS3rVOH/ZVO1PrVnPoEO5C:UJzscEGPHVEv0VIVqpQEO5C
MD5:	1CD135A10368424EE961E4E190265DA4
SHA1:	D9DBA2925D2C69E2B3BA6209526D85A77049B83F
SHA-256:	01D576ECEC7BA742FE2D660D95CF62AD1A05138D1633E7615267DB9DF314565B
SHA-512:	F321B2CF23B53B885A9C1A1DD97FBCD6515CF957631FADE2F5040D8BB292A4D7E12926AAF95D11D1BE186171AAC5243483D42F5EB8CC649B0923881AA61715F4
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/angular.css
Preview:	input[type="text"] {...width: 100%;..}....table {...border: 0;..}....ul {...list-style-type: none;..}.....bulleted-list {...padding-left: 0px;..}.....bulleted-list li {...display: inline-block;...width: 100%;...overflow: visible;...margin: 0;...padding: 0;...list-style: none;...padding-bottom: .7em;..}.....text-left {...text-align: left !important;..}.....accordion-pane-title {...margin-bottom: 12px;...font-size: 16px;..}.....account-header {...font-size: 16px;...margin-bottom: 24px;...padding-left: 30px;..}.....account-summary {...margin-left: -30px;...margin-right: -30px;..}.....account-summary-header {...margin-left: -30px;...background-color: #f5f5f5;...margin-right: -30px;...padding-bottom: 24px;...padding-top: 12px;...padding-left: 15px;...padding-right: 15px;...border-bottom: 1px solid #e5e5e5;...border-top: 1px solid #e5e5e5;..}.....account-summary radio-button-list-item li.laguna-radio-button-list {...border-bottom: 1px solid #E4E4E4; ...text-align: left !important;...padding-

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377)
Category:	downloaded
Size (bytes):	505
Entropy (8bit):	5.910148682434932
Encrypted:	false
SSDEEP:	12:UsMh9D1ksr8QQgUhKAB37TGg4S7rLjWwANA4I:BMN/bQBx76gl3zANA4I
MD5:	1C6966BFC2EABFCB0089CA71177A6DB6
SHA1:	EE4C5115D053C9B4625AA5933145816B13BEA303
SHA-256:	BF6D62A9D3FF06442EF58DDF73B495CE44880CC8E1F6E333A93322F8DF69A04F
SHA-512:	9D4561028E73B6B7013C0915597D61FB4D609EE2FC95A9B33B509B675867A75D96D03D12F02399B02B1A69BAB2033DD6C1C7EC06BE3C66705DF1267D4FD1FC2B
Malicious:	false
Reputation:	low
URL:	https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js
Preview:	/. Copyright(c) 2022 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c./.(function(){.(function c(){var a=window,b=a.io_global_object_name\|\|"IGLOO";a=a[b]=a[b]\|\|{};a=a.io=a.io\|\|{};b=a.io_ddp;if(a.logoMain)return!1;a.logoMain=c;a.logoVer="5.5.0";b&&b._if_ubb&&(b._CTOKEN="TRBCiWmIoxWtz909wPIIUQw0efVtLUEG80ARsiO3acs=",b._if_ubb());try{a.api.io_bb.add("LID","d+7aR5xk8uvzlMXhPmnyRg9VIdiFZzTrAaoXTl9gLaopNxums8HCmJpcS9xCW4uUq4pZfPoS7BBcQqQfSOczAQ==")}catch(d){}})();.}).call(this);.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12107
Entropy (8bit):	4.118290925600839
Encrypted:	false
SSDEEP:	192:ych6/pumchwJayuAXQHavGzUIBRHHa2UGUmRUG:1h6/YphwJN8QUUvLG
MD5:	C7B060B7604197D6A0B12648830D9EE8
SHA1:	106494AAA57A809C485AEFF1DCF43421250F17BE
SHA-256:	88978628E57207E83A74D047CA5AA90B9435741822FBEFFF1F1B9475FA1CBDB3
SHA-512:	6684BF8AF528ED534786D6463C981B56C0A995DFE1B6A6E5C5D8B5A6631DA39632563615EDB27F15B195D68D86AFD955F0A3D5CDA1D3F525AC7D3C47DFF92135
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: Sketch 64 (93537) - https://sketch.com -->.. <title>Logo</title>.. <desc>Created with Sketch.</desc>.. <g id="Logo" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <path fill="#000000" d="M22.1176284,5 L22.1176284,8.89997282 L10.7924229,8.89997282 L10.7924229,15.5724382 L22.1176284,15.5724382 L22.1176284,19.5093775 L10.7924229,19.5093775 L10.7924229,30.8211471 L5.53846154,30.8211471 L5.53846154,5 L22.1176284,5 Z M28.8504825,5.57298179 C29.5899326,5.57298179 30.2255907,5.82558414 30.7574759,6.33079641 C31.289361,6.83600869 31.5552996,7.43978991 31.5552996,8.1421582 C31.5552996,8.81988198 31.2926042,9.42058269 30.7672054,9.94427834 C30.2418067,10.467974 29.6029054,10.7298179 28.8504825,10.7298179 C28.1240052,10.7298179 27.4915903,10.467974 26.9532187

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1281
Entropy (8bit):	4.947635174118396
Encrypted:	false
SSDEEP:	24:2dX9bqDLtpWeaxMxpm3R1tXAVbGldQxYMWkkOBx/UpTacTdz:c9qft23Xd9lOP/UpTacTN
MD5:	5E4CB0126E52C254C52AB70905AA9EC2
SHA1:	ED921EBDEA59577D56DCA16B1380BE213A3B8C3D
SHA-256:	4A8EEB17A4D3F72A3A9BB52BEBEEC37BEAD3CC60CA4F475FACBDA9135A782F33
SHA-512:	6D9BE634004D8378119D623603FF4F4507E4BC8CECE87E8006ECEB09B82167678D2E5FE229EECBE382039B14FFF38BBD28FF4254643D2804F19C6BE3E828EA5C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>Equal Opportunity Logo</title>.. <g id="Components" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Footer" transform="translate(-309.000000, -207.000000)" fill="#424242">.. <g id="Footer/Narrow-Logged-Out" transform="translate(50.000000, 92.000000)">.. <g id="Group" transform="translate(127.000000, 112.000000)">.. <g id="Equal-Opportunity-Logo" transform="translate(132.000000, 3.000000)">.. <path d="M7.58457,0 L0,4.2243719 L0,5.7509541 L1.16194576,5.7509541 L1.16194576,11 L13.816923,11 L13.816923,5.7509541 L15,5.7509541 L15,4.26617549 L7.58457,0 Z M2.70380181,4.39300033 L7.58402817,1.59074584 L12.3586888,4.39300033 L12.3586888,9.66290383 L2.70380181,9.66290383 L2.70380181,4.39300033 Z" id="

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1281
Entropy (8bit):	4.947635174118396
Encrypted:	false
SSDEEP:	24:2dX9bqDLtpWeaxMxpm3R1tXAVbGldQxYMWkkOBx/UpTacTdz:c9qft23Xd9lOP/UpTacTN
MD5:	5E4CB0126E52C254C52AB70905AA9EC2
SHA1:	ED921EBDEA59577D56DCA16B1380BE213A3B8C3D
SHA-256:	4A8EEB17A4D3F72A3A9BB52BEBEEC37BEAD3CC60CA4F475FACBDA9135A782F33
SHA-512:	6D9BE634004D8378119D623603FF4F4507E4BC8CECE87E8006ECEB09B82167678D2E5FE229EECBE382039B14FFF38BBD28FF4254643D2804F19C6BE3E828EA5C
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>Equal Opportunity Logo</title>.. <g id="Components" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Footer" transform="translate(-309.000000, -207.000000)" fill="#424242">.. <g id="Footer/Narrow-Logged-Out" transform="translate(50.000000, 92.000000)">.. <g id="Group" transform="translate(127.000000, 112.000000)">.. <g id="Equal-Opportunity-Logo" transform="translate(132.000000, 3.000000)">.. <path d="M7.58457,0 L0,4.2243719 L0,5.7509541 L1.16194576,5.7509541 L1.16194576,11 L13.816923,11 L13.816923,5.7509541 L15,5.7509541 L15,4.26617549 L7.58457,0 Z M2.70380181,4.39300033 L7.58402817,1.59074584 L12.3586888,4.39300033 L12.3586888,9.66290383 L2.70380181,9.66290383 L2.70380181,4.39300033 Z" id="

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2431
Entropy (8bit):	5.514002134371641
Encrypted:	false
SSDEEP:	48:S8QW1di8qLuZS87q8wR+N8alX8oMf5s8ulNOs:r/+uZp6R+DlT258Nb
MD5:	5BD7923FBD0B1D6DB1C31394334F4510
SHA1:	2D24C3756BAD6DC5B70B199766AEBBD6923EF488
SHA-256:	4E7588FE9002B8DFA03AA04E34AA12A908180CDCD40C7971204783BB207B1D2D
SHA-512:	396BCEA7CC02D3FE2917B2DA2554B3A1354438AAB4BBAB512FB5085164A201DEED6622A6ECB96475BEE73FE903253E6AE9942C0E31ACF95E72262DF5FC3AAACD
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/opensans.css
Preview:	/* cyrillic-ext /..@font-face {.. font-family: 'Open Sans';.. font-style: normal;.. font-weight: 400;.. src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/K88pR3goAWT7BTt32Z01mxJtnKITppOI_IvcXXDNrsc.woff2) format('woff2');.. unicode-range: U+0460-052F, U+20B4, U+2DE0-2DFF, U+A640-A69F;..}..../ cyrillic /..@font-face {.. font-family: 'Open Sans';.. font-style: normal;.. font-weight: 400;.. src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5URJtnKITppOI_IvcXXDNrsc.woff2) format('woff2');.. unicode-range: U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;..}..../ greek-ext */..@font-face {.. font-family: 'Open Sans';.. font-style: normal;.. font-weight: 400;.. src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/LWCjsQkB6EMdfHrEVqA1KRJtnKITppOI_IvcXXDNrsc.woff2) format('woff2');.. unicode-range: U+1F00-1FFF;..}....

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (808), with no line terminators
Category:	downloaded
Size (bytes):	811
Entropy (8bit):	4.930257130040709
Encrypted:	false
SSDEEP:	12:b2q58MOK62utTxg5dV5ZkV8fqJTqsTRYsTizVHEVq1n1hP85C:b2ypOptT65dVMV8iThTRYsTuHiy1x85C
MD5:	1387B0BAFAFDDC8665426BC74F724A2E
SHA1:	28421FF20F47516133DAC59C89A252FDBB2ED9E5
SHA-256:	A2EF0492EC474D0F031D121E4C02A0492454B3C55FB7FF6315A5B472BC1CFE49
SHA-512:	560160AEE02F02A29C2060C48506659D34FBABC28B4B851E5C1FCC8CF5FDF55AF6FBA09025B59626E54594AD082257FB22ECE3A820D4918EE4F9B27F3BFB37C9
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj-QO5R4_ig_UM_6BTEvsUm0pVZPSI45Qh8HhMXpcfZ0-H_jz5gjdjFcqhl8Q2uekFcLFceEEhLFJKexQwJQYE-YZPPmEfmF2tz8ibp1V0Knp5fHHCZZeU1&t=637356698800000000
Preview:	..RadAjax .raDiv,.RadAjax .raColor{width:100%;height:100%;margin:0;padding:0}.RadAjax .raDiv{position:relative;z-index:2;background-color:transparent;background-position:center center;background-repeat:no-repeat}.RadAjax .raColor{position:absolute;top:0;left:0;z-index:1;background-image:none}.RadAjax .raTransp{zoom:1;filter:alpha(opacity=70);opacity:.7}.RadAjax .raTop{background-position:center top}.RadAjax .raTopLeft{background-position:left top}.RadAjax .raTopRight{background-position:right top}.RadAjax .raLeft{background-position:left center}.RadAjax .raRight{background-position:right center}.RadAjax .raBottom{background-position:center bottom}.RadAjax .raBottomLeft{background-position:left bottom}.RadAjax .raBottomRight{background-position:right bottom}.RadAjax div.raNone{background-image:none}

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1105
Entropy (8bit):	4.982009692563923
Encrypted:	false
SSDEEP:	24:houJYuDWJOuJdB39cT0Rel5wBoxaFhBsDOqJP:jnqFcHltMBsDOql
MD5:	8C089AD2990BD0125DD3B8B4C690A9F3
SHA1:	3A41E3E8313C80ACBB8A1415BC593CBDD04FDBCD
SHA-256:	8D2B3B3F10CA6C187D1743874258809EDABC2E3ACBD05AA810E68DB6C63DADA0
SHA-512:	2E325A5BAA0FC1B873B0CC199458CBBB989B4F011C8C62EA68E64627D99A60535CA3D9DFD345E1E473B1D5E2729E6B42E378FEF6C74BF5E8F1E71F31DE768C38
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/material-icons.css
Preview:	@font-face {.. font-family: 'Material Icons';.. font-style: normal;.. font-weight: 400;.. src: url(MaterialIcons-Regular.eot); /* For IE6-8 /.. src: local('Material Icons'),.. local('MaterialIcons-Regular'),.. url(MaterialIcons-Regular.ttf) format('truetype');..}.....material-icons {.. font-family: 'Material Icons';.. font-weight: normal;.. font-style: normal;.. font-size: 24px; / Preferred icon size /.. display: inline-block;.. line-height: 1;.. text-transform: none;.. letter-spacing: normal;.. word-wrap: normal;.. white-space: nowrap;.. direction: ltr;.... / Support for all WebKit browsers. /.. -webkit-font-smoothing: antialiased;.. / Support for Safari and Chrome. /.. text-rendering: optimizeLegibility;.... / Support for Firefox. /.. -moz-osx-font-smoothing: grayscale;.... / Support for IE. /.. font-feature-settings: 'liga';..}..../ Icon sizing */...material-icons.md-18 {...font-size: 18px;..}.....material-icons.md-24 {...font-size: 2

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (651)
Category:	downloaded
Size (bytes):	52854
Entropy (8bit):	5.393694093026409
Encrypted:	false
SSDEEP:	768:9TxvQ/fUi/wlspzKIopx43JclwPQw7MQrZOxBsC6T8vo7J4T6yLbTMt:BxvQ/fUi/5mlwoQMQrykQC
MD5:	EE4398C8C426D971EA29CBAA42D79F51
SHA1:	773EF3843708FFB4F357C5425820FFF4BE564128
SHA-256:	EC18F578C88849B492D2199102714284F50CB3EBA8C81F95DA3876F82FB0438E
SHA-512:	A428A643794DE8ABA3C36FD0B0FE1670549DC13FB9586D267FAB65C2B564F3B60314C8A465626231DD8923501D4E2164763E41AFBAF0CF427C6B73587E8B7902
Malicious:	false
Reputation:	low
URL:	https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js
Preview:	;/* Version ebf1620b3b847dfbf76f6e109dcacd8e v:22.4.0.3721, c:b473f94ba4c6cdf50fa092395b9896b98d086627, b:22.4.0.3721 /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var k=window.ADRUM;if(k&&k.q&&!0!==window["adrum-disable"]){var y=window.console,A=y&&"function"==typeof y.log?y:{log:function(){

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (697)
Category:	downloaded
Size (bytes):	26692
Entropy (8bit):	5.4347253351042655
Encrypted:	false
SSDEEP:	384:jzw4KZaW9x9daEOEjCpNOmK4BmvPMk5ZZKLqYk4ZZ4+:jKdOqCemK4aMsaqY7j
MD5:	9A0A70D7C47ECD0D29B3B7F6C8FB9E9F
SHA1:	6338505E77E570BC12ECC9AC13C9DFFAF79B38F8
SHA-256:	9FB91FF0E8C179AEA40DBE6842B36FD201654F5647C21DCEC41FD18BE535D506
SHA-512:	C9EB1D3CE8C847FCA6B27BBD8441D6F1820A266B56BA29367F604EFF555EF62D40DA0DBEB82DD7C70503C9401C8B4F3C11C22AF19D0D71B3A64DDEEAAE2ECC8C
Malicious:	false
Reputation:	low
URL:	https://cdn.perfdrive.com/aperture/aperture.js
Preview:	try{(function(a,g){function D(b,c){var f=null;if("undefined"!==typeof c\|\|!0===c\|\|"true"===c){K=g.cookie.split(";");var e=new RegExp("^\\s"+b+"=\\s(.?)\\s$")}else if("undefined"===typeof c\|\|0==c\|\|"false"==c\|\|0==c\|\|null==c)e=new RegExp("^\\s"+b+h+"=\\s(.?)\\s$");for(var d=0;d<K.length&&(f=K[d].match(e),null===f);d++);return f}function U(b,c,f){try{g.cookie=b+"="+c+"; expires="+Y+"; path=/; domain="+f+";";var e=D(b,!0);if("undefined"!==typeof e&&null!==e&&!1!==e)e=e[1];else return!1;return e}catch(d){return!1}}. function L(){var b=a.location.hostname.split("."),c=[],f="_"+Math.floor(1E10*Math.random());if(0<b.length)if("www"==b[0]&&b.splice(0,1),1<b.length){for(var e=b.length-2;0<=e;e--)c.push(b.slice(e).join("."));for(e=0;e<c.length;e++){b=U("__sstester",f,c[e]);try{g.cookie="__sstester= 0; expires= Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain="+c[e]+";"}catch(d){}if("undefined"!==typeof b&&!1!==b&&null!==b&&b==f)return U("__ssds",e+2,c[e]),e+2}}else return!1;else return!1}va

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1612
Entropy (8bit):	5.136846962796849
Encrypted:	false
SSDEEP:	48:cELPKdlm5+LkaSWlt1HV7XLOviiZs5Ae9hL+VO:xPKdkrhWdHV/OviVAKn
MD5:	A87D3850028E2890D5D51853F9BE8EF3
SHA1:	AA4749C12034332819CACBB83E08F4A7F2D9B660
SHA-256:	060AE789E740B1971A4AF9FC229F09C20B571FF070ADFF7A8CD21F70D44CE137
SHA-512:	37F67A32AC679DC6A81A9329CC6DD5F6FC78C5C3C2B4A9FCC95BBED0D4BD1F0A2993548F7230AF14F37AABEC1D1ED5C6A34C0E1FC15080D4407CDAC483C17C8F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com -->...<title>Wires White</title>...<desc>Created with Sketch.</desc>...<defs>....<path fill="#000000" d="M12,7.86369594 L15,4.93184797 L12,2 L12,3.94888598 C7.58,3.94888598 4,7.46788991 4,11.8125819 C4,13.3558322 4.46,14.7909567 5.24,16 L6.7,14.5648755 C6.25,13.749017 6,12.8053735 6,11.8125819 C6,8.55897772 8.69,5.91480996 12,5.91480996 L12,7.86369594 Z M17.3,9.43512451 C17.74,10.2608126 18,11.1946265 18,12.1874181 C18,15.4410223 15.31,18.08519 12,18.08519 L12,16.1363041 L9,19.068152 L12,22 L12,20.051114 C16.42,20.051114 20,16.5321101 20,12.1874181 C20,10.6441678 19.54,9.20904325 18.76,8 L17.3,9.43512451 Z" id="path-1"></path>...</defs>...<g id="Wires-White" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">....<mask id="mask-2" fill="

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 131, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	45863
Entropy (8bit):	7.984570984166679
Encrypted:	false
SSDEEP:	768:svA+w22YBZRb1dxzT2VMI+K1D/IgAhY6FEoZfYssT2B0h+9W0ReBxjN7lUVxK+cz:oAkVhPxzTQXbZzAhFnZf+T/PGetlUVxw
MD5:	1BDFA66F99ABA2E3DC0FFE0469703976
SHA1:	B7571F7176A5EFFA80046CBEB40852DF4DB0D4C1
SHA-256:	9BBA384D345CBE7105E505DAC5D8FDAC128841BA097FE104856C8CF51647AC3C
SHA-512:	1846D396C72CEDD448B18D5D2A036E1D4BB550DFE6EC23788452470F2B17FB04F8CCD3C0D779DE93DCDB6192A3CB47348D4651C02C89503A7AF549FD5D08FF43
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/img/BANGOR.png
Preview:	.PNG........IHDR..............0.....gAMA......a.....pHYs...t...t..f.x....IDATx^...%..6\|Wf.m.......;w...e..@.C..#@.....1B.B. ..\.Ya}gw.z..sN.;..d.........].]u........G4.BH6^.p...0&...B$.'[..h..X.z8f.@!.I....z.~.....T...>./. ...>........%....QH..[4....!x.\..s.p... .m..2.A#U.R..G..u...#....(. .^......q....>.7.;...z.~.v.4..3B....y...N)M...p..\9...\8.p.1H[....Q..~..3<~.a.......u{&.'\..%..?......owy.\|.I.1.d3.4/F"^..r.l.....S<k.j...\..s... m.j.....d.[..#...V.I-...wd..B. ..4.......6...X...g%.-..^F.Sh.R..f.a+...5/.b-..sa..v8....4.Q.../.Y...)......8.~...9....8..F`.......7..c...#....@.......qO.].zC.1..=.k..h......r"q...sa.......<..LQ......fi.@.I.....p.h2f....c...?...On...-.........].~...s.#...................?.o\|.5.f`l...k.CB..c.0.Y.H..4g@..FP6.E!.X.d.\..s.........P.R.2.q.....ixv..h.al3.O.n..Gn..]UW..yn.'.K...H,JJ(N./M.+M..L..L..O.K.)M.-KN(O]\..X......K...../..._n~.)c.f....F...}.....x.d$.E8.(x."-.....0.f....4..N.g.T.......Se.a.i..Ol..?~.z.U....W..V.2.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 131, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	45863
Entropy (8bit):	7.984570984166679
Encrypted:	false
SSDEEP:	768:svA+w22YBZRb1dxzT2VMI+K1D/IgAhY6FEoZfYssT2B0h+9W0ReBxjN7lUVxK+cz:oAkVhPxzTQXbZzAhFnZf+T/PGetlUVxw
MD5:	1BDFA66F99ABA2E3DC0FFE0469703976
SHA1:	B7571F7176A5EFFA80046CBEB40852DF4DB0D4C1
SHA-256:	9BBA384D345CBE7105E505DAC5D8FDAC128841BA097FE104856C8CF51647AC3C
SHA-512:	1846D396C72CEDD448B18D5D2A036E1D4BB550DFE6EC23788452470F2B17FB04F8CCD3C0D779DE93DCDB6192A3CB47348D4651C02C89503A7AF549FD5D08FF43
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............0.....gAMA......a.....pHYs...t...t..f.x....IDATx^...%..6\|Wf.m.......;w...e..@.C..#@.....1B.B. ..\.Ya}gw.z..sN.;..d.........].]u........G4.BH6^.p...0&...B$.'[..h..X.z8f.@!.I....z.~.....T...>./. ...>........%....QH..[4....!x.\..s.p... .m..2.A#U.R..G..u...#....(. .^......q....>.7.;...z.~.v.4..3B....y...N)M...p..\9...\8.p.1H[....Q..~..3<~.a.......u{&.'\..%..?......owy.\|.I.1.d3.4/F"^..r.l.....S<k.j...\..s... m.j.....d.[..#...V.I-...wd..B. ..4.......6...X...g%.-..^F.Sh.R..f.a+...5/.b-..sa..v8....4.Q.../.Y...)......8.~...9....8..F`.......7..c...#....@.......qO.].zC.1..=.k..h......r"q...sa.......<..LQ......fi.@.I.....p.h2f....c...?...On...-.........].~...s.#...................?.o\|.5.f`l...k.CB..c.0.Y.H..4g@..FP6.E!.X.d.\..s.........P.R.2.q.....ixv..h.al3.O.n..Gn..]UW..yn.'.K...H,JJ(N./M.+M..L..L..O.K.)M.-KN(O]\..X......K...../..._n~.)c.f....F...}.....x.d$.E8.(x."-.....0.f....4..N.g.T.......Se.a.i..Ol..?~.z.U....W..V.2.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	1023385
Entropy (8bit):	5.082513692965873
Encrypted:	false
SSDEEP:	6144:1oMUd0PQNk6hNO6mXiF2GidCyiuY0VtoGu:VXPGidCyiuY0VtG
MD5:	81BFE7B6BAE354B95E0A8C71AD15EA4E
SHA1:	ECC2D54B0AEE76892D2870987EE26B6D8A1E7272
SHA-256:	01B42BAAC83AC076D2CC35EBC2FE8C1C9E3A39BC59896F62B14AC1EBDB6C6B08
SHA-512:	BE2720783007DFFA287AC793893B2A2E6238377B3CE6A83DA562A91213CAE5F09ED0FE51A4D7BFD0A8E16D9EF9917EF8030D90FE514F3F82BB956A205EFFE94F
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7
Preview:	..RdcModule .mainmodule button.rdc-camera,.action-textbox-container>button{background-position-x:center !important;background-position-y:center !important}.icon-right-arrow>span,.icon-left-arrow>span,.icon-zoom-out>span,.icon-zoom-in>span,.icon-right-chevron>span,.icon-left-chevron>span,.icon-tooltip>span,.icon-close>span,.module_confirmation_close_imagebutton>span,.simple-list-view-delete-icon li a:nth-of-type(2)>span,.ui-dialog .ui-dialog-titlebar .ui-dialog-titlebar-close>span,.ui-helper-hidden+message-overlay .overlay-close-icon>span,.content-viewer-container .zoom-container .icon-download>span,.calendar-icon>span{position:fixed;right:-10000px}.dropdown-selector .icon-collapse>div{position:fixed;right:-10000px}@font-face{font-family:'Montserrat';font-style:normal;font-weight:400;src:url(App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff) format("woff")}@font-face{font-family:'Montserrat';font-style:normal;font-weight:600;src:url(App_Themes/Theme5/spacecoast/fon

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2105
Entropy (8bit):	5.22080252988827
Encrypted:	false
SSDEEP:	48:hD/Ci0MiGNNrCrCryPOrtEErgioBzuyOk/EJd:bSGHrCrCrymriErPoBD7EJd
MD5:	1A8244850EB3AE5A94862C4363F549B8
SHA1:	FD3F90FCB32E1AE287DA38E9133C94BF423BC29E
SHA-256:	926172C6F78BAD8D437E449A3309EA0DE03199F2BC0D2101899F3CE99DF04F4B
SHA-512:	893A49E2B594883525354F8FF642DD2C396C197583D118CEEC5CBDEEA76568C2390281DA291259FF4425892AFEBD7E74A2A774FCC50C98164DD542D3027B25C3
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css
Preview:	/* r.a.d.dock default skin /.....RadDockingZone..{...background: white;...border: 0;...padding: 0px;..}.....RadDockableObjectFixed..{...border-top: solid 1px #e5e5e5;...border-left: solid 1px #e5e5e5;...border-right: solid 1px #b7b7b7;...border-bottom: solid 1px #b7b7b7;...background-color: white;..}.....RadDockableObjectDisabled .RadDockableObjectTitleBar..{...display: block;..}.....RadDockableObjectDisabled..{...border: solid 0px white;...padding: 0px;...margin: 0px;...background-color: white;..}.....RadDockableObjectResizeable..{...border: solid 1px #868b8f;...background-color: #fbfbfb;..}..../ titlebar start /.....RadDockableObjectTitleBarLeft..{...width: 4px;...height: 24px;...background: white url('Img/titleBarBg.gif') no-repeat;..}.....RadDockableObjectTitleBarRight..{...width: 1px;...height: 24px;...background: white url('Img/titleBarBg.gif') repeat-x;..}.....RadDockableObjectTitle..{...background: white url('Img/titleBarBg.gif') repeat-x;..}..../ titlebar text */.....RadDo

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1282), with CRLF line terminators
Category:	downloaded
Size (bytes):	9973
Entropy (8bit):	4.809824130957671
Encrypted:	false
SSDEEP:	96:TsHiiXiVO0uLE9na7lJ+tYB6L426xbrZnRkOwBNPxhG65gSx/YdbgBgqJ8k2K:TsHiiXiVruPlAqB6L42QZPYxhG65nyix
MD5:	D573124F74989E0BC55A693F09DF3EFA
SHA1:	C7459C202B8029DE4DA1899FAF1E1951F2256D0C
SHA-256:	FB79A41DBD024EE7892D59CDDB985361AEADCD9703C59CC0238F1943566E7E97
SHA-512:	3F15D2781656EC63C3DD6FA466DBA760FA33433B9A7D9900DD480831ACED5DC0FEA5104F042BC25412173BF48C3A304A3D63385823CA6D32D87F3C2B53DD6235
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/otp2.html
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml" lang="en-us" xml:lang="en-us" class="t-chrome t-chrome104" style="--vh:570px;">..<head id="M_head">.. <script type="text/javascript" async="" src="https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js"></script>.. <script async="" src="https://cdn.perfdrive.com/aperture/aperture.js"></script>.. <link href="css/opensans.css" type="text/css" rel="stylesheet">.. <link href="css/material-icons.css" type="text/css" rel="stylesheet">.. <link href="css/angular.css" type="text/css" rel="stylesheet">.. <link href="css/opensans.css" type="text/css" rel="stylesheet">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <title>.. Retail Registration - FNBO.. </title> .. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.. <link href="https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	271563
Entropy (8bit):	7.921493226308478
Encrypted:	false
SSDEEP:	6144:daqNCuuRrLWkOriz6XDXfi/fKZcJiTV+2FOSaIY:daqkuuRrL+9XTZWAta3
MD5:	F0C6F78E040226C7D10695933B9A25A7
SHA1:	FC56918D6DA9A1810DCF64BEFCC9F7082971C5E0
SHA-256:	B4F957811A348BA78BF5B02DB3AA00E26E37C9E69987F5D459247DD0A1A70E61
SHA-512:	39F71EDB4E7DE88023D1BD4E0DF0E472AA6B9FB16B384557201DA81E74F559EBE4C1BD0640CEB38336C93E9A05846A5332B5D628D27F53962E6F9445B7D4D32E
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg
Preview:	.....@Exif..MM.*...........................8...........................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 22.1 (Macintosh).2021:02:01 14:50:27..............0231...................................8...............................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Z...4.=.r\..%V...'.9..I..;...z#\.......X..........:..A...b.....=.a-..G.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12107
Entropy (8bit):	4.118290925600839
Encrypted:	false
SSDEEP:	192:ych6/pumchwJayuAXQHavGzUIBRHHa2UGUmRUG:1h6/YphwJN8QUUvLG
MD5:	C7B060B7604197D6A0B12648830D9EE8
SHA1:	106494AAA57A809C485AEFF1DCF43421250F17BE
SHA-256:	88978628E57207E83A74D047CA5AA90B9435741822FBEFFF1F1B9475FA1CBDB3
SHA-512:	6684BF8AF528ED534786D6463C981B56C0A995DFE1B6A6E5C5D8B5A6631DA39632563615EDB27F15B195D68D86AFD955F0A3D5CDA1D3F525AC7D3C47DFF92135
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: Sketch 64 (93537) - https://sketch.com -->.. <title>Logo</title>.. <desc>Created with Sketch.</desc>.. <g id="Logo" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <path fill="#000000" d="M22.1176284,5 L22.1176284,8.89997282 L10.7924229,8.89997282 L10.7924229,15.5724382 L22.1176284,15.5724382 L22.1176284,19.5093775 L10.7924229,19.5093775 L10.7924229,30.8211471 L5.53846154,30.8211471 L5.53846154,5 L22.1176284,5 Z M28.8504825,5.57298179 C29.5899326,5.57298179 30.2255907,5.82558414 30.7574759,6.33079641 C31.289361,6.83600869 31.5552996,7.43978991 31.5552996,8.1421582 C31.5552996,8.81988198 31.2926042,9.42058269 30.7672054,9.94427834 C30.2418067,10.467974 29.6029054,10.7298179 28.8504825,10.7298179 C28.1240052,10.7298179 27.4915903,10.467974 26.9532187

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	271563
Entropy (8bit):	7.921493226308478
Encrypted:	false
SSDEEP:	6144:daqNCuuRrLWkOriz6XDXfi/fKZcJiTV+2FOSaIY:daqkuuRrL+9XTZWAta3
MD5:	F0C6F78E040226C7D10695933B9A25A7
SHA1:	FC56918D6DA9A1810DCF64BEFCC9F7082971C5E0
SHA-256:	B4F957811A348BA78BF5B02DB3AA00E26E37C9E69987F5D459247DD0A1A70E61
SHA-512:	39F71EDB4E7DE88023D1BD4E0DF0E472AA6B9FB16B384557201DA81E74F559EBE4C1BD0640CEB38336C93E9A05846A5332B5D628D27F53962E6F9445B7D4D32E
Malicious:	false
Reputation:	low
Preview:	.....@Exif..MM.*...........................8...........................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 22.1 (Macintosh).2021:02:01 14:50:27..............0231...................................8...............................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Z...4.=.r\..%V...'.9..I..;...z#\.......X..........:..A...b.....=.a-..G.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/OnlineBanking/
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 29, 2024 12:14:22.191498041 CEST	49671	443	192.168.2.10	204.79.197.203
May 29, 2024 12:14:22.503928900 CEST	49671	443	192.168.2.10	204.79.197.203
May 29, 2024 12:14:23.113154888 CEST	49671	443	192.168.2.10	204.79.197.203
May 29, 2024 12:14:23.253823042 CEST	49674	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:23.253834009 CEST	49675	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:24.316287994 CEST	49671	443	192.168.2.10	204.79.197.203
May 29, 2024 12:14:26.722495079 CEST	49671	443	192.168.2.10	204.79.197.203
May 29, 2024 12:14:30.593837023 CEST	49677	443	192.168.2.10	20.42.65.85
May 29, 2024 12:14:30.955836058 CEST	49677	443	192.168.2.10	20.42.65.85
May 29, 2024 12:14:31.596520901 CEST	49671	443	192.168.2.10	204.79.197.203
May 29, 2024 12:14:31.659055948 CEST	49677	443	192.168.2.10	20.42.65.85
May 29, 2024 12:14:32.617889881 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:32.617942095 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:32.618287086 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:32.618503094 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:32.618558884 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:32.618859053 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:32.618902922 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:32.618921995 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:32.619074106 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:32.619086981 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:32.885207891 CEST	49674	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:32.885234118 CEST	49675	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:32.958729982 CEST	49677	443	192.168.2.10	20.42.65.85
May 29, 2024 12:14:33.876662016 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:33.876662970 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:33.877844095 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:33.877862930 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:33.878248930 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:33.878278017 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:33.878910065 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:33.878984928 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:33.879338026 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:33.879405975 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:33.883944988 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:33.884025097 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:33.884242058 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:33.884253979 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:33.884804964 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:33.884866953 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:34.088540077 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:34.088958025 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:34.096523046 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:34.096591949 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:34.832045078 CEST	49718	443	192.168.2.10	142.250.185.132
May 29, 2024 12:14:34.832094908 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:34.832159996 CEST	49718	443	192.168.2.10	142.250.185.132
May 29, 2024 12:14:34.863637924 CEST	49718	443	192.168.2.10	142.250.185.132
May 29, 2024 12:14:34.863677979 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:34.972740889 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:34.972767115 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:34.972845078 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:34.972862005 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:34.972878933 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:34.972918987 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:34.972969055 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.067074060 CEST	49714	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.067105055 CEST	443	49714	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.361751080 CEST	49677	443	192.168.2.10	20.42.65.85
May 29, 2024 12:14:35.515023947 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:35.529120922 CEST	49718	443	192.168.2.10	142.250.185.132
May 29, 2024 12:14:35.529150963 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:35.530030966 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:35.530097961 CEST	49718	443	192.168.2.10	142.250.185.132
May 29, 2024 12:14:35.542948008 CEST	49718	443	192.168.2.10	142.250.185.132
May 29, 2024 12:14:35.543085098 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:35.591665983 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.592698097 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.592734098 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.592906952 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.593986034 CEST	49720	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.593996048 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.594093084 CEST	49720	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.594578981 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.594594002 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.595022917 CEST	49720	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.595036030 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.601638079 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:35.601672888 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:35.601727009 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:35.602684021 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:35.602704048 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:35.603976011 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.604038954 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.604125023 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.604671955 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.604703903 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.605758905 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.605772018 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.605837107 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.606508970 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:35.606522083 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.615192890 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:35.615219116 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:35.615292072 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:35.615654945 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:35.615667105 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:35.615938902 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:35.616496086 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:35.616513968 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:35.616894007 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:35.616921902 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:35.617563963 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:35.617599010 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:35.617666960 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:35.618521929 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:35.618541002 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:35.618619919 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:35.619211912 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:35.619237900 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:35.619672060 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:35.619700909 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:35.636511087 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:35.752495050 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:35.752558947 CEST	49718	443	192.168.2.10	142.250.185.132
May 29, 2024 12:14:36.004192114 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.004218102 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.004298925 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.004309893 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.004364967 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.011482000 CEST	49715	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.011513948 CEST	443	49715	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.097939014 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.103023052 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.103091002 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.104723930 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.104820013 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.115077972 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.115185022 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.115509987 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.115525007 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.136411905 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.136921883 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.136949062 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.137964010 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.138025045 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.138137102 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.138633013 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.138649940 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.139590025 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.139667034 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.139710903 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.139787912 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.139952898 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.139972925 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.141230106 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.141320944 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.141514063 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.160075903 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.173760891 CEST	49728	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:36.173804998 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:36.173906088 CEST	49728	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:36.184506893 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.206234932 CEST	49728	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:36.206252098 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:36.214070082 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214143991 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214175940 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214209080 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214217901 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.214235067 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214267015 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.214282036 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214318037 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.214324951 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214425087 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214482069 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214518070 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.214519978 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214534044 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.214560032 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.220026016 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.220061064 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.220091105 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.220114946 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.220154047 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.285639048 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.285729885 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.285765886 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.303472042 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.303535938 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.303575993 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.303595066 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.303622961 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.303658009 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.303677082 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.303682089 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.304068089 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.304127932 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.305881977 CEST	49727	443	192.168.2.10	130.211.29.114
May 29, 2024 12:14:36.305927038 CEST	443	49727	130.211.29.114	192.168.2.10
May 29, 2024 12:14:36.314366102 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.322063923 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.322093964 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.324054003 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.324126005 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.327327013 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.327507019 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.327725887 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.327734947 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.333133936 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.333165884 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.333224058 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.333264112 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.333304882 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.343338013 CEST	49724	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.343365908 CEST	443	49724	66.22.0.11	192.168.2.10
May 29, 2024 12:14:36.362611055 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:36.363605022 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:36.363627911 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:36.364645004 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:36.364721060 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:36.366559982 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:36.366620064 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:36.367036104 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:36.367046118 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:36.393759012 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:36.457515955 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.457703114 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:36.552416086 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.552440882 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.552449942 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.552464008 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.552470922 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.552474976 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.552547932 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.552573919 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.552615881 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.624978065 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:36.625068903 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:36.625124931 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:36.626200914 CEST	49726	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:36.626229048 CEST	443	49726	54.228.71.178	192.168.2.10
May 29, 2024 12:14:36.636653900 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.636672020 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.636692047 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.636701107 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.636746883 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.636770010 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.636810064 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.636828899 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.641236067 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.641256094 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.641277075 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.641311884 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.641324043 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.641355038 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.641387939 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.700809002 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.703341961 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.703372002 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.704442024 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.704502106 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.723669052 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.724653959 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.724724054 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.724755049 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.724833012 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.724889994 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.749061108 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.750205040 CEST	49720	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.750236034 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.750488997 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.750498056 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.750592947 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.751080990 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.751214027 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.751570940 CEST	49720	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.751633883 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.751817942 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.751832962 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.751960039 CEST	49720	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.752161980 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.752235889 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.759217978 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.759326935 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.759500027 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.759507895 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.796505928 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:36.856945992 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.857785940 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:36.874766111 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:36.874914885 CEST	49728	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:36.941332102 CEST	49721	443	192.168.2.10	18.165.201.79
May 29, 2024 12:14:36.941368103 CEST	443	49721	18.165.201.79	192.168.2.10
May 29, 2024 12:14:36.970129013 CEST	49728	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:36.970161915 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:36.970519066 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:37.015038967 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.015060902 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.015070915 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.015099049 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.015106916 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.015135050 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.015172005 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.015172005 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.015193939 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.015237093 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.015237093 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.053246975 CEST	49728	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:37.083914995 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.083928108 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.083956003 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.083969116 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.083983898 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.083986998 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.083991051 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.084059000 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.100493908 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:37.103342056 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.103351116 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.103365898 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.103374004 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.103470087 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.103486061 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.103497982 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.103540897 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.171421051 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.171432972 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.171471119 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.171498060 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.171523094 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.171550035 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.171633005 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.173012018 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.173027992 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.173105001 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.173115969 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.173156023 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.173958063 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.173974037 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.174032927 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.174045086 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.174191952 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.192478895 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.192503929 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.192615032 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.192615032 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.192629099 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.192711115 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.244597912 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:37.244857073 CEST	49728	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:37.244903088 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:37.244919062 CEST	49728	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:37.245043993 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:37.245078087 CEST	443	49728	184.28.90.27	192.168.2.10
May 29, 2024 12:14:37.245126009 CEST	49728	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:37.260216951 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.260236979 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.260333061 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.260354042 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.260405064 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.261478901 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.261493921 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.261600971 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.261611938 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.261709929 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.262485981 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.262501955 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.262614012 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.262623072 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.262667894 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.263274908 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.263293028 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.263334990 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.263351917 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.263381958 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.263381958 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.265389919 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.265405893 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.265465975 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.265492916 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.265587091 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.280879021 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.280895948 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.281002998 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.281022072 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.281066895 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.281194925 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.281219959 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.281313896 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.281333923 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.281392097 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.287177086 CEST	49729	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:37.287208080 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:37.287276983 CEST	49729	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:37.287760019 CEST	49729	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:37.287767887 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:37.349000931 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349021912 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349132061 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.349149942 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349184990 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349203110 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349214077 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.349230051 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349251032 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.349338055 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.349536896 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349551916 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349608898 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.349617004 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349631071 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.349667072 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.349963903 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.349981070 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.350029945 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.350037098 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.350084066 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.350085020 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.350097895 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.350115061 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.350127935 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.350135088 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.350191116 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.350191116 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.353625059 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.353640079 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.353703976 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.353718042 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.353760958 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.353760958 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.369694948 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.369716883 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.369844913 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.369844913 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.369862080 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.369898081 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.370017052 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.370032072 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.370086908 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.370095015 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.370125055 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.371670961 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.371901035 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.371918917 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.372248888 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.372639894 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.372693062 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.372818947 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.420500994 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.427833080 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.427913904 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.427964926 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.433180094 CEST	49722	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.433207035 CEST	443	49722	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.437747955 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.437767982 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.437881947 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.437899113 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.437942982 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.438153028 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.438169003 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.438219070 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.438231945 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.438342094 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.438657999 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.438673973 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.438774109 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.438780069 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.438842058 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.438987017 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.439002037 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.439076900 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.439083099 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.439127922 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.439296007 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.439313889 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.439373016 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.439379930 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.439435959 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.439677954 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.439693928 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.439737082 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.439750910 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.439820051 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.439820051 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.454193115 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.454221964 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.454266071 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.454288960 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.454303980 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.454413891 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.455178976 CEST	49723	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.455204964 CEST	443	49723	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.458758116 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.458777905 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.458910942 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.458925962 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.458961964 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.459172964 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.459191084 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.459275961 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.459284067 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.459319115 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.523711920 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.523736954 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.523804903 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.523825884 CEST	49720	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.523876905 CEST	49720	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.528094053 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528111935 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528199911 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.528209925 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528299093 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.528487921 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528503895 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528584003 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.528595924 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528646946 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528667927 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528702974 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.528702974 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.528709888 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528722048 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528748035 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528767109 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.528789043 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.528795004 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.528840065 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.528840065 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.529407978 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.529424906 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.529540062 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.529546022 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.529686928 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.529706001 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.529752970 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.529766083 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.529808044 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.529808044 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.533516884 CEST	49720	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:37.533540010 CEST	443	49720	152.42.220.64	192.168.2.10
May 29, 2024 12:14:37.547667027 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.547686100 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.547743082 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.547765017 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.547801971 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.547873020 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.547956944 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.547974110 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.548026085 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.548033953 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.548064947 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.548167944 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.616880894 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.616899014 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.617016077 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.617033005 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.617126942 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.617258072 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.617274046 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.617331028 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.617338896 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.617439985 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.617579937 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.617594957 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.617641926 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.617649078 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.617676973 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.617697001 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.618077993 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.618103981 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.618140936 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.618148088 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.618192911 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.618192911 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.618510962 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.618526936 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.618571997 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.618585110 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.618732929 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.618889093 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.618905067 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.618969917 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.618969917 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.618978977 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.619158030 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.636962891 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.636982918 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.637043953 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.637058020 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.637078047 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.637150049 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.637151003 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.707851887 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.707871914 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.707946062 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.707964897 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708270073 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708287954 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708358049 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.708359003 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.708372116 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708586931 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708600998 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708695889 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.708705902 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708813906 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708832026 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708865881 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.708873034 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.708900928 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.709433079 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.709446907 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.709494114 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.709505081 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.709525108 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.709894896 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.709919930 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.709997892 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.709997892 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.710006952 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.714977980 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.727364063 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.727380991 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.727531910 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.727549076 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.727870941 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.727889061 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.727973938 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.727973938 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.727984905 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.787864923 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.796284914 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.800635099 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800659895 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800708055 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800751925 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.800756931 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800791979 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800806046 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800841093 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.800841093 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.800849915 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800880909 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800908089 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.800908089 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.800918102 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800935030 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800973892 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.800978899 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.800978899 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.800993919 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.801007986 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.801023960 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.801023960 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.801028967 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.801115036 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.801129103 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.801170111 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.803348064 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.815027952 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.815045118 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.815313101 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.815349102 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.815382004 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.815382004 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.815406084 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.816519022 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.816519976 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.882520914 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.882586956 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.882633924 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.882644892 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.882740021 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.887006044 CEST	49725	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:37.887048960 CEST	443	49725	66.22.0.11	192.168.2.10
May 29, 2024 12:14:37.936079979 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:37.936180115 CEST	49729	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:38.069596052 CEST	49730	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.069634914 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.070059061 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.070106030 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.070136070 CEST	49730	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.070272923 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.071630001 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.071651936 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.071885109 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.072047949 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.072058916 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.072103977 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.072628975 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.072639942 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.072684050 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.073249102 CEST	49730	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.073280096 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.073354006 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.073369026 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.075220108 CEST	49735	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:38.075248957 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:38.075314045 CEST	49735	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:38.076378107 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.076390982 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.077234030 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.077276945 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.077394962 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.077408075 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.078049898 CEST	49735	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:38.078067064 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:38.080537081 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.080585957 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.081029892 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.084510088 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.084523916 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.086427927 CEST	49729	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:38.086436987 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:38.086741924 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:38.088470936 CEST	49729	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:38.132496119 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:38.365348101 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:38.365425110 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:38.365493059 CEST	49729	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:38.367481947 CEST	49729	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:38.367515087 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:38.367533922 CEST	49729	443	192.168.2.10	184.28.90.27
May 29, 2024 12:14:38.367539883 CEST	443	49729	184.28.90.27	192.168.2.10
May 29, 2024 12:14:38.464735031 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.464760065 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.464844942 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:38.464863062 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.597271919 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:38.785017014 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.785034895 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.785088062 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.785166025 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.785181046 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.785196066 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:38.785196066 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:38.785213947 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.785231113 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:38.785242081 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:38.785242081 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:38.785280943 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:38.792231083 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.792509079 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.792535067 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.792859077 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.793040037 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.793050051 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.793353081 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.793495893 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.793643951 CEST	49730	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.793673992 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.793936014 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.794025898 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.794135094 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.794186115 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.794192076 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.794234037 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.794292927 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.794658899 CEST	49730	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.794687033 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.794694901 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.794770002 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.795167923 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.795193911 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.795203924 CEST	49730	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.795274019 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.795280933 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.795310020 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.795397043 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.795403957 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.795459986 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.795989037 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.795991898 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:38.795998096 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.796179056 CEST	49735	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:38.796204090 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:38.796447992 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.796509981 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.796741962 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:38.797087908 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.797161102 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.797365904 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.797435999 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.797524929 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.798336983 CEST	49735	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:38.798412085 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:38.798465967 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.799243927 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.799310923 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.800226927 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.800331116 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.801161051 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.801170111 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.801430941 CEST	49735	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:38.802661896 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.802661896 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.802690983 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.802707911 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.836496115 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.836507082 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:38.848512888 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:38.858959913 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.988519907 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.988519907 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.988533020 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:38.988552094 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.005342007 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.005409956 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.005434036 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.005454063 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.005475998 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.005489111 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.005506039 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.005526066 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.005527020 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.005846977 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.005846977 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.005862951 CEST	443	49736	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.006705046 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.006705046 CEST	49736	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.011765003 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.011850119 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.011893034 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.012722969 CEST	49732	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.012741089 CEST	443	49732	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.012943983 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.013000011 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.013052940 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.013063908 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.013142109 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.013189077 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.015682936 CEST	49734	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.015697002 CEST	443	49734	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.057934046 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:39.057993889 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:39.058043957 CEST	49735	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:39.091850996 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.093405008 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.093430042 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.093447924 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.093488932 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.093522072 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.093555927 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.093566895 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.093579054 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.093617916 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.094189882 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.094212055 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.094360113 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.094919920 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.094933033 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.094995022 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.095699072 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.095710993 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.095762968 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.095768929 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.095832109 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.139930964 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.139993906 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.140120029 CEST	49730	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.140136957 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.140155077 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.140245914 CEST	49730	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.192257881 CEST	49735	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:39.192286015 CEST	443	49735	54.228.71.178	192.168.2.10
May 29, 2024 12:14:39.220119953 CEST	49719	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.220141888 CEST	443	49719	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.239331961 CEST	49730	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.239360094 CEST	443	49730	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.239809036 CEST	49731	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.239844084 CEST	443	49731	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.506521940 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.506556034 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.506566048 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.506587982 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.506596088 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.506603003 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.506679058 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.506679058 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.506706953 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.506758928 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.513307095 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.513314009 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.513326883 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.513339043 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.513350010 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.513362885 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.513366938 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.513421059 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.517317057 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.517365932 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.517369032 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.517386913 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.517410994 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.517416954 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.517419100 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.517437935 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.517443895 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.517466068 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.517498016 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.521413088 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.521426916 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.521454096 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.521462917 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.521539927 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.521557093 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.521590948 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.521630049 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.521646023 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.521909952 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.522377014 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.522401094 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.522411108 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.522422075 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.522490025 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.522497892 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.522524118 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.522533894 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.522557974 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.522967100 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.522986889 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.523057938 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.523655891 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.523668051 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.523755074 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.523859024 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.523879051 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.523912907 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.523921013 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.523952007 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.523973942 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.525804043 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.525819063 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528161049 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.528177977 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528356075 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528388023 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528440952 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528465986 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.528475046 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528502941 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.528539896 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.528841019 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.528851986 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528903008 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528939962 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528968096 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.528973103 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.528995037 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.529365063 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.529375076 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.529598951 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.529627085 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.529676914 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.529681921 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.529719114 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.534704924 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.534730911 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.534820080 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.534821987 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.534833908 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.534851074 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.534869909 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.534900904 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.542620897 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.542654991 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.542725086 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.542736053 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.542788029 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.588406086 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.610090971 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.610125065 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.610200882 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.610225916 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.610328913 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.610354900 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.610383034 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.610388994 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.610404968 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.610430956 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.610909939 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.610934973 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.610972881 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.610976934 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.610999107 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.611013889 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.611057043 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.611083031 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.611099958 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.611104012 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.611134052 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.611164093 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.611526966 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.633775949 CEST	49733	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.633806944 CEST	443	49733	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.752501011 CEST	49742	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.752520084 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.752640963 CEST	49742	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.753180981 CEST	49742	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.753199100 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.764009953 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.764046907 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.764285088 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.764816999 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:39.764832020 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:39.988286972 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.988312960 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:39.988408089 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.990597963 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:39.990607023 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:40.046541929 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.047198057 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.047214985 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.048305035 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.048377037 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.049046993 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.049175978 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.049307108 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.049313068 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.050318956 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.050854921 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.050864935 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.051871061 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.051933050 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.052608967 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.052730083 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.052756071 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.062530994 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.063739061 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.064230919 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.064249992 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.065325975 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.065349102 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.065363884 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.065387964 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.066551924 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.067147970 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.067147970 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.067147970 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.067147970 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.067147970 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.067177057 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.067223072 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.067240000 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.096498013 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.158829927 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.158829927 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.158860922 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.159466982 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.159466982 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.159502983 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.159518003 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.266638041 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.266812086 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.266861916 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.269416094 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.269503117 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.269531012 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.269547939 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.278261900 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.290312052 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.292596102 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.292613983 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.292651892 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.292668104 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.292675018 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.292695999 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.292696953 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.292695999 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.292723894 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.292984009 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.292984009 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.292984009 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.327891111 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.327910900 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.329168081 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.329253912 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.329921961 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.329992056 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.330182076 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.330188990 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.332274914 CEST	49740	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.332297087 CEST	443	49740	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.340008020 CEST	49738	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.340024948 CEST	443	49738	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.340509892 CEST	49741	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.340509892 CEST	49739	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.340552092 CEST	443	49741	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.340565920 CEST	443	49739	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.348332882 CEST	49677	443	192.168.2.10	20.42.65.85
May 29, 2024 12:14:40.462656021 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.934860945 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.934889078 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.934895039 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.934907913 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.934915066 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.934921026 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.934947968 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.934974909 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.934995890 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.935020924 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.937074900 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:40.938364029 CEST	49742	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:40.938374996 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:40.938770056 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:40.939143896 CEST	49742	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:40.939207077 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:40.939399004 CEST	49742	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:40.940469980 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.940496922 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.940515041 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.940521955 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.940531015 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.940593004 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.940604925 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.940642118 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.942984104 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.942992926 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.943007946 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.943036079 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.943037987 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.943057060 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.943074942 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.943094969 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.945945024 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.945966959 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.946010113 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.946017027 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.946057081 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.949198961 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.949215889 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.949266911 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.949275017 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.949306965 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.949959040 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.949976921 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.950045109 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.950045109 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.950051069 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.950083971 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.970812082 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.970839977 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.970897913 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.970916033 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:40.970942020 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.970957994 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:40.984498978 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:41.033354998 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.033385992 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.033437967 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.033464909 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.033483028 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.033498049 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.033756971 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.033781052 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.033808947 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.033813000 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.033854008 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.036257982 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.036329985 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.036343098 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.036353111 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.036387920 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.038218021 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.038280964 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.038289070 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.038311005 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.038335085 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.038352013 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.038888931 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.038935900 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.038945913 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.038960934 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.038985968 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.039009094 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.055182934 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.055246115 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.055293083 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.055310965 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.055347919 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.055362940 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.055406094 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.055419922 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.055424929 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.055450916 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.055469990 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.063708067 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.121989965 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122021914 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122092009 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.122112036 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122142076 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.122162104 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.122339964 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122361898 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122416973 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.122421980 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122451067 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.122524977 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122569084 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122590065 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.122596025 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122613907 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:41.122626066 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.122654915 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:41.185900927 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:41.348403931 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:41.395277023 CEST	49671	443	192.168.2.10	204.79.197.203
May 29, 2024 12:14:41.668664932 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:41.668755054 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:41.668936014 CEST	49742	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:42.714721918 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:42.714751959 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:42.718390942 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:42.718435049 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:42.718475103 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:42.718903065 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:42.719048977 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:42.719089985 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:42.843705893 CEST	49743	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:42.843748093 CEST	443	49743	66.22.0.11	192.168.2.10
May 29, 2024 12:14:42.848428011 CEST	49742	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:42.848460913 CEST	443	49742	152.42.220.64	192.168.2.10
May 29, 2024 12:14:42.862863064 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:42.862898111 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.050371885 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.177428007 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.177454948 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.177463055 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.177520037 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.177525043 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.177581072 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.177592039 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.362879992 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.547630072 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.547667027 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.547820091 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.547823906 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.547820091 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.547894955 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.548269033 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.548290014 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.548310041 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.548332930 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.548401117 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.549046993 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.549067974 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.549101114 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.549103022 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.549101114 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.549127102 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.549163103 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.549181938 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.550666094 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.550687075 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.550707102 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.550730944 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.550780058 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.906944990 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.906989098 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.907062054 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.907069921 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:43.907246113 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:43.907295942 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:44.080802917 CEST	49744	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:44.080831051 CEST	443	49744	152.42.220.64	192.168.2.10
May 29, 2024 12:14:44.755290985 CEST	49751	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:44.755347013 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:44.755657911 CEST	49751	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:44.756325960 CEST	49752	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:44.756333113 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:44.756467104 CEST	49752	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:44.809232950 CEST	49752	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:44.809253931 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:44.809436083 CEST	49751	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:44.809444904 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:45.412712097 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:45.412791967 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:45.412847996 CEST	49718	443	192.168.2.10	142.250.185.132
May 29, 2024 12:14:45.513319016 CEST	49718	443	192.168.2.10	142.250.185.132
May 29, 2024 12:14:45.513372898 CEST	443	49718	142.250.185.132	192.168.2.10
May 29, 2024 12:14:45.868570089 CEST	49754	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:45.868618011 CEST	443	49754	54.228.71.178	192.168.2.10
May 29, 2024 12:14:45.868866920 CEST	49754	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:45.872201920 CEST	49754	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:45.872222900 CEST	443	49754	54.228.71.178	192.168.2.10
May 29, 2024 12:14:45.873465061 CEST	49755	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:45.873518944 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:45.873594999 CEST	49755	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:45.875713110 CEST	49755	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:45.875744104 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:45.900635004 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:45.901009083 CEST	49752	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:45.901032925 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:45.901385069 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:45.901989937 CEST	49752	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:45.902065992 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:45.903486967 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:45.911655903 CEST	49751	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:45.911672115 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:45.912043095 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:45.925537109 CEST	49751	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:45.925806999 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:46.093406916 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.093453884 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.093513966 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.095513105 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.095523119 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.095741987 CEST	49752	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:46.132544994 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:46.132653952 CEST	49751	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:46.388238907 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.392510891 CEST	49755	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.392540932 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.392952919 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.394843102 CEST	49755	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.394843102 CEST	49755	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.394872904 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.394922018 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.409651041 CEST	49672	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:46.410593987 CEST	49758	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:46.410650015 CEST	443	49758	173.222.162.55	192.168.2.10
May 29, 2024 12:14:46.411153078 CEST	49758	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:46.412828922 CEST	49758	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:46.412842035 CEST	443	49758	173.222.162.55	192.168.2.10
May 29, 2024 12:14:46.455571890 CEST	49755	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.599087954 CEST	443	49754	54.228.71.178	192.168.2.10
May 29, 2024 12:14:46.607310057 CEST	49754	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:46.607342005 CEST	443	49754	54.228.71.178	192.168.2.10
May 29, 2024 12:14:46.608455896 CEST	443	49754	54.228.71.178	192.168.2.10
May 29, 2024 12:14:46.697601080 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.699678898 CEST	49754	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:46.704454899 CEST	49754	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:46.704725981 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.704749107 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.704842091 CEST	49754	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:46.704988956 CEST	443	49754	54.228.71.178	192.168.2.10
May 29, 2024 12:14:46.705962896 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.706027031 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.707072020 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.707149982 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.707226992 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.707237005 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.732292891 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.732374907 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.732500076 CEST	49755	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.739356995 CEST	49755	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.739376068 CEST	443	49755	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.760328054 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.886336088 CEST	443	49754	54.228.71.178	192.168.2.10
May 29, 2024 12:14:46.886415958 CEST	49754	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:46.890688896 CEST	49754	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:46.890710115 CEST	443	49754	54.228.71.178	192.168.2.10
May 29, 2024 12:14:46.894022942 CEST	49672	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:46.977668047 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.977696896 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.977705002 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.977718115 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.977725029 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.977727890 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.977752924 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.977785110 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.977803946 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.977829933 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.978454113 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:46.978487015 CEST	443	49756	66.22.0.11	192.168.2.10
May 29, 2024 12:14:46.978533030 CEST	49756	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:47.016524076 CEST	443	49758	173.222.162.55	192.168.2.10
May 29, 2024 12:14:47.016594887 CEST	49758	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:47.517451048 CEST	49761	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:47.517498016 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:47.517566919 CEST	49761	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:47.517970085 CEST	49761	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:47.517987967 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:47.596292973 CEST	49672	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:48.039154053 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:48.039554119 CEST	49761	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:48.039580107 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:48.040133953 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:48.040640116 CEST	49761	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:48.040767908 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:48.041086912 CEST	49761	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:48.088493109 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:48.255439043 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:48.255636930 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:48.255688906 CEST	49761	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:48.257994890 CEST	49761	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:48.258023977 CEST	443	49761	66.22.0.11	192.168.2.10
May 29, 2024 12:14:48.799249887 CEST	49672	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:49.717674017 CEST	49762	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:49.717719078 CEST	443	49762	66.22.0.11	192.168.2.10
May 29, 2024 12:14:49.717783928 CEST	49762	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:49.718000889 CEST	49763	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:49.718044996 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:14:49.718096018 CEST	49763	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:49.722099066 CEST	49763	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:49.722111940 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:14:49.722270966 CEST	49762	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:49.722285986 CEST	443	49762	66.22.0.11	192.168.2.10
May 29, 2024 12:14:49.742327929 CEST	49752	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:49.788502932 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:49.958391905 CEST	49677	443	192.168.2.10	20.42.65.85
May 29, 2024 12:14:50.153923035 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:50.154007912 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:50.154128075 CEST	49752	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:50.154964924 CEST	49752	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:50.154984951 CEST	443	49752	152.42.220.64	192.168.2.10
May 29, 2024 12:14:50.235475063 CEST	443	49762	66.22.0.11	192.168.2.10
May 29, 2024 12:14:50.235759974 CEST	49762	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:50.235779047 CEST	443	49762	66.22.0.11	192.168.2.10
May 29, 2024 12:14:50.236298084 CEST	443	49762	66.22.0.11	192.168.2.10
May 29, 2024 12:14:50.236881018 CEST	49762	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:50.236952066 CEST	443	49762	66.22.0.11	192.168.2.10
May 29, 2024 12:14:50.348854065 CEST	49762	443	192.168.2.10	66.22.0.11
May 29, 2024 12:14:50.459403992 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:14:50.462066889 CEST	49763	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:50.462101936 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:14:50.462443113 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:14:50.462923050 CEST	49763	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:50.462975979 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:14:50.588854074 CEST	49763	443	192.168.2.10	54.228.71.178
May 29, 2024 12:14:51.299810886 CEST	49672	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:56.103635073 CEST	49672	443	192.168.2.10	173.222.162.55
May 29, 2024 12:14:59.288275003 CEST	49751	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:59.328504086 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:59.356281996 CEST	49764	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:59.356340885 CEST	443	49764	152.42.220.64	192.168.2.10
May 29, 2024 12:14:59.356405973 CEST	49764	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:59.356888056 CEST	49764	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:59.356904984 CEST	443	49764	152.42.220.64	192.168.2.10
May 29, 2024 12:14:59.700124025 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:59.700324059 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:14:59.700427055 CEST	49751	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:59.701085091 CEST	49751	443	192.168.2.10	152.42.220.64
May 29, 2024 12:14:59.701124907 CEST	443	49751	152.42.220.64	192.168.2.10
May 29, 2024 12:15:00.135407925 CEST	443	49762	66.22.0.11	192.168.2.10
May 29, 2024 12:15:00.135612011 CEST	443	49762	66.22.0.11	192.168.2.10
May 29, 2024 12:15:00.135725975 CEST	49762	443	192.168.2.10	66.22.0.11
May 29, 2024 12:15:00.226646900 CEST	49762	443	192.168.2.10	66.22.0.11
May 29, 2024 12:15:00.226682901 CEST	443	49762	66.22.0.11	192.168.2.10
May 29, 2024 12:15:00.480252981 CEST	443	49764	152.42.220.64	192.168.2.10
May 29, 2024 12:15:00.480597019 CEST	49764	443	192.168.2.10	152.42.220.64
May 29, 2024 12:15:00.480623007 CEST	443	49764	152.42.220.64	192.168.2.10
May 29, 2024 12:15:00.480966091 CEST	443	49764	152.42.220.64	192.168.2.10
May 29, 2024 12:15:00.481524944 CEST	49764	443	192.168.2.10	152.42.220.64
May 29, 2024 12:15:00.481579065 CEST	443	49764	152.42.220.64	192.168.2.10
May 29, 2024 12:15:00.550410986 CEST	49764	443	192.168.2.10	152.42.220.64
May 29, 2024 12:15:05.706125975 CEST	49672	443	192.168.2.10	173.222.162.55
May 29, 2024 12:15:06.167902946 CEST	443	49758	173.222.162.55	192.168.2.10
May 29, 2024 12:15:06.168070078 CEST	49758	443	192.168.2.10	173.222.162.55
May 29, 2024 12:15:13.901592016 CEST	58647	53	192.168.2.10	162.159.36.2
May 29, 2024 12:15:13.907026052 CEST	53	58647	162.159.36.2	192.168.2.10
May 29, 2024 12:15:13.907116890 CEST	58647	53	192.168.2.10	162.159.36.2
May 29, 2024 12:15:13.907223940 CEST	58647	53	192.168.2.10	162.159.36.2
May 29, 2024 12:15:13.912101984 CEST	53	58647	162.159.36.2	192.168.2.10
May 29, 2024 12:15:14.364922047 CEST	53	58647	162.159.36.2	192.168.2.10
May 29, 2024 12:15:14.365888119 CEST	58647	53	192.168.2.10	162.159.36.2
May 29, 2024 12:15:14.371160984 CEST	53	58647	162.159.36.2	192.168.2.10
May 29, 2024 12:15:14.371221066 CEST	58647	53	192.168.2.10	162.159.36.2
May 29, 2024 12:15:33.525907993 CEST	50184	53	192.168.2.10	1.1.1.1
May 29, 2024 12:15:33.530837059 CEST	53	50184	1.1.1.1	192.168.2.10
May 29, 2024 12:15:33.530916929 CEST	50184	53	192.168.2.10	1.1.1.1
May 29, 2024 12:15:33.530982018 CEST	50184	53	192.168.2.10	1.1.1.1
May 29, 2024 12:15:33.535830975 CEST	53	50184	1.1.1.1	192.168.2.10
May 29, 2024 12:15:34.005089045 CEST	53	50184	1.1.1.1	192.168.2.10
May 29, 2024 12:15:34.007998943 CEST	50184	53	192.168.2.10	1.1.1.1
May 29, 2024 12:15:34.014451981 CEST	53	50184	1.1.1.1	192.168.2.10
May 29, 2024 12:15:34.014565945 CEST	50184	53	192.168.2.10	1.1.1.1
May 29, 2024 12:15:35.137891054 CEST	50186	443	192.168.2.10	142.250.185.132
May 29, 2024 12:15:35.137938976 CEST	443	50186	142.250.185.132	192.168.2.10
May 29, 2024 12:15:35.138057947 CEST	50186	443	192.168.2.10	142.250.185.132
May 29, 2024 12:15:35.138365984 CEST	50186	443	192.168.2.10	142.250.185.132
May 29, 2024 12:15:35.138382912 CEST	443	50186	142.250.185.132	192.168.2.10
May 29, 2024 12:15:35.471698046 CEST	49763	443	192.168.2.10	54.228.71.178
May 29, 2024 12:15:35.471716881 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:15:35.830554008 CEST	443	50186	142.250.185.132	192.168.2.10
May 29, 2024 12:15:35.830885887 CEST	50186	443	192.168.2.10	142.250.185.132
May 29, 2024 12:15:35.830904961 CEST	443	50186	142.250.185.132	192.168.2.10
May 29, 2024 12:15:35.831206083 CEST	443	50186	142.250.185.132	192.168.2.10
May 29, 2024 12:15:35.832015991 CEST	50186	443	192.168.2.10	142.250.185.132
May 29, 2024 12:15:35.832067966 CEST	443	50186	142.250.185.132	192.168.2.10
May 29, 2024 12:15:35.877911091 CEST	50186	443	192.168.2.10	142.250.185.132
May 29, 2024 12:15:38.489953995 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:15:38.490047932 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:15:38.490098000 CEST	49763	443	192.168.2.10	54.228.71.178
May 29, 2024 12:15:39.161043882 CEST	49763	443	192.168.2.10	54.228.71.178
May 29, 2024 12:15:39.161079884 CEST	443	49763	54.228.71.178	192.168.2.10
May 29, 2024 12:15:45.487848043 CEST	49764	443	192.168.2.10	152.42.220.64
May 29, 2024 12:15:45.487876892 CEST	443	49764	152.42.220.64	192.168.2.10
May 29, 2024 12:15:45.740988016 CEST	443	50186	142.250.185.132	192.168.2.10
May 29, 2024 12:15:45.741065025 CEST	443	50186	142.250.185.132	192.168.2.10
May 29, 2024 12:15:45.741105080 CEST	50186	443	192.168.2.10	142.250.185.132
May 29, 2024 12:15:47.161504984 CEST	50186	443	192.168.2.10	142.250.185.132
May 29, 2024 12:15:47.161534071 CEST	443	50186	142.250.185.132	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 29, 2024 12:14:30.674505949 CEST	53	56223	1.1.1.1	192.168.2.10
May 29, 2024 12:14:30.918428898 CEST	53	50716	1.1.1.1	192.168.2.10
May 29, 2024 12:14:31.940462112 CEST	53	56601	1.1.1.1	192.168.2.10
May 29, 2024 12:14:32.443562984 CEST	53487	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:32.444051027 CEST	50817	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:32.596863031 CEST	53	53487	1.1.1.1	192.168.2.10
May 29, 2024 12:14:32.616539955 CEST	53	50817	1.1.1.1	192.168.2.10
May 29, 2024 12:14:34.821751118 CEST	64500	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:34.822130919 CEST	54502	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:34.828875065 CEST	53	64500	1.1.1.1	192.168.2.10
May 29, 2024 12:14:34.828977108 CEST	53	54502	1.1.1.1	192.168.2.10
May 29, 2024 12:14:35.588807106 CEST	62852	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:35.589211941 CEST	52997	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:35.590601921 CEST	58312	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:35.591063023 CEST	56630	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:35.595524073 CEST	60952	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:35.596903086 CEST	53	62852	1.1.1.1	192.168.2.10
May 29, 2024 12:14:35.597548962 CEST	53	52997	1.1.1.1	192.168.2.10
May 29, 2024 12:14:35.598485947 CEST	53	56630	1.1.1.1	192.168.2.10
May 29, 2024 12:14:35.599047899 CEST	60262	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:35.605278969 CEST	63083	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:35.605417013 CEST	52927	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:35.606568098 CEST	53	60952	1.1.1.1	192.168.2.10
May 29, 2024 12:14:35.612473965 CEST	53	58312	1.1.1.1	192.168.2.10
May 29, 2024 12:14:35.613084078 CEST	53	52927	1.1.1.1	192.168.2.10
May 29, 2024 12:14:35.613488913 CEST	53	63083	1.1.1.1	192.168.2.10
May 29, 2024 12:14:35.615015030 CEST	53	60262	1.1.1.1	192.168.2.10
May 29, 2024 12:14:38.084207058 CEST	53	61186	1.1.1.1	192.168.2.10
May 29, 2024 12:14:39.332906008 CEST	59632	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:39.333630085 CEST	59951	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:39.344006062 CEST	59211	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:39.344496012 CEST	58041	53	192.168.2.10	1.1.1.1
May 29, 2024 12:14:39.512109041 CEST	53	59951	1.1.1.1	192.168.2.10
May 29, 2024 12:14:39.512164116 CEST	53	59632	1.1.1.1	192.168.2.10
May 29, 2024 12:14:39.653845072 CEST	53	58041	1.1.1.1	192.168.2.10
May 29, 2024 12:14:39.913743973 CEST	53	59211	1.1.1.1	192.168.2.10
May 29, 2024 12:14:49.492090940 CEST	53	53950	1.1.1.1	192.168.2.10
May 29, 2024 12:15:08.796298981 CEST	53	52893	1.1.1.1	192.168.2.10
May 29, 2024 12:15:13.900913954 CEST	53	54760	162.159.36.2	192.168.2.10
May 29, 2024 12:15:14.918637037 CEST	53	53762	1.1.1.1	192.168.2.10
May 29, 2024 12:15:29.556839943 CEST	138	138	192.168.2.10	192.168.2.255
May 29, 2024 12:15:30.467139959 CEST	53	58136	1.1.1.1	192.168.2.10
May 29, 2024 12:15:31.653137922 CEST	53	55305	1.1.1.1	192.168.2.10
May 29, 2024 12:15:33.525475025 CEST	53	57196	1.1.1.1	192.168.2.10

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 29, 2024 12:14:35.615103006 CEST	192.168.2.10	1.1.1.1	c29a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 29, 2024 12:14:32.443562984 CEST	192.168.2.10	1.1.1.1	0x8a6f	Standard query (0)	mail.fnbo-in.selfip.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:32.444051027 CEST	192.168.2.10	1.1.1.1	0xbae9	Standard query (0)	mail.fnbo-in.selfip.com	65	IN (0x0001)	false
May 29, 2024 12:14:34.821751118 CEST	192.168.2.10	1.1.1.1	0x6efd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:34.822130919 CEST	192.168.2.10	1.1.1.1	0xb05	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 29, 2024 12:14:35.588807106 CEST	192.168.2.10	1.1.1.1	0x5b1f	Standard query (0)	cdn.appdynamics.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.589211941 CEST	192.168.2.10	1.1.1.1	0xfb79	Standard query (0)	cdn.appdynamics.com	65	IN (0x0001)	false
May 29, 2024 12:14:35.590601921 CEST	192.168.2.10	1.1.1.1	0x9e97	Standard query (0)	cdn.perfdrive.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.591063023 CEST	192.168.2.10	1.1.1.1	0x754e	Standard query (0)	cdn.perfdrive.com	65	IN (0x0001)	false
May 29, 2024 12:14:35.595524073 CEST	192.168.2.10	1.1.1.1	0xa87f	Standard query (0)	olb.sccu.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.599047899 CEST	192.168.2.10	1.1.1.1	0xd8a8	Standard query (0)	olb.sccu.com	65	IN (0x0001)	false
May 29, 2024 12:14:35.605278969 CEST	192.168.2.10	1.1.1.1	0x4801	Standard query (0)	mpsnare.iesnare.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.605417013 CEST	192.168.2.10	1.1.1.1	0x61e	Standard query (0)	mpsnare.iesnare.com	65	IN (0x0001)	false
May 29, 2024 12:14:39.332906008 CEST	192.168.2.10	1.1.1.1	0x4638	Standard query (0)	olb.sccu.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:39.333630085 CEST	192.168.2.10	1.1.1.1	0x994a	Standard query (0)	olb.sccu.com	65	IN (0x0001)	false
May 29, 2024 12:14:39.344006062 CEST	192.168.2.10	1.1.1.1	0x5db7	Standard query (0)	mail.fnbo-in.selfip.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:39.344496012 CEST	192.168.2.10	1.1.1.1	0xa7db	Standard query (0)	mail.fnbo-in.selfip.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 29, 2024 12:14:32.596863031 CEST	1.1.1.1	192.168.2.10	0x8a6f	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:32.596863031 CEST	1.1.1.1	192.168.2.10	0x8a6f	No error (0)	fnbo-in.selfip.com		152.42.220.64	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:32.616539955 CEST	1.1.1.1	192.168.2.10	0xbae9	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:34.828875065 CEST	1.1.1.1	192.168.2.10	0x6efd	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:34.828977108 CEST	1.1.1.1	192.168.2.10	0xb05	No error (0)	www.google.com			65	IN (0x0001)	false
May 29, 2024 12:14:35.596903086 CEST	1.1.1.1	192.168.2.10	0x5b1f	No error (0)	cdn.appdynamics.com		18.165.201.79	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.596903086 CEST	1.1.1.1	192.168.2.10	0x5b1f	No error (0)	cdn.appdynamics.com		18.165.201.13	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.596903086 CEST	1.1.1.1	192.168.2.10	0x5b1f	No error (0)	cdn.appdynamics.com		18.165.201.17	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.596903086 CEST	1.1.1.1	192.168.2.10	0x5b1f	No error (0)	cdn.appdynamics.com		18.165.201.127	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.606568098 CEST	1.1.1.1	192.168.2.10	0xa87f	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:35.606568098 CEST	1.1.1.1	192.168.2.10	0xa87f	No error (0)	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		66.22.0.11	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.612473965 CEST	1.1.1.1	192.168.2.10	0x9e97	No error (0)	cdn.perfdrive.com		130.211.29.114	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.613084078 CEST	1.1.1.1	192.168.2.10	0x61e	No error (0)	mpsnare.iesnare.com	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:35.613488913 CEST	1.1.1.1	192.168.2.10	0x4801	No error (0)	mpsnare.iesnare.com	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:35.613488913 CEST	1.1.1.1	192.168.2.10	0x4801	No error (0)	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		54.228.71.178	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.613488913 CEST	1.1.1.1	192.168.2.10	0x4801	No error (0)	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		54.195.39.4	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:35.615015030 CEST	1.1.1.1	192.168.2.10	0xd8a8	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:39.512109041 CEST	1.1.1.1	192.168.2.10	0x994a	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:39.512164116 CEST	1.1.1.1	192.168.2.10	0x4638	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:39.512164116 CEST	1.1.1.1	192.168.2.10	0x4638	No error (0)	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		66.22.0.11	A (IP address)	IN (0x0001)	false
May 29, 2024 12:14:39.653845072 CEST	1.1.1.1	192.168.2.10	0xa7db	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:39.913743973 CEST	1.1.1.1	192.168.2.10	0x5db7	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:14:39.913743973 CEST	1.1.1.1	192.168.2.10	0x5db7	No error (0)	fnbo-in.selfip.com		152.42.220.64	A (IP address)	IN (0x0001)	false
May 29, 2024 12:15:00.834223032 CEST	1.1.1.1	192.168.2.10	0x1bf5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 29, 2024 12:15:00.834223032 CEST	1.1.1.1	192.168.2.10	0x1bf5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 29, 2024 12:15:23.871504068 CEST	1.1.1.1	192.168.2.10	0xf874	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 29, 2024 12:15:23.871504068 CEST	1.1.1.1	192.168.2.10	0xf874	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 29, 2024 12:15:46.714842081 CEST	1.1.1.1	192.168.2.10	0x8a73	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 29, 2024 12:15:46.714842081 CEST	1.1.1.1	192.168.2.10	0x8a73	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ipinfo.io

mail.fnbo-in.selfip.com

https:

cdn.perfdrive.com

olb.sccu.com

cdn.appdynamics.com

mpsnare.iesnare.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.10	49708	34.117.186.192	443

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:20 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-05-29 10:14:20 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Wed, 29 May 2024 10:14:20 GMT content-type: application/json; charset=utf-8 Content-Length: 321 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 1 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-29 10:14:20 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.175", "hostname": "static-cpe-8-46-123-175.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49714	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:33 UTC	677	OUT	GET /x/otp2.html HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:34 UTC	206	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:14:34 GMT Server: Apache Last-Modified: Sat, 13 Jan 2024 11:48:36 GMT Accept-Ranges: bytes Content-Length: 9973 Connection: close Content-Type: text/html
2024-05-29 10:14:34 UTC	7986	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 74 2d 63 68 72 6f 6d 65 20 74 2d 63 68 72 6f 6d 65 31 30 34 22 20 73 74 79 6c 65 3d 22 2d 2d 76 68 3a 35 37 30 70 78 3b 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 4d 5f 68 65 61 64 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 70 70 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 61 64 72 75 6d 2d 65 78 74 2e 65 62 66 31 36 32 30 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-us" xml:lang="en-us" class="t-chrome t-chrome104" style="--vh:570px;"><head id="M_head"> <script type="text/javascript" async="" src="https://cdn.appdynamics.com/adrum-ext.ebf1620
2024-05-29 10:14:34 UTC	1987	IN	Data Raw: 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6d 61 69 6e 2d 62 6f 74 74 6f 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 49 44 53 2d 4d 43 4d 42 61 6e 6e 65 72 20 49 44 53 2d 4d 43 4d 42 61 6e 6e 65 72 2d 62 6f 74 74 6f 6d 20 62 61 6e 6e 65 72 2d 62 6f 74 74 6f 6d 22 20 64 61 74 61 2d 63 6f 6e 74 65 6e 74 6c 6f 63 61 74 69 6f 6e 3d 22 42 6f 74 74 6f 6d 20 42 Data Ascii: iv> <div id="main-bottom"> <div class="IDS-MCMBanner IDS-MCMBanner-bottom banner-bottom" data-contentlocation="Bottom B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49715	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:35 UTC	574	OUT	GET /x/css/opensans.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/otp2.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:35 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:14:35 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 2431 Connection: close Content-Type: text/css
2024-05-29 10:14:35 UTC	2431	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 20 53 61 6e 73 27 29 2c 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 53 61 6e 73 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6f 70 65 6e 73 61 6e 73 2f 76 31 33 2f 4b 38 38 70 52 33 67 6f 41 57 54 37 42 54 74 33 32 5a 30 31 6d 78 4a 74 6e 4b 49 54 70 70 4f 49 5f 49 76 63 58 58 44 4e 72 73 63 2e 77 6f 66 66 32 Data Ascii: /* cyrillic-ext */@font-face { font-family: 'Open Sans'; font-style: normal; font-weight: 400; src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/K88pR3goAWT7BTt32Z01mxJtnKITppOI_IvcXXDNrsc.woff2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49727	130.211.29.114	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:36 UTC	544	OUT	GET /aperture/aperture.js HTTP/1.1 Host: cdn.perfdrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:36 UTC	424	IN	HTTP/1.1 200 OK Server: nginx/1.10.1 Content-Length: 26692 Access-Control-Allow-Origin: * Accept-Ranges: bytes Via: 1.1 google Date: Wed, 29 May 2024 10:02:57 GMT Cache-Control: max-age=3600,public Last-Modified: Mon, 13 May 2024 04:56:42 GMT ETag: "66419d8a-6844" Content-Type: application/javascript Vary: Accept-Encoding Age: 699 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-29 10:14:36 UTC	966	IN	Data Raw: 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 44 28 62 2c 63 29 7b 76 61 72 20 66 3d 6e 75 6c 6c 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 21 30 3d 3d 3d 63 7c 7c 22 74 72 75 65 22 3d 3d 3d 63 29 7b 4b 3d 67 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 76 61 72 20 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 22 2b 62 2b 22 3d 5c 5c 73 2a 28 2e 2a 3f 29 5c 5c 73 2a 24 22 29 7d 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 30 3d 3d 63 7c 7c 22 66 61 6c 73 65 22 3d 3d 63 7c 7c 30 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 63 29 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 22 2b 62 2b 68 2b 22 3d 5c 5c 73 Data Ascii: try{(function(a,g){function D(b,c){var f=null;if("undefined"!==typeof c\|\|!0===c\|\|"true"===c){K=g.cookie.split(";");var e=new RegExp("^\\s"+b+"=\\s(.?)\\s$")}else if("undefined"===typeof c\|\|0==c\|\|"false"==c\|\|0==c\|\|null==c)e=new RegExp("^\\s*"+b+h+"=\\s
2024-05-29 10:14:36 UTC	1390	IN	Data Raw: 2b 32 7d 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 31 3b 65 6c 73 65 20 72 65 74 75 72 6e 21 31 7d 76 61 72 20 42 3d 7b 22 38 34 61 61 22 3a 22 73 65 6e 64 22 2c 74 65 73 74 61 65 66 64 3a 22 73 65 6e 64 22 2c 0a 20 20 20 20 20 20 20 20 22 39 35 35 66 22 3a 22 73 65 6e 64 22 2c 62 66 62 65 3a 22 73 65 6e 64 22 2c 39 39 31 36 3a 22 73 65 6e 64 22 2c 63 38 63 32 3a 22 73 65 6e 64 22 2c 22 39 30 64 64 22 3a 22 73 65 6e 64 22 2c 61 32 63 38 3a 22 73 65 6e 64 22 2c 38 30 38 33 3a 22 73 65 6e 64 22 2c 22 38 65 62 63 22 3a 22 73 65 6e 64 22 2c 62 37 61 61 3a 22 73 65 6e 64 22 2c 22 38 64 33 39 22 3a 22 73 65 6e 64 22 2c 62 62 62 38 3a 22 73 65 6e 64 22 2c 61 35 64 66 3a 22 73 65 6e 64 22 2c 22 38 61 61 65 22 3a 22 73 65 6e 64 22 2c 62 30 63 61 3a 22 73 65 6e 64 22 Data Ascii: +2}}else return!1;else return!1}var B={"84aa":"send",testaefd:"send", "955f":"send",bfbe:"send",9916:"send",c8c2:"send","90dd":"send",a2c8:"send",8083:"send","8ebc":"send",b7aa:"send","8d39":"send",bbb8:"send",a5df:"send","8aae":"send",b0ca:"send"
2024-05-29 10:14:36 UTC	1390	IN	Data Raw: 79 54 65 73 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 29 7b 76 61 72 20 65 3d 30 2c 64 3d 30 2c 6c 3d 30 2c 6b 3d 30 2c 71 3d 30 2c 70 3d 30 2c 6d 3d 30 2c 72 3d 30 2c 76 3d 30 2c 48 3d 30 2c 49 3d 30 2c 4d 3d 2d 31 2c 4e 3d 30 2c 4f 3d 30 2c 50 3d 30 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 73 73 50 65 72 66 6f 72 6d 61 6e 63 65 4d 65 74 72 69 63 53 65 6e 74 26 26 30 3d 3d 77 69 6e 64 6f 77 2e 73 73 50 65 72 66 6f 72 6d 61 6e 63 65 4d 65 74 72 69 63 53 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 73 73 50 65 72 66 6f 72 6d 61 6e 63 65 4d 65 74 72 69 63 53 65 6e 74 3d 21 30 3b 74 72 79 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 Data Ascii: yTester=function(b,c,f){var e=0,d=0,l=0,k=0,q=0,p=0,m=0,r=0,v=0,H=0,I=0,M=-1,N=0,O=0,P=0;if("undefined"!==typeof window.ssPerformanceMetricSent&&0==window.ssPerformanceMetricSent){window.ssPerformanceMetricSent=!0;try{"undefined"!==typeof window.ssTimeLog
2024-05-29 10:14:36 UTC	1390	IN	Data Raw: 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 2b 22 3d 5c 5c 73 2a 28 2e 2a 3f 29 5c 5c 73 2a 24 22 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 56 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 56 5b 63 5d 2e 6d 61 74 63 68 28 5a 29 2c 6e 75 6c 6c 21 3d 3d 62 29 7b 4d 3d 62 5b 31 5d 2e 73 75 62 73 74 72 28 34 2c 31 29 3b 62 72 65 61 6b 7d 4e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 66 3f 66 3a 22 75 6e 64 22 3b 4f 3d 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 73 2e 69 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 3b 50 3d 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 73 2e 73 73 41 6e 61 6c 79 74 69 63 73 46 6c 61 67 7d 63 61 74 63 68 28 51 29 7b 50 3d 4f 3d 4e 3d 4d 3d 49 3d 48 3d 76 3d 72 3d 6d Data Ascii: .SSJSConnectorObj.domain_info+"=\\s(.?)\\s*$");for(c=0;c<V.length;c++)if(b=V[c].match(Z),null!==b){M=b[1].substr(4,1);break}N="undefined"!==typeof f?f:"und";O=window.ssTimeLogs.initialCookie;P=window.ssTimeLogs.ssAnalyticsFlag}catch(Q){P=O=N=M=I=H=v=r=m
2024-05-29 10:14:36 UTC	1390	IN	Data Raw: 66 20 65 2e 63 61 6e 50 6c 61 79 54 79 70 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 65 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 6d 70 65 67 22 29 26 26 0a 20 20 20 20 28 64 3d 65 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 6c 5b 30 5d 29 29 3b 76 61 72 20 6b 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 32 3c 64 2e 6c 65 6e 67 74 68 3f 21 30 3a 21 31 7d 63 61 74 63 68 28 71 29 7b 6b 3d 21 31 7d 65 3d 7b 69 65 3a 22 54 72 69 64 65 6e 74 22 2c 65 64 67 65 3a 22 45 64 67 65 48 54 4d 4c 22 2c 77 65 62 6b 69 74 3a 22 57 65 62 6b 69 74 22 2c 6d 6f 7a 3a 22 47 65 63 6b 6f 22 2c 6b 68 74 6d 6c 3a 22 4b 68 74 6d 6c 22 7d 3b 64 3d 7b 65 64 67 65 3a 22 45 64 67 65 22 2c 69 65 3a 22 49 45 22 2c 6b 68 74 6d 6c 3a Data Ascii: f e.canPlayType&&"string"===typeof e.canPlayType("audio/mpeg")&& (d=e.canPlayType(l[0]));var k="string"===typeof d&&2<d.length?!0:!1}catch(q){k=!1}e={ie:"Trident",edge:"EdgeHTML",webkit:"Webkit",moz:"Gecko",khtml:"Khtml"};d={edge:"Edge",ie:"IE",khtml:
2024-05-29 10:14:36 UTC	1390	IN	Data Raw: 5b 31 5d 3a 22 6e 75 6c 6c 22 3a 22 6e 75 6c 6c 22 29 3a 22 74 72 69 64 65 6e 74 22 3d 3d 3d 66 3f 28 62 3d 7b 6c 61 79 6f 75 74 65 6e 67 69 6e 65 3a 65 2e 69 65 2c 62 72 6f 77 73 65 72 3a 64 2e 69 65 7d 2c 62 2e 76 65 72 73 69 6f 6e 3d 22 6d 73 49 6d 65 41 6c 69 67 6e 22 69 6e 20 42 72 6f 77 73 65 72 53 74 79 6c 65 3f 64 2e 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 2e 49 45 5b 34 5d 3a 22 6d 73 55 73 65 72 53 65 6c 65 63 74 22 69 6e 20 42 72 6f 77 73 65 72 53 74 79 6c 65 3f 64 2e 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 2e 49 45 5b 33 5d 3a 22 66 69 6c 6c 22 69 6e 20 42 72 6f 77 73 65 72 53 74 79 6c 65 3f 64 2e 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 2e 49 45 5b 32 5d 3a 0a 20 20 20 20 20 20 20 20 22 77 69 64 6f 77 73 22 69 6e 20 42 72 6f 77 Data Ascii: [1]:"null":"null"):"trident"===f?(b={layoutengine:e.ie,browser:d.ie},b.version="msImeAlign"in BrowserStyle?d.browser_version.IE[4]:"msUserSelect"in BrowserStyle?d.browser_version.IE[3]:"fill"in BrowserStyle?d.browser_version.IE[2]: "widows"in Brow
2024-05-29 10:14:36 UTC	1390	IN	Data Raw: 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 26 26 22 61 75 74 6f 22 3d 3d 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 3f 28 68 3d 32 2c 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 3d 32 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 26 26 28 68 3d 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 3f 70 61 72 73 65 49 6e 74 28 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 29 3a 32 29 3b 65 6c 73 65 22 75 6e 64 65 66 69 6e 65 64 Data Ascii: a.SSJSConnectorObj.domain_info&&"auto"==a.SSJSConnectorObj.domain_info?(h=2,a.SSJSConnectorObj.domain_info=2):"undefined"!==typeof a.SSJSConnectorObj.domain_info&&(h=a.SSJSConnectorObj.domain_info?parseInt(a.SSJSConnectorObj.domain_info):2);else"undefined
2024-05-29 10:14:36 UTC	1390	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 73 2e 69 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 3d 0a 20 20 20 20 20 20 20 20 75 5b 31 5d 2c 77 69 6e 64 6f 77 2e 73 73 4a 53 41 63 74 69 6f 6e 54 61 6b 65 72 28 75 5b 31 5d 5b 34 5d 29 29 3b 76 61 72 20 77 3d 21 31 2c 53 3d 5b 22 5f 5f 75 7a 6d 61 6a 22 2c 22 5f 5f 75 7a 6d 62 6a 22 2c 22 5f 5f 75 7a 6d 63 6a 22 2c 22 5f 5f 75 7a 6d 64 6a 22 5d 2c 7a 3d 21 31 2c 43 3d 6e 75 6c 6c 3b 7a 3d 21 30 3b 79 2b 3d 22 3f 22 3b 75 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 7b 76 61 72 20 63 3d 6e 65 77 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 3b 63 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 62 29 7d 72 65 Data Ascii: (window.ssTimeLogs.initialCookie= u[1],window.ssJSActionTaker(u[1][4]));var w=!1,S=["__uzmaj","__uzmbj","__uzmcj","__uzmdj"],z=!1,C=null;z=!0;y+="?";u=function(b){if("undefined"!==typeof XDomainRequest){var c=new XDomainRequest;c.open("POST",b)}re
2024-05-29 10:14:36 UTC	1390	IN	Data Raw: 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 36 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 37 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 0a 20 20 20 20 20 20 20 20 74 79 70 65 6f 66 20 61 2e 73 63 72 65 65 6e 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 73 63 72 65 65 6e 2e 63 6f Data Ascii: gator.webdriver?a.navigator.webdriver:"":"")+'","j6":"'+("undefined"!==typeof a.navigator?"undefined"!==typeof a.navigator.maxTouchPoints?a.navigator.maxTouchPoints:"":"")+'","j7":"'+("undefined"!== typeof a.screen?"undefined"!==typeof a.screen.co
2024-05-29 10:14:36 UTC	1390	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 2e 62 75 69 6c 64 49 44 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 62 75 69 6c 64 49 44 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 32 30 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 4d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 4d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 32 31 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 3f 22 74 22 3a 22 66 22 29 2b Data Ascii: ndefined"!==typeof a.navigator.buildID?a.navigator.buildID:"":"")+'","j20":"'+("undefined"!==typeof a.navigator?"undefined"!==typeof a.navigator.msMaxTouchPoints?a.navigator.msMaxTouchPoints:"":"")+'","j21":"'+("undefined"!==typeof a.callPhantom?"t":"f")+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49724	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:36 UTC	758	OUT	GET /OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj-QO5R4_ig_UM_6BTEvsUm0pVZPSI45Qh8HhMXpcfZ0-H_jz5gjdjFcqhl8Q2uekFcLFceEEhLFJKexQwJQYE-YZPPmEfmF2tz8ibp1V0Knp5fHHCZZeU1&t=637356698800000000 HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:36 UTC	1527	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 811 Connection: close Set-Cookie: __uzma=1218b7ea-4686-49eb-9e07-5871d3024ad0; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977676; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=1887; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=963931039457; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977676; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60008694a01d-4c56-468d-9c0a-5f4d7e7776ac17169776762250-61741e0bf450df0810; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90007a9e47d3-6a9d-40a5-b1f3-7911d7ac25551-17169776762250-63f71288c2478ca210; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Expires: Thu, 29 May 2025 05:16:04 GMT Last-Modified: Mon, 14 Sep 2020 12:44:40 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:36 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4dDIpJGfdg9kJWpYXJY5NQgzMysanZp9whJnXW-aYX6OEiuJEvmybwu-RYFsGs6JrLBX8; path=/; SameSite=None; Secure
2024-05-29 10:14:36 UTC	811	IN	Data Raw: ef bb bf 2e 52 61 64 41 6a 61 78 20 2e 72 61 44 69 76 2c 2e 52 61 64 41 6a 61 78 20 2e 72 61 43 6f 6c 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 52 61 64 41 6a 61 78 20 2e 72 61 44 69 76 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 52 61 64 41 6a 61 78 20 2e 72 61 43 6f 6c 6f 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 Data Ascii: .RadAjax .raDiv,.RadAjax .raColor{width:100%;height:100%;margin:0;padding:0}.RadAjax .raDiv{position:relative;z-index:2;background-color:transparent;background-position:center center;background-repeat:no-repeat}.RadAjax .raColor{position:absolute;top:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49725	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:36 UTC	596	OUT	GET /OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:37 UTC	2077	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1023385 Connection: close Set-Cookie: __uzma=e659f4e4-42ba-438a-a26d-e800701fac16; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977676; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=5597; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=377391031298; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977676; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000a750c76f-6ba4-4e0c-86b2-0016bc52274d17169776762260-bc2bc05cf92752a710; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000e4dab028-2b44-430b-8019-91c05523b8ab1-17169776762260-01e61ff8a9bf538310; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:36 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public, no-cache="Set-Cookie" Expires: Thu, 29 May 2025 10:14:36 GMT Last-Modified: Wed, 29 May 2024 10:14:36 GMT Set-Cookie: ASP.NET_SessionId=ejrm240gild3nevhh4o2ojcl; path=/; HttpOnly; SameSite=Lax Set-Cookie: PortalLanguage_2173=en-US; expires=Tue, 29-May-2074 10:14:36 GMT; path=/; HttpOnly Set-Cookie: ADRUM_BTa=R:32\|g:b5204b2a-65b4-4f02-8da2-f695d3b1b4ab\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:15:06 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:15:06 GMT; path=/ Set-Cookie: ADRUM_BT1=R:32\|i:1168032\|e:17; expires=Wed, 29-May-2024 10:15:06 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:36 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ; path=/; SameSite=None; Secure
2024-05-29 10:14:37 UTC	14307	IN	Data Raw: ef bb bf 2e 52 64 63 4d 6f 64 75 6c 65 20 2e 6d 61 69 6e 6d 6f 64 75 6c 65 20 62 75 74 74 6f 6e 2e 72 64 63 2d 63 61 6d 65 72 61 2c 2e 61 63 74 69 6f 6e 2d 74 65 78 74 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 79 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 63 6f 6e 2d 72 69 67 68 74 2d 61 72 72 6f 77 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 6c 65 66 74 2d 61 72 72 6f 77 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 72 69 67 68 74 2d 63 68 Data Ascii: .RdcModule .mainmodule button.rdc-camera,.action-textbox-container>button{background-position-x:center !important;background-position-y:center !important}.icon-right-arrow>span,.icon-left-arrow>span,.icon-zoom-out>span,.icon-zoom-in>span,.icon-right-ch
2024-05-29 10:14:37 UTC	16384	IN	Data Raw: 2d 73 74 61 72 74 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 65 6e 64 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 62 61 73 65 6c 69 6e 65 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 62 61 73 65 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 73 74 72 65 74 63 68 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 72 65 74 63 68 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 Data Ascii: -start{align-self:flex-start !important}.align-self-lg-end{align-self:flex-end !important}.align-self-lg-center{align-self:center !important}.align-self-lg-baseline{align-self:baseline !important}.align-self-lg-stretch{align-self:stretch !important}}@medi
2024-05-29 10:14:37 UTC	16384	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 78 6c 2d 34 2c 2e 6d 79 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 78 6c 2d 34 2c 2e 6d 78 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 78 6c 2d 34 2c 2e 6d 79 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 78 6c 2d 34 2c 2e 6d 78 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 78 6c 2d 35 7b 6d 61 72 67 69 6e 3a 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 78 6c 2d 35 2c 2e 6d 79 2d 78 6c 2d 35 7b 6d 61 72 Data Ascii: mportant}.mt-xl-4,.my-xl-4{margin-top:1.5rem !important}.mr-xl-4,.mx-xl-4{margin-right:1.5rem !important}.mb-xl-4,.my-xl-4{margin-bottom:1.5rem !important}.ml-xl-4,.mx-xl-4{margin-left:1.5rem !important}.m-xl-5{margin:3rem !important}.mt-xl-5,.my-xl-5{mar
2024-05-29 10:14:37 UTC	16384	IN	Data Raw: 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 Data Ascii: ut[type="submit"].causesValidation:focus,.btn-group-vertical>input[type="submit"].button:focus,.btn-group-vertical>input[type="button"].message_reply_button:focus,.btn-group-vertical>input[type="button"].message_send_button:focus,.btn-group-vertical>input
2024-05-29 10:14:37 UTC	16384	IN	Data Raw: 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 75 74 74 6f 6e 5f 63 6c 65 61 72 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e Data Ascii: button,.btn-group input[type="button"].message_send_button+input[type="submit"].message_reply_button,.btn-group input[type="button"].CommandButton+input[type="submit"].message_reply_button,.btn-group input[type="button"].button_clear+input[type="submit"].
2024-05-29 10:14:37 UTC	16384	IN	Data Raw: 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 75 74 74 Data Ascii: button+input[type="button"].causesValidation,.btn-group input[type="submit"].message_send_button+input[type="button"].causesValidation,.btn-group input[type="submit"].CommandButton+input[type="button"].causesValidation,.btn-group input[type="submit"].butt
2024-05-29 10:14:37 UTC	16384	IN	Data Raw: 65 6c 70 2d 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 75 74 74 6f 6e 5f 63 6c 65 61 72 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 2e 64 65 66 61 75 6c 74 2d 64 69 61 6c 6f 67 3e 2e 6d 6f 64 75 6c 65 2d 73 69 6e 67 6c 65 20 2e 6d 6f 64 61 6c 2d 68 65 6c 70 2d 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 75 74 74 6f 6e 5f 63 6c 65 61 72 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 2e 64 65 66 61 75 6c 74 2d 64 69 61 6c 6f 67 3e 2e 6d 6f 64 75 6c 65 2d 73 69 6e 67 6c 65 Data Ascii: elp-submit_button input[type="button"].button_clear+input[type="button"],.default-dialog>.module-single .modal-help-submit_button .btn-group-vertical input[type="button"].button_clear+input[type="button"],.btn-group-vertical .default-dialog>.module-single
2024-05-29 10:14:37 UTC	16384	IN	Data Raw: 73 56 61 6c 69 64 61 74 69 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 Data Ascii: sValidation+input[type="button"].message_send_button,.btn-group-vertical input[type="submit"].button+input[type="button"].message_send_button,.btn-group-vertical input[type="button"].message_reply_button+input[type="button"].message_send_button,.btn-group
2024-05-29 10:14:37 UTC	16384	IN	Data Raw: 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e Data Ascii: t[type="submit"].message_reply_button,.btn-group>.btn-group:not(:first-child)>input[type="submit"].message_send_button,.btn-group>.btn-group:not(:first-child)>input[type="submit"].CommandButton,.btn-group>.btn-group:not(:first-child)>input[type="submit"].
2024-05-29 10:14:37 UTC	16384	IN	Data Raw: 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 Data Ascii: on+input[type="submit"].message_send_button,.btn-group-vertical>input[type="button"].message_send_button+input[type="submit"].message_send_button,.btn-group-vertical>input[type="button"].CommandButton+input[type="submit"].message_send_button,.btn-group-ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49721	18.165.201.79	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:36 UTC	571	OUT	GET /adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js HTTP/1.1 Host: cdn.appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:36 UTC	777	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 52854 Connection: close Date: Wed, 29 May 2024 00:16:52 GMT Server: nginx/1.16.1 Last-Modified: Fri, 15 Apr 2022 21:40:35 GMT ETag: "6259e653-ce76" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: public, max-age=2678400, s-max-age=14400 timing-allow-origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 25bae94046433e736c44a6c37f27c7c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: HquOJNs-G1cSxpi8OIe1hmYQwisXqKnJYb8pyGzaVhbLSIRyuf3RKw== Age: 35863
2024-05-29 10:14:36 UTC	15607	IN	Data Raw: 3b 2f 2a 20 56 65 72 73 69 6f 6e 20 65 62 66 31 36 32 30 62 33 62 38 34 37 64 66 62 66 37 36 66 36 65 31 30 39 64 63 61 63 64 38 65 20 76 3a 32 32 2e 34 2e 30 2e 33 37 32 31 2c 20 63 3a 62 34 37 33 66 39 34 62 61 34 63 36 63 64 66 35 30 66 61 30 39 32 33 39 35 62 39 38 39 36 62 39 38 64 30 38 36 36 32 37 2c 20 62 3a 32 32 2e 34 2e 30 2e 33 37 32 31 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2c 20 41 70 70 44 79 6e 61 6d 69 63 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 0a 20 44 65 72 69 76 61 74 69 76 65 20 6f 66 20 47 6f 6f 67 6c 65 20 45 70 69 73 6f 64 65 73 3a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 20 47 6f 6f 67 6c 65 20 49 Data Ascii: ;/* Version ebf1620b3b847dfbf76f6e109dcacd8e v:22.4.0.3721, c:b473f94ba4c6cdf50fa092395b9896b98d086627, b:22.4.0.3721 /(function(){/ Copyright (c) 2013, AppDynamics, Inc. All rights reserved. Derivative of Google Episodes: Copyright 2010 Google I
2024-05-29 10:14:36 UTC	16384	IN	Data Raw: 6f 6e 66 2e 72 65 6c 65 61 73 65 49 64 2c 65 76 65 6e 74 73 3a 63 7d 3b 64 2e 63 68 61 6e 6e 65 6c 2e 63 61 2e 61 61 26 26 64 2e 63 68 61 6e 6e 65 6c 2e 63 61 2e 61 61 2e 69 64 26 26 28 63 2e 61 67 65 6e 74 49 64 3d 0a 64 2e 63 68 61 6e 6e 65 6c 2e 63 61 2e 61 61 2e 69 64 29 3b 62 26 26 28 63 2e 67 65 6f 3d 62 29 3b 72 65 74 75 72 6e 20 65 2e 4e 6d 28 63 29 7d 3b 65 2e 4e 6d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 64 2e 69 73 44 65 62 75 67 7c 7c 28 63 3d 65 2e 63 6b 28 63 29 29 3b 72 65 74 75 72 6e 20 63 7d 3b 65 2e 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 6c 3d 6e 65 77 20 64 2e 75 74 69 6c 73 2e 52 65 2c 6d 3d 6e 65 77 20 64 2e 75 74 69 6c 73 2e 52 65 3b 63 3d 64 2e 75 74 69 6c 73 2e 46 64 28 6e 75 6c 6c 2c 63 2c 65 2e 45 64 2c 66 75 6e Data Ascii: onf.releaseId,events:c};d.channel.ca.aa&&d.channel.ca.aa.id&&(c.agentId=d.channel.ca.aa.id);b&&(c.geo=b);return e.Nm(c)};e.Nm=function(c){d.isDebug\|\|(c=e.ck(c));return c};e.ck=function(c){var l=new d.utils.Re,m=new d.utils.Re;c=d.utils.Fd(null,c,e.Ed,fun
2024-05-29 10:14:36 UTC	16384	IN	Data Raw: 29 3b 71 3d 5b 5d 3b 76 61 72 20 66 3d 5b 5d 3b 65 2e 65 72 72 6f 72 73 26 26 28 66 3d 65 2e 65 72 72 6f 72 73 2c 65 2e 65 72 72 6f 72 73 3d 6e 75 6c 6c 29 3b 76 61 72 20 73 3d 62 28 22 22 2c 7b 22 22 3a 65 7d 29 3b 69 66 28 66 26 26 30 3c 66 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 28 6c 3f 38 37 30 3a 33 35 34 2c 68 2e 4c 69 2d 73 2e 6c 65 6e 67 74 68 2c 66 2e 6c 65 6e 67 74 68 29 2c 42 3d 5b 5d 2c 7a 3d 30 3b 7a 3c 66 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 7b 76 61 72 20 75 3d 66 5b 7a 5d 2c 79 3d 64 2e 75 74 69 6c 73 2e 64 61 2e 4b 66 28 64 2e 75 74 69 6c 73 2e 64 61 2e 44 61 28 75 5b 30 5d 29 29 3b 0a 42 2e 70 75 73 68 28 6b 28 5b 70 28 79 2c 63 2c 68 2e 57 69 2c 21 31 29 2c 64 2e 75 74 69 6c 73 2e 4c 64 28 75 5b 31 5d 29 3f 6d 28 75 Data Ascii: );q=[];var f=[];e.errors&&(f=e.errors,e.errors=null);var s=b("",{"":e});if(f&&0<f.length){for(var t=n(l?870:354,h.Li-s.length,f.length),B=[],z=0;z<f.length;z++){var u=f[z],y=d.utils.da.Kf(d.utils.da.Da(u[0]));B.push(k([p(y,c,h.Wi,!1),d.utils.Ld(u[1])?m(u
2024-05-29 10:14:36 UTC	4479	IN	Data Raw: 68 2e 66 68 3d 7b 7d 3b 64 3d 5b 7b 57 61 3a 68 2e 50 61 67 65 56 69 65 77 2c 52 61 3a 6e 65 77 20 68 2e 78 61 7d 2c 7b 57 61 3a 68 2e 41 6a 61 78 2c 52 61 3a 6e 65 77 20 68 2e 64 66 7d 2c 7b 57 61 3a 68 2e 41 64 72 75 6d 41 6a 61 78 2c 52 61 3a 6e 65 77 20 68 2e 63 69 7d 2c 7b 57 61 3a 68 2e 45 72 72 6f 72 2c 52 61 3a 6e 65 77 20 68 2e 6b 6a 7d 2c 7b 57 61 3a 68 2e 56 50 61 67 65 56 69 65 77 2c 52 61 3a 6e 65 77 20 68 2e 63 66 7d 2c 7b 57 61 3a 68 2e 41 6e 79 53 70 61 56 50 61 67 65 56 69 65 77 2c 52 61 3a 6e 65 77 20 68 2e 42 65 7d 2c 7b 57 61 3a 64 2e 6e 67 2e 4e 67 56 50 61 67 65 56 69 65 77 2c 52 61 3a 6e 65 77 20 68 2e 68 6a 7d 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 64 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 62 3d 0a 64 5b 61 5d Data Ascii: h.fh={};d=[{Wa:h.PageView,Ra:new h.xa},{Wa:h.Ajax,Ra:new h.df},{Wa:h.AdrumAjax,Ra:new h.ci},{Wa:h.Error,Ra:new h.kj},{Wa:h.VPageView,Ra:new h.cf},{Wa:h.AnySpaVPageView,Ra:new h.Be},{Wa:d.ng.NgVPageView,Ra:new h.hj}];for(var a=0;a<d.length;a++){var b=d[a]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49726	54.228.71.178	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:36 UTC	583	OUT	GET /5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:36 UTC	654	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 29 May 2024 10:14:36 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 505 Connection: close Last-Modified: Tue, 06 May 2014 00:01:40 GMT Expires: Thu, 29 May 2025 10:14:36 GMT Cache-Control: private p3p: CP="NON DSP COR CURa" Accept-CH: Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-WoW64, ua, ua-arch, ua-platform, ua-model, ua-mobile, ua-full-version, ua-platform-version Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-29 10:14:36 UTC	505	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 28 63 29 20 32 30 32 32 20 54 72 61 6e 73 55 6e 69 6f 6e 20 4c 4c 43 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 38 30 38 30 38 62 61 65 2d 64 34 63 33 2d 34 37 61 63 2d 39 39 32 39 2d 35 64 37 37 32 36 34 64 38 32 33 63 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 28 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2c 62 3d 61 2e 69 6f 5f 67 6c 6f 62 61 6c 5f 6f 62 6a 65 63 74 5f 6e 61 6d 65 7c 7c 22 49 47 4c 4f 4f 22 3b 61 3d 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 7b 7d 3b 61 3d 61 2e 69 6f 3d 61 2e 69 6f 7c 7c 7b 7d 3b 62 3d 61 2e 69 6f 5f 64 64 70 3b 69 66 28 61 2e 6c 6f 67 6f 4d 61 69 6e 29 72 65 74 75 72 6e 21 31 3b 61 2e 6c 6f 67 6f 4d 61 69 6e 3d 63 3b 61 2e Data Ascii: /* Copyright(c) 2022 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c*/(function(){(function c(){var a=window,b=a.io_global_object_name\|\|"IGLOO";a=a[b]=a[b]\|\|{};a=a.io=a.io\|\|{};b=a.io_ddp;if(a.logoMain)return!1;a.logoMain=c;a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49722	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:36 UTC	580	OUT	GET /x/css/material-icons.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/otp2.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:37 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:14:37 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 1105 Connection: close Content-Type: text/css
2024-05-29 10:14:37 UTC	1105	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 61 74 65 72 69 61 6c 20 49 63 6f 6e 73 27 3b 0d 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 2e 65 6f 74 29 3b 20 2f 2a 20 46 6f 72 20 49 45 36 2d 38 20 2a 2f 0d 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4d 61 74 65 72 69 61 6c 20 49 63 6f 6e 73 27 29 2c 0d 0a 20 20 20 20 20 20 20 6c 6f 63 61 6c 28 27 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 27 29 2c 0d 0a 20 20 20 20 20 20 20 75 72 6c 28 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 2e 74 Data Ascii: @font-face { font-family: 'Material Icons'; font-style: normal; font-weight: 400; src: url(MaterialIcons-Regular.eot); /* For IE6-8 */ src: local('Material Icons'), local('MaterialIcons-Regular'), url(MaterialIcons-Regular.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49720	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:36 UTC	573	OUT	GET /x/css/angular.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/otp2.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:37 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:14:37 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 5436 Connection: close Content-Type: text/css
2024-05-29 10:14:37 UTC	5436	IN	Data Raw: 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 74 61 62 6c 65 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 75 6c 20 7b 0d 0a 09 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 75 6c 6c 65 74 65 64 2d 6c 69 73 74 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 75 6c 6c 65 74 65 64 2d 6c 69 73 74 20 6c 69 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 Data Ascii: input[type="text"] {width: 100%;}table {border: 0;}ul {list-style-type: none;}.bulleted-list {padding-left: 0px;}.bulleted-list li {display: inline-block;width: 100%;overflow: visible;margin: 0;padding: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49723	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:36 UTC	583	OUT	GET /x/css/RadDockableObject.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/otp2.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:37 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:14:37 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 2105 Connection: close Content-Type: text/css
2024-05-29 10:14:37 UTC	2105	IN	Data Raw: 2f 2a 20 72 2e 61 2e 64 2e 64 6f 63 6b 20 64 65 66 61 75 6c 74 20 73 6b 69 6e 20 2a 2f 0d 0a 0d 0a 2e 52 61 64 44 6f 63 6b 69 6e 67 5a 6f 6e 65 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 52 61 64 44 6f 63 6b 61 62 6c 65 4f 62 6a 65 63 74 46 69 78 65 64 0d 0a 7b 0d 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 65 35 65 35 65 35 3b 0d 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 65 35 65 35 65 35 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 62 37 62 37 62 37 3b 0d 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 Data Ascii: /* r.a.d.dock default skin */.RadDockingZone{background: white;border: 0;padding: 0px;}.RadDockableObjectFixed{border-top: solid 1px #e5e5e5;border-left: solid 1px #e5e5e5;border-right: solid 1px #b7b7b7;border-bottom: s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49728	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-29 10:14:37 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=21302 Date: Wed, 29 May 2024 10:14:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49719	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:37 UTC	618	OUT	GET /x/img/BANGOR.png HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.fnbo-in.selfip.com/x/otp2.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:38 UTC	207	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:14:38 GMT Server: Apache Last-Modified: Sat, 13 Jan 2024 12:05:46 GMT Accept-Ranges: bytes Content-Length: 45863 Connection: close Content-Type: image/png
2024-05-29 10:14:38 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 00 83 08 02 00 00 00 e4 84 30 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 b2 c9 49 44 41 54 78 5e ed bd 05 80 25 c5 d5 36 7c 57 66 c7 6d 15 0d f1 84 c8 8b ac 8c df 3b 77 dc dd dd 65 05 d7 40 82 43 84 10 23 40 9c 84 10 81 18 31 42 12 42 d0 20 81 10 5c 16 59 61 7d 67 77 fc 7a ff cf 73 4e df 9e 3b b3 bb 64 87 b0 bc fb bd ff d4 9c e9 db 5d dd 5d 75 ea d4 a9 a7 ce a9 ae ae b6 19 47 34 04 42 48 36 5e c3 70 1b 86 cb 30 26 85 b0 03 42 24 c8 27 5b eb 14 68 c2 08 58 fb 7a 38 66 f8 40 21 f1 81 49 bf d7 e5 f3 7a 02 7e af 11 98 9e db 54 f0 fb fd 3e 9f 2f 80 20 b9 b8 02 3e 97 c7 ed 0b f8 a7 ae 0e 25 09 f8 c5 95 e6 51 48 a4 c6 5b Data Ascii: PNGIHDR0gAMAapHYsttfxIDATx^%6\|Wfm;we@C#@1BB \Ya}gwzsN;d]]uG4BH6^p0&B$'[hXz8f@!Iz~T>/ >%QH[
2024-05-29 10:14:38 UTC	8000	IN	Data Raw: 91 1d f3 c2 7f 28 01 14 40 41 17 43 31 08 fb 88 19 1f 0e 4e 4a 72 0f ff 6e e3 53 c7 94 a7 1f d3 96 17 dd 9c 29 b3 78 84 3a 33 d1 90 60 9e 84 b5 f1 c1 56 44 67 76 5c 4d fa 8d 7f bf 0b e9 70 50 83 ce 17 d5 6b 4a 93 b0 a7 18 e4 31 46 77 01 15 39 cf 18 bc bd 6a 8c ad 19 6c f8 40 4b 41 4c 53 26 87 ba d0 6e fb 73 12 36 94 c1 4f 59 58 93 12 df 95 37 bf 99 eb 3a 52 8f a1 cd 41 85 06 00 a1 fd 87 75 38 63 3a 73 3e d0 5b f6 2f 63 78 97 f0 3f 0c 77 53 73 0d ca 57 73 46 b6 5a 2e fe 04 31 48 36 8c 50 d2 43 33 04 cf c1 97 d4 6b 34 06 3b a8 97 e6 9b ae 04 6f 00 cd c8 9e dc b0 a6 8c a5 83 25 b6 96 74 8e be 75 f1 a5 5f b3 e1 59 96 29 7a 8e e6 f4 65 03 25 c7 f7 96 2c 6f cb 8b ac 4e 8d 6b ca 5c d2 57 64 2b 39 3d aa 70 d5 49 55 ce 93 8a d3 b7 1a 3e ed 27 c0 ea 14 78 07 99 47 Data Ascii: (@AC1NJrnS)x:3`VDgv\MpPkJ1Fw9jl@KALS&ns6OYX7:RAu8c:s>[/cx?wSsWsFZ.1H6PC3k4;o%tu_Y)ze%,oNk\Wd+9=pIU>'xG
2024-05-29 10:14:38 UTC	8000	IN	Data Raw: 7b 6b 7f f7 e2 13 68 c9 bb 03 7c 29 51 67 f0 a2 33 06 e7 1c 27 52 ee 95 82 bf b8 c0 ed e5 f3 38 10 87 32 82 ee bc 1c 73 0b b5 51 00 ba fc e7 df 59 56 94 7c 52 47 51 44 4d 2a ac ce 98 de 7c ce 1a 6b cd e0 64 ba 3e 0e a1 92 ff ff 48 0a a0 82 a1 ac b5 da d5 f3 9b 33 96 f7 14 45 16 ad 8a 72 7c ba ef 2b 57 bc e1 19 86 9d c8 99 e2 7e ea b0 35 5c cd 79 5b 16 63 12 ac a3 43 11 c2 c1 30 48 9a 2a 5a 0b 5a 6f 64 7d 06 31 68 20 87 6f a5 8b fe 29 73 d8 41 8d 86 62 10 fa 2b 34 12 38 53 cf 8f ef 82 64 91 02 6d 87 e9 be 58 f0 97 81 93 f4 e4 00 e2 23 ac c2 0e 7a f4 6f c7 17 a7 45 f3 f9 ce c1 08 96 51 47 06 3f 77 d1 96 3e af c3 ce af 23 f4 65 85 f5 c9 5a 39 a8 ec f7 00 83 50 14 9f 9f ab 18 f1 99 94 ff e3 ed 25 8b 2a 92 22 bb 72 60 1b f2 99 37 aa aa 33 93 da 26 1a 69 ca 0a Data Ascii: {kh\|)Qg3'R82sQYV\|RGQDM\|kd>H3Er\|+W~5\y[cC0HZZod}1h o)sAb+48SdmX#zoEQG?w>#eZ9P%*"r`73&i
2024-05-29 10:14:39 UTC	8000	IN	Data Raw: 07 56 99 29 aa 80 f9 a2 af 4a 68 72 7e b8 31 ff 6f 6f 3c 07 c9 8f 7b dd 5a c4 d0 77 74 55 11 cd 8c 45 9e 10 ef 88 df fc b8 eb 5f 9e 79 fc 84 72 79 c0 04 47 52 32 32 75 1d 5a 1e cc 1a c5 61 2d a3 bd a1 03 68 b7 c7 34 d8 ef 79 e5 5f b8 57 f5 1b 74 98 18 c4 95 cb d7 16 71 52 12 df 2c a5 ed 00 87 28 bc e0 f4 f3 7f 7c e3 c3 6f be c8 9a 42 e0 53 7f 88 09 24 2a 74 88 a0 08 eb 93 d5 97 b1 33 31 31 f1 9b 07 ef 3d a1 36 4b 5e 82 3d 8d 23 f4 ed 69 50 5a 3e 51 6a 49 d5 dc a7 94 c4 aa a9 1e 67 5c 7d fa df 36 3e 0d 9d 97 2f dc 7a 50 df e8 ac 76 19 ee e6 af 5e 4a 8b a3 8f af 4c a2 f7 0d 83 fc d1 bb 40 f8 d0 40 6b 5e 05 d2 01 1e c1 45 e8 ca 46 45 2f ab cb 6c fd f2 67 61 19 ec 1a 87 3c 0c cf 30 f4 45 78 3d 58 e0 7c 11 09 e3 44 0f 86 d7 f7 ed fc c2 3d 3f 07 0e 00 cb e6 d5 Data Ascii: V)Jhr~1oo<{ZwtUE_yryGR22uZa-h4y_WtqR,(\|oBS$*t311=6K^=#iPZ>QjIg\}6>/zPv^JL@@k^EFE/lga<0Ex=X\|D=?
2024-05-29 10:14:39 UTC	8000	IN	Data Raw: 5b 97 04 21 10 b0 25 23 bb 66 ea 6f 43 12 f0 8b 06 bf df f0 ff 6a d3 d3 31 55 a9 c7 f6 97 f2 59 6a 53 2a 9d 26 14 a1 8b f3 bf 95 01 93 25 d6 9a 70 d5 96 11 df 68 ef bc e9 ca 1d 1c 96 f2 7b 3d 90 22 f4 df f7 f0 a6 e7 4f 6e 29 8c ad 4f b7 35 25 c3 5f b3 75 a4 d0 1b e8 e6 9b 59 11 bd 79 e0 5f 2a 3d 93 8b 0a e9 fa ee 6d b9 4b 4a 52 fe be f3 d5 2d 81 71 88 65 5c 5e 23 77 05 64 0d 0d 8b 55 25 4b f3 95 42 4e a1 ec 6f 19 13 af 1a 93 6b 36 34 2d 6f c9 a1 1d d7 26 18 0a 6b 23 58 11 28 82 96 c2 d4 b7 f6 74 f8 9b 11 0d 19 a7 6c 68 d8 28 03 d2 90 9c b9 94 35 08 c9 ca 2f 52 d6 66 88 08 db 0c 96 f8 0f 3e 70 95 7c 2b 15 87 e0 1b 65 80 5f d7 f5 a5 cf 2e af cc 80 a7 a7 e2 53 c2 be 99 b7 ea 07 08 8d b0 2d 35 ea bc 0a 5b 4b 32 98 8b ab 49 3f be c2 fe dd 47 ef d1 65 25 51 a9 Data Ascii: [!%#foCj1UYjS&%ph{="On)O5%_uYy_=mKJR-qe\^#wdU%KBNok64-o&k#X(tlh(5/Rf>p\|+e_.S-5[K2I?Ge%Q
2024-05-29 10:14:39 UTC	5878	IN	Data Raw: 5c 30 b4 22 7e 68 4e 84 e0 de 3f 7a 10 00 02 49 00 06 e9 91 ee a0 76 60 13 e9 49 c4 40 ef 86 0c f7 0e 59 74 f8 eb 0f ff 3e aa 60 e5 e2 e0 5c 13 08 50 39 01 81 b7 50 b2 0a 62 11 22 95 73 10 6e d4 7b c3 5b f9 dc 06 9d 5c 6c 49 d2 29 3d 55 5f fd f3 2f d0 ef ee 32 5c 50 8f a1 91 61 be 55 0a b6 75 61 ac 77 e4 07 cc 7e 4c 3a 34 a8 54 44 69 f6 bb 27 00 ea 4f ec d9 f4 f1 e6 a2 d8 ea 34 3e 29 a3 7e c8 fc 2e 4e 8b 80 f3 92 8e fa 06 70 00 7d d0 18 ac 62 a3 e6 4c fd b0 f4 4c f4 1b f1 90 88 8a 03 72 99 79 a5 e8 13 08 d7 30 fe f0 30 08 52 db 68 b8 4e 1e a8 46 f7 18 db 91 43 53 1f 4c 02 01 65 21 5e e6 2b df 2c 04 93 e8 b5 98 2c 72 e9 4a 83 11 be f0 9c 52 18 11 e8 6f 17 54 27 bf af ab f8 f8 2a c7 37 ee fd f5 73 63 fc aa 37 5a 1a 9c 73 4a 5e a5 71 24 83 e6 80 ce d0 e7 a3 Data Ascii: \0"~hN?zIv`I@Yt>`\P9Pb"sn{[\lI)=U_/2\PaUuaw~L:4TDi'O4>)~.Np}bLLry00RhNFCSLe!^+,,rJRoT'*7sc7ZsJ^q$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49729	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-29 10:14:38 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=21382 Date: Wed, 29 May 2024 10:14:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-29 10:14:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49731	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:38 UTC	823	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:39 UTC	1355	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12107 Connection: close Set-Cookie: __uzma=7649ccb7-cdab-434e-aceb-6c1d4deb3e6a; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977678; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=6287; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=881191063137; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977678; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60007be468a0-3b10-4ab6-b95b-832a397d296e17169776788840-fe22e3d052cc575410; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90002037830f-ad0e-49f6-9164-7d0de15f16621-17169776788840-47ee2f611d9babfe10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:38 GMT
2024-05-29 10:14:39 UTC	12107	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 31 70 78 22 20 68 65 69 67 68 74 3d 22 37 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 31 20 37 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 36 34 20 28 39 33 35 33 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 64 (93537) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49730	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:38 UTC	807	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:39 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1612 Connection: close Set-Cookie: __uzma=891b19cd-7cce-49fa-a5e5-f3e641a1a466; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977678; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=6685; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=550001057885; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977678; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000b3205cd1-ac68-495f-85ec-7ad22c01f99f17169776788840-93f7be028711638110; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000e639c9ca-0e07-419f-83c1-cfe1d324a6821-17169776788840-debd2a565e55759d10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:38 GMT
2024-05-29 10:14:39 UTC	1612	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 09 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 38 20 28 38 34 36 36 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 09 3c 74 69 74 6c 65 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com --><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49733	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:38 UTC	801	OUT	GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:39 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 271563 Connection: close Last-Modified: Tue, 27 Apr 2021 13:46:46 GMT Accept-Ranges: bytes ETag: "0679bc36b3bd71:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:38 GMT
2024-05-29 10:14:39 UTC	16009	IN	Data Raw: ff d8 ff e1 13 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 07 80 00 00 01 01 00 03 00 00 00 01 04 38 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 30 32 3a 30 31 20 31 34 3a 35 30 3a 32 37 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: @ExifMM*8(1!2i$''Adobe Photoshop 22.1 (Macintosh)2021:02:01 14:50:27
2024-05-29 10:14:39 UTC	16384	IN	Data Raw: 16 04 a6 28 b8 da e3 c6 2c 83 74 cb ca c6 96 c0 c9 52 b9 8b 62 25 f2 b9 63 4b 6a a5 f1 17 73 94 4e 31 8d 30 d3 12 5c 65 a6 37 d4 38 d7 6c 4f 7c 34 d6 64 51 01 b3 7a 94 e9 89 03 8f 1b 6e 71 a4 da a2 ca 7b e2 aa 6b 81 8b 63 95 f8 e0 a6 42 5d e8 9c bc 4d 5e b8 a0 df 03 60 6c 63 a9 94 36 c7 0c 09 70 cb cd 9b 14 b7 95 4c bc ac 52 d1 db 28 1c 7d 31 a4 62 ae cb cc 06 62 31 43 ab 9b ae 56 62 71 4a d6 18 91 14 c5 c0 ae 31 c6 28 21 48 91 4c c9 b9 c6 b8 a0 c6 a9 a1 c2 c2 f7 44 95 a8 c4 1c 11 8a 09 3c 72 e9 cb 03 23 ba 16 b4 c6 93 5c 5d e2 3d 46 25 c0 8c 93 02 0a cc ac 71 19 5d 31 62 d6 5e 6c ba 62 96 b2 c1 c6 e5 e2 ad 96 cc 0d 32 b3 60 55 50 f5 ca 23 1a 3a e2 9d 71 65 cd 4f 1c 32 c8 a6 36 b4 c5 57 9a 53 7c 66 62 72 b0 2b 79 63 2b 2f 15 5c b8 a2 ed 89 ae 3c 60 64 17 Data Ascii: (,tRb%cKjsN10\e78lO\|4dQznq{kcB]M^`lc6pLR(}1bb1CVbqJ1(!HLD<r#\]=F%q]1b^lb2`UP#:qeO26WS\|fbr+yc+/\<`d
2024-05-29 10:14:39 UTC	16384	IN	Data Raw: 95 cc 13 2e 7d 1c a8 d4 68 0e 48 33 54 35 fa 46 69 05 56 a3 f6 4d 3e 83 f6 71 47 5f 83 dc 6e 3e 47 fe 69 6c 4e 26 0a dc 5f ec b0 e2 7e 9f f9 a7 31 88 a3 c2 79 49 b8 1b df b9 48 a8 0c 2a 68 0d 3f 1f f9 a7 0c bd 43 19 4b 93 f6 64 01 64 f9 fd 95 7c 2f 78 c8 56 46 fb 51 9f c0 fd ac 74 17 2d 0c 4d 13 8e 48 ea 78 8c 71 cc 63 91 bd af d5 7f cd 9c 7f 1c 0b 38 f1 80 46 fd 2b be 3f 8f 5a 95 ea a4 72 b2 c7 40 06 d8 15 e4 5e fb e2 8c 17 a7 5f a4 62 32 2a 81 d3 ae 60 e4 24 93 20 00 bd e9 c9 80 a0 01 df cd 4d a5 43 db 12 de 4a 95 04 d0 12 69 d8 0c 11 2c be a1 56 90 29 e2 29 4a 52 a3 fc ac 40 aa 84 01 43 7a b5 ea 3a 11 f2 cc 6c 82 c9 df 6f 93 74 79 72 dd a5 b5 9a 5e 3c 14 9e 4a 59 7d c0 fb 58 85 2a 36 26 9d f1 78 e7 96 dc 2f 06 fb 2d cc 53 b1 e9 ff 00 0d 82 62 bd 68 e6 Data Ascii: .}hH3T5FiVM>qG_n>GilN&_~1yIHh?CKdd\|/xVFQt-MHxqc8F+?Zr@^_b2`$ MCJi,V))JR@Cz:lotyr^<JY}X*6&x/-Sbh
2024-05-29 10:14:39 UTC	16384	IN	Data Raw: c6 29 0a 83 35 31 a0 e5 d7 03 26 c8 ca e3 9a b8 a0 c5 35 6a 24 1c d4 c5 a9 96 29 8d a7 85 40 8c d8 bb 01 8c a6 2b c2 a7 97 8f e3 95 c7 15 a5 a4 63 71 52 b8 c2 b8 ad 2d a6 60 31 d4 cd 4c 55 c3 1e 31 b4 a6 38 02 70 32 0d e3 d4 57 30 4c 78 14 c0 cc 05 ca a3 2f e5 94 31 e0 57 03 36 d4 63 a9 94 06 38 0a e0 4b 59 44 63 e9 9a 94 c5 56 ae d9 79 67 19 5c 52 bb 8d 72 f8 65 03 8e ae 05 5a 45 33 05 c7 93 95 4c 52 da 83 8e 39 43 2e b8 15 a2 73 63 1b 30 63 8a b6 c3 12 23 16 ad 71 8e 08 c0 a5 44 9c 61 38 e7 18 cc 58 36 32 f3 66 c5 2d e6 cd 5c d8 15 d9 86 6c d8 a5 bc d9 59 ab 8a b7 97 95 5c bc 09 76 5e 56 5e 2a de 6c d9 b0 25 d8 e1 8d cb c0 95 d9 78 d1 97 8a 5b cb ca cd 81 57 0c bc 6e 6a e0 4a ec bc 6e 5e 29 5d 9b 2a b9 b0 2a ec bc 6e 5e 29 5d 97 8d cb c5 5b cb c6 d7 2c Data Ascii: )51&5j$)@+cqR-`1LU18p2W0Lx/1W6c8KYDcVyg\RreZE3LR9C.sc0c#qDa8X62f-\lY\v^V^l%x[WnjJn^)]*n^)][,
2024-05-29 10:14:39 UTC	16384	IN	Data Raw: d9 b3 65 e0 57 0c ba 66 03 2f 14 bb 36 5e 6c 55 d9 79 b3 62 ad e5 e5 65 e2 96 f2 c6 56 5e 2a de 5e 56 5e 14 b6 33 65 65 e2 ad e6 cd 9b 15 6f 36 56 5e 04 b7 9b 2b 36 2a de 6c ac bc 55 bc d9 59 b0 a1 bc d9 b3 62 ad d7 35 72 b3 62 ad e6 ca ae 5e 28 6f 36 56 5e 15 76 5e 56 6c 50 de 6c ac ba e1 57 66 ca ae 5d 71 57 66 cd 5c d5 c5 5b cd 95 97 8a bb 2f 2b 2c 61 43 b2 f2 b2 f0 a1 bc bc ac d8 55 bc d9 59 75 c2 87 65 d7 2a b9 b1 56 eb 9b 2b 36 2a de 6c ac ba e1 57 66 ae 6c d8 a1 d9 b3 66 c5 2e cd 9b 2b 02 bb 36 6c d8 15 d8 d7 de 83 c4 e5 e5 77 18 0a ad 93 7d bc 7f ae 26 3a 7d 27 f0 18 a9 fb 43 18 ab f0 b7 d3 95 c8 59 66 39 35 4f b3 fe a1 c4 e9 41 5f 0e 07 17 a6 e3 e4 46 27 4a a9 f7 41 f8 64 24 3f 1f e6 a4 15 09 47 15 07 ba 92 3f e3 65 c7 76 db fc e9 ff 00 36 e3 a6 Data Ascii: eWf/6^lUybeV^^V^3eeo6V^+6lUYb5rb^(o6V^v^VlPlWf]qWf\[/+,aCUYueV+6lWflf.+6lw}&:}'CYf95OA_F'JAd$?G?ev6
2024-05-29 10:14:39 UTC	16384	IN	Data Raw: 8a e3 cb 63 49 c5 05 67 1a 63 4e d8 e6 38 c3 d3 0b 12 b5 9b 11 23 1c 6a 0d 31 a4 61 6b 3b ad 22 99 58 f2 b8 d2 30 a2 9d 9a 99 86 5e 04 86 b3 53 2f 35 71 4b 54 c5 14 e3 6b 8e 5c 0c 82 a0 c7 8a 62 75 cd cb 03 30 bc b6 34 65 63 97 14 bb 2c 1c d9 b6 c0 ad d7 36 55 72 c6 29 6a 99 b2 ce 30 9c 55 d9 b3 57 2b 14 37 9b 36 6c 55 bc d9 59 78 ab b1 d8 dc ba e0 4a ec d9 43 2f 14 b7 9b 28 65 e2 96 f2 c6 56 58 c0 ad e5 e5 65 e2 c9 bc bc ac bc 0a de 6c d9 78 19 3b 36 6c bc 55 d9 79 59 b0 25 bc dd 33 65 d3 15 5b 95 8e a6 55 31 56 b3 65 d3 35 31 57 66 cd 9b 02 b5 97 d3 36 6c 0a de 5e 56 6c 52 de 5e 37 2e b8 ab 79 78 da e6 ae 29 5d 95 5c aa e6 ae 05 6e b9 ab 8d ae 6a e3 4b 6b eb 95 5c 6d 73 57 1a 5b 5d 5c d5 c6 d7 2a b8 d2 da fa e6 ae 32 b9 ab 86 96 d7 57 31 38 ca e5 d7 0d Data Ascii: cIgcN8#j1ak;"X0^S/5qKTk\bu04ec,6Ur)j0UW+76lUYxJC/(eVXelx;6lUyY%3e[U1Ve51Wf6l^VlR^7.yx)]\njKk\msW[]\*2W18
2024-05-29 10:14:39 UTC	16384	IN	Data Raw: 61 cb 51 39 cf 83 18 df ac 8f d3 07 69 0d 2e 2c 58 c4 f3 6e 3f 86 23 ea c9 2f e8 fe 3f d2 7f 11 be 98 97 3a a9 33 73 21 5f 66 9b a6 df ef 9b 44 fd 88 ff 00 9a 4f da c3 4b ad 52 d3 45 45 b5 8c 72 97 a2 44 9d 77 fe 76 fd 9f f6 58 49 77 e6 19 af 80 83 4b 5f 46 02 78 2c 94 f8 9b fc 8b 68 bf e3 6c 33 d2 74 08 ec 87 ab 70 39 ce 77 25 b7 a1 ff 00 8d 9f 04 67 2e 2e 0c 5e b3 fc 79 67 f4 c7 fa ab 96 31 10 f1 35 15 8e 1f e4 f4 f8 fe a9 7f 5d 31 82 27 97 8c d7 3b c8 3a 2f ec af fa ab fb 5f eb b6 0b c6 f4 1b f4 c0 b2 ea 96 d0 37 a6 5f 9c 87 a2 46 39 b1 ff 00 62 9f f1 b6 66 92 23 cc ba d0 27 94 fa 45 fb bf 85 19 5c b0 70 1c 37 2f 3e ec 8d 0f 80 75 df fe 17 e0 5c 52 6b a8 ac c5 6e 24 54 ff 00 58 d3 fe 05 70 71 c6 b8 8e c3 cf d2 c8 e2 98 97 00 1c 52 ee 8f af fd ca 2c 1c Data Ascii: aQ9i.,Xn?#/?:3s!_fDOKREErDwvXIwK_Fx,hl3tp9w%g..^yg15]1';:/_7_F9bf#'E\p7/>u\Rkn$TXpqR,
2024-05-29 10:14:39 UTC	16384	IN	Data Raw: fe ee 2f f8 c7 73 f1 e0 9b 34 41 fe 93 73 f1 33 1a 16 71 49 1d be cb 2c 67 e1 93 fd 7e 12 3f 1f b1 1f ed e4 5e da e6 49 1c df 5f 7e ff 00 99 00 ef 46 6a 7f ba e2 6f 8b 82 a7 ed fc 2b c3 fd 7c 37 83 50 25 c4 af 53 30 14 58 86 ca 8b fb 29 13 b7 fb cf 1f fc 5f cb d6 7f f7 52 27 f7 98 63 2b e6 c6 78 f8 45 44 7b cb 2e 8e 69 24 24 49 f0 84 fd 9a ec bf e4 c8 df 6b 92 ff 00 27 db ff 00 53 04 c7 70 08 aa 6e a3 ab 9d 97 fd 8e 47 60 bd 11 00 6e 9d 05 06 cb 4a 22 0f f8 ae 1f b4 ff 00 f1 92 e1 e1 4f f8 c9 86 29 a9 c7 21 0d 1a b3 90 36 2d db fd 56 6f 81 3f e7 9c 7c 7f e2 cc b8 17 06 70 3d db 27 0a 6a 2b fd 98 ea e0 28 26 92 6d e9 51 e2 2a df f0 df 63 fe 1b 05 8a f7 c9 34 11 45 ba e5 d7 1b 9b 14 2e cb ae 37 2e b8 a5 75 72 eb 8c e5 9a b8 aa fa e6 ae 32 b9 ab 81 2b eb 9b Data Ascii: /s4As3qI,g~?^I_~Fjo+\|7P%S0X)_R'c+xED{.i$$Ik'SpnG`nJ"O)!6-Vo?\|p='j+(&mQ*c4E.7.ur2+
2024-05-29 10:14:39 UTC	16384	IN	Data Raw: 6a ec 7d 81 ff 00 25 7e 05 f8 9b fd 86 08 e6 23 3c 2e be 2d be c9 20 ee 77 e4 1a 36 e0 af fe 57 c4 c9 80 10 2a 6e eb cb c0 56 83 fe 17 e2 ff 00 88 63 6a 7e 43 c3 2a 3b ee e4 01 5b 74 08 e4 91 a3 25 a3 aa a3 7e c8 6e 42 9f f1 2c 69 64 7f 83 75 7a d6 a7 a1 fa 31 04 5f 1d 8f 8f 86 28 d7 44 0e 2a 7b 00 4d 07 6c 81 1d dc db 3d ea a1 f8 28 46 e2 69 53 d3 7d ff 00 63 7f 87 11 67 24 d3 f0 c4 be 26 eb 8a 80 28 7a d4 63 5d eb 6b 69 d8 f5 c5 43 19 54 2d 14 70 24 d6 9f 17 fb 26 f8 b9 2a e3 5e 9c 43 af c9 8d 36 1f cb 86 7a 76 9f 6f 74 a1 96 71 15 c0 3f 65 c5 14 7f be e4 0d fe ec 8b fd f9 fb 71 fd af 8d 32 71 16 c2 72 11 16 50 ab 34 96 d0 95 f4 d4 a3 d5 79 b2 1a 82 7e 2f 81 db f6 d3 19 08 92 45 32 22 ef 08 05 a9 4f b3 fc ec bf f1 b2 e1 e6 a1 6f 1c 70 cd 24 2e 16 47 21 Data Ascii: j}%~#<.- w6WnVcj~C;[t%~nB,iduz1_(D{Ml=(FiS}cg$&(zc]kiCT-p$&^C6zvotq?eq2qrP4y~/E2"Oop$.G!
2024-05-29 10:14:39 UTC	16384	IN	Data Raw: 98 ab 59 b2 ce 56 28 75 73 65 66 c5 5b ca cd 9b 0a 1d 95 97 95 8a ba b9 79 59 b1 43 75 cb c6 e5 8c 52 dd 31 45 51 8d 03 1e 05 30 24 05 c0 63 c2 d7 28 2e 29 4a 60 6c 01 c0 01 91 ff 00 3c 59 1b bd 21 d9 45 5a 06 59 7e 81 f0 bf fc 2b 64 82 b8 85 e4 1f 5b b7 96 df fd f8 8c bf 78 c0 45 8a 6c c7 2e 09 89 77 17 86 34 9c cf c0 29 4e f8 89 ad 6b 8a 33 70 62 bd c1 a7 ca 98 a9 52 16 84 d4 d2 b4 1e 19 8a ef 39 20 dd 0f 72 30 5a 49 0b 46 aa 3f bd 1b 12 29 42 3e 9c 48 9e 26 94 d8 f8 e3 40 de aa 01 c1 4b 6f 42 fc bb d4 40 f5 b4 d7 3d fd 58 ab dc 74 99 53 fe 4e 64 ea 99 c5 f4 0d 49 74 dd 4a de e6 45 d9 24 15 a6 db 37 ee db fe 25 cb 3b 61 1b e6 4e 33 71 ae e7 53 ab c7 c3 93 88 72 96 ff 00 15 80 63 80 cb cd 96 38 ae cb 19 80 ae 58 18 15 ba 66 a6 06 bf ba 7b 28 4c e9 19 94 Data Ascii: YV(usef[yYCuR1EQ0$c(.)J`l<Y!EZY~+d[xEl.w4)Nk3pbR9 r0ZIF?)B>H&@KoB@=XtSNdItJE$7%;aN3qSrc8Xf{(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49734	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:38 UTC	837	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:39 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1281 Connection: close Set-Cookie: __uzma=a57e5c73-b67f-4c2f-887f-2b97f69858f8; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977678; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=4623; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=335311010896; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977678; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f600099d026e8-334a-4c10-9051-27133061805517169776788870-d5bd32d47422c41810; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000cb9a0aed-19ac-42db-8a28-f4a40fdf9f701-17169776788870-7e7d5ff2da62883c10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:38 GMT
2024-05-29 10:14:39 UTC	1281	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 71 75 61 6c 20 4f 70 70 6f 72 74 75 6e 69 74 79 20 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 22 20 73 74 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Equal Opportunity Logo</title> <g id="Components" str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49735	54.228.71.178	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:38 UTC	580	OUT	GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://mail.fnbo-in.selfip.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-29 10:14:39 UTC	372	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Wed, 29 May 2024 10:14:38 GMT Content-Type: audio/mpeg Content-Length: 504 Connection: close Content-Disposition: inline; filename=time.mp3 Content-Range: bytes 0-503/504 Accept-Ranges: bytes Pragma: public Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-29 10:14:39 UTC	504	IN	Data Raw: ff e3 48 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 69 6e 67 00 00 00 0f 08 2e 7b af 00 00 02 40 00 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 0a 4c 41 4d 45 33 2e 39 38 72 04 28 00 00 00 00 00 00 00 00 14 08 24 06 c0 2d 00 01 9a 00 00 02 40 c6 6c f8 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HdXing.{@@@@@@@@@@@@@@@@@@@@@@@@@LAME3.98r($-@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.10	49736	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:38 UTC	690	OUT	GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.fnbo-in.selfip.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:39 UTC	514	IN	HTTP/1.1 200 OK Content-Type: font/x-woff Content-Length: 24388 Connection: close Last-Modified: Tue, 17 Nov 2020 15:59:52 GMT Accept-Ranges: bytes ETag: "08c20affabcd61:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:38 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4dnrYSzKzIc-gm9UNp8hEcFnDDZtoZ-u23XePYsL8eBGcQ0Xa2qO-aC4vId7Tezld4Tno; path=/; SameSite=None; Secure
2024-05-29 10:14:39 UTC	15870	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 5f 44 00 12 00 00 00 00 b3 dc 00 07 00 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 5f 28 00 00 00 1c 00 00 00 1c 80 42 54 5c 47 44 45 46 00 00 48 40 00 00 00 32 00 00 00 36 03 b6 04 85 47 50 4f 53 00 00 4a 34 00 00 14 f3 00 00 32 4e f0 59 0d 67 47 53 55 42 00 00 48 74 00 00 01 c0 00 00 03 be cb 34 ff 55 4f 53 2f 32 00 00 02 0c 00 00 00 4e 00 00 00 60 53 a9 aa 1a 63 6d 61 70 00 00 04 c4 00 00 01 81 00 00 01 da 1f de 17 36 63 76 74 20 00 00 0d 74 00 00 00 5d 00 00 00 e4 2f 52 15 48 66 70 67 6d 00 00 06 48 00 00 06 70 00 00 0d 6d 4d 24 8e 7c 67 61 73 70 00 00 48 38 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0f ec 00 00 33 a6 00 00 5c 54 2c e1 59 b0 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFF_DFFTM_(BT\GDEFH@26GPOSJ42NYgGSUBHt4UOS/2N`Scmap6cvt t]/RHfpgmHpmM$\|gaspH8glyf3\T,Yhead

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.10	49732	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:38 UTC	827	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:39 UTC	1614	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzma=cb12daf6-71da-4b17-82d9-7ae2619e070c; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977678; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=0559; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=549241099148; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977678; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f600003cdac54-c0b7-4605-9d70-dfbc5ae2db9e17169776788830-4de72e3d965cff1110; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f900071e33be8-4b7c-48f8-9045-00f64e2376801-17169776788830-96972c6ee697dafd10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:38 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:84\|g:4f29383c-b3a3-4b43-ab55-bc99e5054f00\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:15:08 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:15:08 GMT; path=/ Set-Cookie: ADRUM_BT1=R:84\|i:371912\|e:9; expires=Wed, 29-May-2024 10:15:08 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:38 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.10	49740	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:40 UTC	532	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:40 UTC	1612	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzma=6c06ca7c-483d-4fad-b1fb-d11f6291aa63; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977680; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7055; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=496131060034; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977680; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60003f8684cd-2fd7-47ca-ab80-c60d8d4cac0617169776801390-361b3dce5970c7f410; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f900025f0b33b-a3b8-4a8c-8c96-79b099e3b03c1-17169776801390-f25539bd83e54bf210; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:0\|g:72da773e-a256-496e-a4eb-4c42fe96868d\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:15:10 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:15:10 GMT; path=/ Set-Cookie: ADRUM_BT1=R:0\|i:371912\|e:9; expires=Wed, 29-May-2024 10:15:10 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:39 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.10	49738	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:40 UTC	542	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:40 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1281 Connection: close Set-Cookie: __uzma=eaacd24e-24f0-4466-8d28-bdd103189230; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977680; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7934; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=299881077945; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977680; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000111f739c-e1de-4dbc-9f73-2255e67f09d117169776801420-8d08c69527f8256f10; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000974f0060-701b-4761-a7da-0ee325378ae01-17169776801420-a9a022e0db9fa7c910; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:39 GMT
2024-05-29 10:14:40 UTC	1281	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 71 75 61 6c 20 4f 70 70 6f 72 74 75 6e 69 74 79 20 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 22 20 73 74 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Equal Opportunity Logo</title> <g id="Components" str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.10	49741	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:40 UTC	512	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:40 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1612 Connection: close Set-Cookie: __uzma=e6f64819-e6af-40f6-90c5-d691284b1035; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977680; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7053; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=961401028739; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977680; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000b0215e1b-fb2d-4d90-a9f4-434a60706d9717169776801550-00f5bf7d8c6a622510; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90001f4b536e-3262-472b-955b-d2fc4b946a2c1-17169776801550-f8e21e03db9723ac10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:39 GMT
2024-05-29 10:14:40 UTC	1612	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 09 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 38 20 28 38 34 36 36 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 09 3c 74 69 74 6c 65 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com --><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.10	49739	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:40 UTC	528	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:40 UTC	1355	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12107 Connection: close Set-Cookie: __uzma=894b69d4-63c2-45fa-8a43-05f063135e0c; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977680; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=4167; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=612141067286; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977680; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000cfc7009f-6367-4375-a5f0-77ebb0c7225e17169776801570-f7ace4847277faf210; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000df1bcb5e-6a4c-41fc-bbf2-4899bd86dfc71-17169776801570-80a456f2c64a062d10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:40 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:39 GMT
2024-05-29 10:14:40 UTC	12107	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 31 70 78 22 20 68 65 69 67 68 74 3d 22 37 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 31 20 37 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 36 34 20 28 39 33 35 33 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 64 (93537) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.10	49743	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:40 UTC	506	OUT	GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:40 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 271563 Connection: close Last-Modified: Tue, 27 Apr 2021 13:46:46 GMT Accept-Ranges: bytes ETag: "0679bc36b3bd71:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:39 GMT
2024-05-29 10:14:40 UTC	16009	IN	Data Raw: ff d8 ff e1 13 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 07 80 00 00 01 01 00 03 00 00 00 01 04 38 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 30 32 3a 30 31 20 31 34 3a 35 30 3a 32 37 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: @ExifMM*8(1!2i$''Adobe Photoshop 22.1 (Macintosh)2021:02:01 14:50:27
2024-05-29 10:14:40 UTC	16384	IN	Data Raw: 16 04 a6 28 b8 da e3 c6 2c 83 74 cb ca c6 96 c0 c9 52 b9 8b 62 25 f2 b9 63 4b 6a a5 f1 17 73 94 4e 31 8d 30 d3 12 5c 65 a6 37 d4 38 d7 6c 4f 7c 34 d6 64 51 01 b3 7a 94 e9 89 03 8f 1b 6e 71 a4 da a2 ca 7b e2 aa 6b 81 8b 63 95 f8 e0 a6 42 5d e8 9c bc 4d 5e b8 a0 df 03 60 6c 63 a9 94 36 c7 0c 09 70 cb cd 9b 14 b7 95 4c bc ac 52 d1 db 28 1c 7d 31 a4 62 ae cb cc 06 62 31 43 ab 9b ae 56 62 71 4a d6 18 91 14 c5 c0 ae 31 c6 28 21 48 91 4c c9 b9 c6 b8 a0 c6 a9 a1 c2 c2 f7 44 95 a8 c4 1c 11 8a 09 3c 72 e9 cb 03 23 ba 16 b4 c6 93 5c 5d e2 3d 46 25 c0 8c 93 02 0a cc ac 71 19 5d 31 62 d6 5e 6c ba 62 96 b2 c1 c6 e5 e2 ad 96 cc 0d 32 b3 60 55 50 f5 ca 23 1a 3a e2 9d 71 65 cd 4f 1c 32 c8 a6 36 b4 c5 57 9a 53 7c 66 62 72 b0 2b 79 63 2b 2f 15 5c b8 a2 ed 89 ae 3c 60 64 17 Data Ascii: (,tRb%cKjsN10\e78lO\|4dQznq{kcB]M^`lc6pLR(}1bb1CVbqJ1(!HLD<r#\]=F%q]1b^lb2`UP#:qeO26WS\|fbr+yc+/\<`d
2024-05-29 10:14:40 UTC	16384	IN	Data Raw: 95 cc 13 2e 7d 1c a8 d4 68 0e 48 33 54 35 fa 46 69 05 56 a3 f6 4d 3e 83 f6 71 47 5f 83 dc 6e 3e 47 fe 69 6c 4e 26 0a dc 5f ec b0 e2 7e 9f f9 a7 31 88 a3 c2 79 49 b8 1b df b9 48 a8 0c 2a 68 0d 3f 1f f9 a7 0c bd 43 19 4b 93 f6 64 01 64 f9 fd 95 7c 2f 78 c8 56 46 fb 51 9f c0 fd ac 74 17 2d 0c 4d 13 8e 48 ea 78 8c 71 cc 63 91 bd af d5 7f cd 9c 7f 1c 0b 38 f1 80 46 fd 2b be 3f 8f 5a 95 ea a4 72 b2 c7 40 06 d8 15 e4 5e fb e2 8c 17 a7 5f a4 62 32 2a 81 d3 ae 60 e4 24 93 20 00 bd e9 c9 80 a0 01 df cd 4d a5 43 db 12 de 4a 95 04 d0 12 69 d8 0c 11 2c be a1 56 90 29 e2 29 4a 52 a3 fc ac 40 aa 84 01 43 7a b5 ea 3a 11 f2 cc 6c 82 c9 df 6f 93 74 79 72 dd a5 b5 9a 5e 3c 14 9e 4a 59 7d c0 fb 58 85 2a 36 26 9d f1 78 e7 96 dc 2f 06 fb 2d cc 53 b1 e9 ff 00 0d 82 62 bd 68 e6 Data Ascii: .}hH3T5FiVM>qG_n>GilN&_~1yIHh?CKdd\|/xVFQt-MHxqc8F+?Zr@^_b2`$ MCJi,V))JR@Cz:lotyr^<JY}X*6&x/-Sbh
2024-05-29 10:14:40 UTC	16384	IN	Data Raw: c6 29 0a 83 35 31 a0 e5 d7 03 26 c8 ca e3 9a b8 a0 c5 35 6a 24 1c d4 c5 a9 96 29 8d a7 85 40 8c d8 bb 01 8c a6 2b c2 a7 97 8f e3 95 c7 15 a5 a4 63 71 52 b8 c2 b8 ad 2d a6 60 31 d4 cd 4c 55 c3 1e 31 b4 a6 38 02 70 32 0d e3 d4 57 30 4c 78 14 c0 cc 05 ca a3 2f e5 94 31 e0 57 03 36 d4 63 a9 94 06 38 0a e0 4b 59 44 63 e9 9a 94 c5 56 ae d9 79 67 19 5c 52 bb 8d 72 f8 65 03 8e ae 05 5a 45 33 05 c7 93 95 4c 52 da 83 8e 39 43 2e b8 15 a2 73 63 1b 30 63 8a b6 c3 12 23 16 ad 71 8e 08 c0 a5 44 9c 61 38 e7 18 cc 58 36 32 f3 66 c5 2d e6 cd 5c d8 15 d9 86 6c d8 a5 bc d9 59 ab 8a b7 97 95 5c bc 09 76 5e 56 5e 2a de 6c d9 b0 25 d8 e1 8d cb c0 95 d9 78 d1 97 8a 5b cb ca cd 81 57 0c bc 6e 6a e0 4a ec bc 6e 5e 29 5d 9b 2a b9 b0 2a ec bc 6e 5e 29 5d 97 8d cb c5 5b cb c6 d7 2c Data Ascii: )51&5j$)@+cqR-`1LU18p2W0Lx/1W6c8KYDcVyg\RreZE3LR9C.sc0c#qDa8X62f-\lY\v^V^l%x[WnjJn^)]*n^)][,
2024-05-29 10:14:40 UTC	16384	IN	Data Raw: d9 b3 65 e0 57 0c ba 66 03 2f 14 bb 36 5e 6c 55 d9 79 b3 62 ad e5 e5 65 e2 96 f2 c6 56 5e 2a de 5e 56 5e 14 b6 33 65 65 e2 ad e6 cd 9b 15 6f 36 56 5e 04 b7 9b 2b 36 2a de 6c ac bc 55 bc d9 59 b0 a1 bc d9 b3 62 ad d7 35 72 b3 62 ad e6 ca ae 5e 28 6f 36 56 5e 15 76 5e 56 6c 50 de 6c ac ba e1 57 66 ca ae 5d 71 57 66 cd 5c d5 c5 5b cd 95 97 8a bb 2f 2b 2c 61 43 b2 f2 b2 f0 a1 bc bc ac d8 55 bc d9 59 75 c2 87 65 d7 2a b9 b1 56 eb 9b 2b 36 2a de 6c ac ba e1 57 66 ae 6c d8 a1 d9 b3 66 c5 2e cd 9b 2b 02 bb 36 6c d8 15 d8 d7 de 83 c4 e5 e5 77 18 0a ad 93 7d bc 7f ae 26 3a 7d 27 f0 18 a9 fb 43 18 ab f0 b7 d3 95 c8 59 66 39 35 4f b3 fe a1 c4 e9 41 5f 0e 07 17 a6 e3 e4 46 27 4a a9 f7 41 f8 64 24 3f 1f e6 a4 15 09 47 15 07 ba 92 3f e3 65 c7 76 db fc e9 ff 00 36 e3 a6 Data Ascii: eWf/6^lUybeV^^V^3eeo6V^+6lUYb5rb^(o6V^v^VlPlWf]qWf\[/+,aCUYueV+6lWflf.+6lw}&:}'CYf95OA_F'JAd$?G?ev6
2024-05-29 10:14:40 UTC	16384	IN	Data Raw: 8a e3 cb 63 49 c5 05 67 1a 63 4e d8 e6 38 c3 d3 0b 12 b5 9b 11 23 1c 6a 0d 31 a4 61 6b 3b ad 22 99 58 f2 b8 d2 30 a2 9d 9a 99 86 5e 04 86 b3 53 2f 35 71 4b 54 c5 14 e3 6b 8e 5c 0c 82 a0 c7 8a 62 75 cd cb 03 30 bc b6 34 65 63 97 14 bb 2c 1c d9 b6 c0 ad d7 36 55 72 c6 29 6a 99 b2 ce 30 9c 55 d9 b3 57 2b 14 37 9b 36 6c 55 bc d9 59 78 ab b1 d8 dc ba e0 4a ec d9 43 2f 14 b7 9b 28 65 e2 96 f2 c6 56 58 c0 ad e5 e5 65 e2 c9 bc bc ac bc 0a de 6c d9 78 19 3b 36 6c bc 55 d9 79 59 b0 25 bc dd 33 65 d3 15 5b 95 8e a6 55 31 56 b3 65 d3 35 31 57 66 cd 9b 02 b5 97 d3 36 6c 0a de 5e 56 6c 52 de 5e 37 2e b8 ab 79 78 da e6 ae 29 5d 95 5c aa e6 ae 05 6e b9 ab 8d ae 6a e3 4b 6b eb 95 5c 6d 73 57 1a 5b 5d 5c d5 c6 d7 2a b8 d2 da fa e6 ae 32 b9 ab 86 96 d7 57 31 38 ca e5 d7 0d Data Ascii: cIgcN8#j1ak;"X0^S/5qKTk\bu04ec,6Ur)j0UW+76lUYxJC/(eVXelx;6lUyY%3e[U1Ve51Wf6l^VlR^7.yx)]\njKk\msW[]\*2W18
2024-05-29 10:14:40 UTC	16384	IN	Data Raw: 61 cb 51 39 cf 83 18 df ac 8f d3 07 69 0d 2e 2c 58 c4 f3 6e 3f 86 23 ea c9 2f e8 fe 3f d2 7f 11 be 98 97 3a a9 33 73 21 5f 66 9b a6 df ef 9b 44 fd 88 ff 00 9a 4f da c3 4b ad 52 d3 45 45 b5 8c 72 97 a2 44 9d 77 fe 76 fd 9f f6 58 49 77 e6 19 af 80 83 4b 5f 46 02 78 2c 94 f8 9b fc 8b 68 bf e3 6c 33 d2 74 08 ec 87 ab 70 39 ce 77 25 b7 a1 ff 00 8d 9f 04 67 2e 2e 0c 5e b3 fc 79 67 f4 c7 fa ab 96 31 10 f1 35 15 8e 1f e4 f4 f8 fe a9 7f 5d 31 82 27 97 8c d7 3b c8 3a 2f ec af fa ab fb 5f eb b6 0b c6 f4 1b f4 c0 b2 ea 96 d0 37 a6 5f 9c 87 a2 46 39 b1 ff 00 62 9f f1 b6 66 92 23 cc ba d0 27 94 fa 45 fb bf 85 19 5c b0 70 1c 37 2f 3e ec 8d 0f 80 75 df fe 17 e0 5c 52 6b a8 ac c5 6e 24 54 ff 00 58 d3 fe 05 70 71 c6 b8 8e c3 cf d2 c8 e2 98 97 00 1c 52 ee 8f af fd ca 2c 1c Data Ascii: aQ9i.,Xn?#/?:3s!_fDOKREErDwvXIwK_Fx,hl3tp9w%g..^yg15]1';:/_7_F9bf#'E\p7/>u\Rkn$TXpqR,
2024-05-29 10:14:41 UTC	16384	IN	Data Raw: fe ee 2f f8 c7 73 f1 e0 9b 34 41 fe 93 73 f1 33 1a 16 71 49 1d be cb 2c 67 e1 93 fd 7e 12 3f 1f b1 1f ed e4 5e da e6 49 1c df 5f 7e ff 00 99 00 ef 46 6a 7f ba e2 6f 8b 82 a7 ed fc 2b c3 fd 7c 37 83 50 25 c4 af 53 30 14 58 86 ca 8b fb 29 13 b7 fb cf 1f fc 5f cb d6 7f f7 52 27 f7 98 63 2b e6 c6 78 f8 45 44 7b cb 2e 8e 69 24 24 49 f0 84 fd 9a ec bf e4 c8 df 6b 92 ff 00 27 db ff 00 53 04 c7 70 08 aa 6e a3 ab 9d 97 fd 8e 47 60 bd 11 00 6e 9d 05 06 cb 4a 22 0f f8 ae 1f b4 ff 00 f1 92 e1 e1 4f f8 c9 86 29 a9 c7 21 0d 1a b3 90 36 2d db fd 56 6f 81 3f e7 9c 7c 7f e2 cc b8 17 06 70 3d db 27 0a 6a 2b fd 98 ea e0 28 26 92 6d e9 51 e2 2a df f0 df 63 fe 1b 05 8a f7 c9 34 11 45 ba e5 d7 1b 9b 14 2e cb ae 37 2e b8 a5 75 72 eb 8c e5 9a b8 aa fa e6 ae 32 b9 ab 81 2b eb 9b Data Ascii: /s4As3qI,g~?^I_~Fjo+\|7P%S0X)_R'c+xED{.i$$Ik'SpnG`nJ"O)!6-Vo?\|p='j+(&mQ*c4E.7.ur2+
2024-05-29 10:14:41 UTC	16384	IN	Data Raw: 6a ec 7d 81 ff 00 25 7e 05 f8 9b fd 86 08 e6 23 3c 2e be 2d be c9 20 ee 77 e4 1a 36 e0 af fe 57 c4 c9 80 10 2a 6e eb cb c0 56 83 fe 17 e2 ff 00 88 63 6a 7e 43 c3 2a 3b ee e4 01 5b 74 08 e4 91 a3 25 a3 aa a3 7e c8 6e 42 9f f1 2c 69 64 7f 83 75 7a d6 a7 a1 fa 31 04 5f 1d 8f 8f 86 28 d7 44 0e 2a 7b 00 4d 07 6c 81 1d dc db 3d ea a1 f8 28 46 e2 69 53 d3 7d ff 00 63 7f 87 11 67 24 d3 f0 c4 be 26 eb 8a 80 28 7a d4 63 5d eb 6b 69 d8 f5 c5 43 19 54 2d 14 70 24 d6 9f 17 fb 26 f8 b9 2a e3 5e 9c 43 af c9 8d 36 1f cb 86 7a 76 9f 6f 74 a1 96 71 15 c0 3f 65 c5 14 7f be e4 0d fe ec 8b fd f9 fb 71 fd af 8d 32 71 16 c2 72 11 16 50 ab 34 96 d0 95 f4 d4 a3 d5 79 b2 1a 82 7e 2f 81 db f6 d3 19 08 92 45 32 22 ef 08 05 a9 4f b3 fc ec bf f1 b2 e1 e6 a1 6f 1c 70 cd 24 2e 16 47 21 Data Ascii: j}%~#<.- w6WnVcj~C;[t%~nB,iduz1_(D{Ml=(FiS}cg$&(zc]kiCT-p$&^C6zvotq?eq2qrP4y~/E2"Oop$.G!
2024-05-29 10:14:41 UTC	16384	IN	Data Raw: 98 ab 59 b2 ce 56 28 75 73 65 66 c5 5b ca cd 9b 0a 1d 95 97 95 8a ba b9 79 59 b1 43 75 cb c6 e5 8c 52 dd 31 45 51 8d 03 1e 05 30 24 05 c0 63 c2 d7 28 2e 29 4a 60 6c 01 c0 01 91 ff 00 3c 59 1b bd 21 d9 45 5a 06 59 7e 81 f0 bf fc 2b 64 82 b8 85 e4 1f 5b b7 96 df fd f8 8c bf 78 c0 45 8a 6c c7 2e 09 89 77 17 86 34 9c cf c0 29 4e f8 89 ad 6b 8a 33 70 62 bd c1 a7 ca 98 a9 52 16 84 d4 d2 b4 1e 19 8a ef 39 20 dd 0f 72 30 5a 49 0b 46 aa 3f bd 1b 12 29 42 3e 9c 48 9e 26 94 d8 f8 e3 40 de aa 01 c1 4b 6f 42 fc bb d4 40 f5 b4 d7 3d fd 58 ab dc 74 99 53 fe 4e 64 ea 99 c5 f4 0d 49 74 dd 4a de e6 45 d9 24 15 a6 db 37 ee db fe 25 cb 3b 61 1b e6 4e 33 71 ae e7 53 ab c7 c3 93 88 72 96 ff 00 15 80 63 80 cb cd 96 38 ae cb 19 80 ae 58 18 15 ba 66 a6 06 bf ba 7b 28 4c e9 19 94 Data Ascii: YV(usef[yYCuR1EQ0$c(.)J`l<Y!EZY~+d[xEl.w4)Nk3pbR9 r0ZIF?)B>H&@KoB@=XtSNdItJE$7%;aN3qSrc8Xf{(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.10	49742	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:40 UTC	653	OUT	GET /favicon.ico HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.fnbo-in.selfip.com/x/otp2.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:14:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 29 May 2024 10:14:41 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-29 10:14:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.10	49744	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:42 UTC	403	OUT	GET /x/img/BANGOR.png HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:14:43 UTC	207	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:14:43 GMT Server: Apache Last-Modified: Sat, 13 Jan 2024 12:05:46 GMT Accept-Ranges: bytes Content-Length: 45863 Connection: close Content-Type: image/png
2024-05-29 10:14:43 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 00 83 08 02 00 00 00 e4 84 30 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 b2 c9 49 44 41 54 78 5e ed bd 05 80 25 c5 d5 36 7c 57 66 c7 6d 15 0d f1 84 c8 8b ac 8c df 3b 77 dc dd dd 65 05 d7 40 82 43 84 10 23 40 9c 84 10 81 18 31 42 12 42 d0 20 81 10 5c 16 59 61 7d 67 77 fc 7a ff cf 73 4e df 9e 3b b3 bb 64 87 b0 bc fb bd ff d4 9c e9 db 5d dd 5d 75 ea d4 a9 a7 ce a9 ae ae b6 19 47 34 04 42 48 36 5e c3 70 1b 86 cb 30 26 85 b0 03 42 24 c8 27 5b eb 14 68 c2 08 58 fb 7a 38 66 f8 40 21 f1 81 49 bf d7 e5 f3 7a 02 7e af 11 98 9e db 54 f0 fb fd 3e 9f 2f 80 20 b9 b8 02 3e 97 c7 ed 0b f8 a7 ae 0e 25 09 f8 c5 95 e6 51 48 a4 c6 5b Data Ascii: PNGIHDR0gAMAapHYsttfxIDATx^%6\|Wfm;we@C#@1BB \Ya}gwzsN;d]]uG4BH6^p0&B$'[hXz8f@!Iz~T>/ >%QH[
2024-05-29 10:14:43 UTC	8000	IN	Data Raw: 91 1d f3 c2 7f 28 01 14 40 41 17 43 31 08 fb 88 19 1f 0e 4e 4a 72 0f ff 6e e3 53 c7 94 a7 1f d3 96 17 dd 9c 29 b3 78 84 3a 33 d1 90 60 9e 84 b5 f1 c1 56 44 67 76 5c 4d fa 8d 7f bf 0b e9 70 50 83 ce 17 d5 6b 4a 93 b0 a7 18 e4 31 46 77 01 15 39 cf 18 bc bd 6a 8c ad 19 6c f8 40 4b 41 4c 53 26 87 ba d0 6e fb 73 12 36 94 c1 4f 59 58 93 12 df 95 37 bf 99 eb 3a 52 8f a1 cd 41 85 06 00 a1 fd 87 75 38 63 3a 73 3e d0 5b f6 2f 63 78 97 f0 3f 0c 77 53 73 0d ca 57 73 46 b6 5a 2e fe 04 31 48 36 8c 50 d2 43 33 04 cf c1 97 d4 6b 34 06 3b a8 97 e6 9b ae 04 6f 00 cd c8 9e dc b0 a6 8c a5 83 25 b6 96 74 8e be 75 f1 a5 5f b3 e1 59 96 29 7a 8e e6 f4 65 03 25 c7 f7 96 2c 6f cb 8b ac 4e 8d 6b ca 5c d2 57 64 2b 39 3d aa 70 d5 49 55 ce 93 8a d3 b7 1a 3e ed 27 c0 ea 14 78 07 99 47 Data Ascii: (@AC1NJrnS)x:3`VDgv\MpPkJ1Fw9jl@KALS&ns6OYX7:RAu8c:s>[/cx?wSsWsFZ.1H6PC3k4;o%tu_Y)ze%,oNk\Wd+9=pIU>'xG
2024-05-29 10:14:43 UTC	8000	IN	Data Raw: 7b 6b 7f f7 e2 13 68 c9 bb 03 7c 29 51 67 f0 a2 33 06 e7 1c 27 52 ee 95 82 bf b8 c0 ed e5 f3 38 10 87 32 82 ee bc 1c 73 0b b5 51 00 ba fc e7 df 59 56 94 7c 52 47 51 44 4d 2a ac ce 98 de 7c ce 1a 6b cd e0 64 ba 3e 0e a1 92 ff ff 48 0a a0 82 a1 ac b5 da d5 f3 9b 33 96 f7 14 45 16 ad 8a 72 7c ba ef 2b 57 bc e1 19 86 9d c8 99 e2 7e ea b0 35 5c cd 79 5b 16 63 12 ac a3 43 11 c2 c1 30 48 9a 2a 5a 0b 5a 6f 64 7d 06 31 68 20 87 6f a5 8b fe 29 73 d8 41 8d 86 62 10 fa 2b 34 12 38 53 cf 8f ef 82 64 91 02 6d 87 e9 be 58 f0 97 81 93 f4 e4 00 e2 23 ac c2 0e 7a f4 6f c7 17 a7 45 f3 f9 ce c1 08 96 51 47 06 3f 77 d1 96 3e af c3 ce af 23 f4 65 85 f5 c9 5a 39 a8 ec f7 00 83 50 14 9f 9f ab 18 f1 99 94 ff e3 ed 25 8b 2a 92 22 bb 72 60 1b f2 99 37 aa aa 33 93 da 26 1a 69 ca 0a Data Ascii: {kh\|)Qg3'R82sQYV\|RGQDM\|kd>H3Er\|+W~5\y[cC0HZZod}1h o)sAb+48SdmX#zoEQG?w>#eZ9P%*"r`73&i
2024-05-29 10:14:43 UTC	8000	IN	Data Raw: 07 56 99 29 aa 80 f9 a2 af 4a 68 72 7e b8 31 ff 6f 6f 3c 07 c9 8f 7b dd 5a c4 d0 77 74 55 11 cd 8c 45 9e 10 ef 88 df fc b8 eb 5f 9e 79 fc 84 72 79 c0 04 47 52 32 32 75 1d 5a 1e cc 1a c5 61 2d a3 bd a1 03 68 b7 c7 34 d8 ef 79 e5 5f b8 57 f5 1b 74 98 18 c4 95 cb d7 16 71 52 12 df 2c a5 ed 00 87 28 bc e0 f4 f3 7f 7c e3 c3 6f be c8 9a 42 e0 53 7f 88 09 24 2a 74 88 a0 08 eb 93 d5 97 b1 33 31 31 f1 9b 07 ef 3d a1 36 4b 5e 82 3d 8d 23 f4 ed 69 50 5a 3e 51 6a 49 d5 dc a7 94 c4 aa a9 1e 67 5c 7d fa df 36 3e 0d 9d 97 2f dc 7a 50 df e8 ac 76 19 ee e6 af 5e 4a 8b a3 8f af 4c a2 f7 0d 83 fc d1 bb 40 f8 d0 40 6b 5e 05 d2 01 1e c1 45 e8 ca 46 45 2f ab cb 6c fd f2 67 61 19 ec 1a 87 3c 0c cf 30 f4 45 78 3d 58 e0 7c 11 09 e3 44 0f 86 d7 f7 ed fc c2 3d 3f 07 0e 00 cb e6 d5 Data Ascii: V)Jhr~1oo<{ZwtUE_yryGR22uZa-h4y_WtqR,(\|oBS$*t311=6K^=#iPZ>QjIg\}6>/zPv^JL@@k^EFE/lga<0Ex=X\|D=?
2024-05-29 10:14:43 UTC	8000	IN	Data Raw: 5b 97 04 21 10 b0 25 23 bb 66 ea 6f 43 12 f0 8b 06 bf df f0 ff 6a d3 d3 31 55 a9 c7 f6 97 f2 59 6a 53 2a 9d 26 14 a1 8b f3 bf 95 01 93 25 d6 9a 70 d5 96 11 df 68 ef bc e9 ca 1d 1c 96 f2 7b 3d 90 22 f4 df f7 f0 a6 e7 4f 6e 29 8c ad 4f b7 35 25 c3 5f b3 75 a4 d0 1b e8 e6 9b 59 11 bd 79 e0 5f 2a 3d 93 8b 0a e9 fa ee 6d b9 4b 4a 52 fe be f3 d5 2d 81 71 88 65 5c 5e 23 77 05 64 0d 0d 8b 55 25 4b f3 95 42 4e a1 ec 6f 19 13 af 1a 93 6b 36 34 2d 6f c9 a1 1d d7 26 18 0a 6b 23 58 11 28 82 96 c2 d4 b7 f6 74 f8 9b 11 0d 19 a7 6c 68 d8 28 03 d2 90 9c b9 94 35 08 c9 ca 2f 52 d6 66 88 08 db 0c 96 f8 0f 3e 70 95 7c 2b 15 87 e0 1b 65 80 5f d7 f5 a5 cf 2e af cc 80 a7 a7 e2 53 c2 be 99 b7 ea 07 08 8d b0 2d 35 ea bc 0a 5b 4b 32 98 8b ab 49 3f be c2 fe dd 47 ef d1 65 25 51 a9 Data Ascii: [!%#foCj1UYjS&%ph{="On)O5%_uYy_=mKJR-qe\^#wdU%KBNok64-o&k#X(tlh(5/Rf>p\|+e_.S-5[K2I?Ge%Q
2024-05-29 10:14:43 UTC	5878	IN	Data Raw: 5c 30 b4 22 7e 68 4e 84 e0 de 3f 7a 10 00 02 49 00 06 e9 91 ee a0 76 60 13 e9 49 c4 40 ef 86 0c f7 0e 59 74 f8 eb 0f ff 3e aa 60 e5 e2 e0 5c 13 08 50 39 01 81 b7 50 b2 0a 62 11 22 95 73 10 6e d4 7b c3 5b f9 dc 06 9d 5c 6c 49 d2 29 3d 55 5f fd f3 2f d0 ef ee 32 5c 50 8f a1 91 61 be 55 0a b6 75 61 ac 77 e4 07 cc 7e 4c 3a 34 a8 54 44 69 f6 bb 27 00 ea 4f ec d9 f4 f1 e6 a2 d8 ea 34 3e 29 a3 7e c8 fc 2e 4e 8b 80 f3 92 8e fa 06 70 00 7d d0 18 ac 62 a3 e6 4c fd b0 f4 4c f4 1b f1 90 88 8a 03 72 99 79 a5 e8 13 08 d7 30 fe f0 30 08 52 db 68 b8 4e 1e a8 46 f7 18 db 91 43 53 1f 4c 02 01 65 21 5e e6 2b df 2c 04 93 e8 b5 98 2c 72 e9 4a 83 11 be f0 9c 52 18 11 e8 6f 17 54 27 bf af ab f8 f8 2a c7 37 ee fd f5 73 63 fc aa 37 5a 1a 9c 73 4a 5e a5 71 24 83 e6 80 ce d0 e7 a3 Data Ascii: \0"~hN?zIv`I@Yt>`\P9Pb"sn{[\lI)=U_/2\PaUuaw~L:4TDi'O4>)~.Np}bLLry00RhNFCSLe!^+,,rJRoT'*7sc7ZsJ^q$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.10	49755	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:46 UTC	827	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ
2024-05-29 10:14:46 UTC	1614	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzma=6b717393-591a-4fee-a7c5-923ddac7304b; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:46 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977686; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:46 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=1127; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:46 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=222141034836; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:46 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977686; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:46 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000ea002c05-ec33-4dbf-9e9d-b4b912914c1717169776864790-d990b745745406de10; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:46 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f900005b6dcc1-f3f5-4eaf-bf0a-7e87fd24c8cc1-17169776864790-651ac0148189865810; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:46 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:84\|g:e4a9a0a9-85dc-41fe-9437-35ee4c501145\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:15:16 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:15:16 GMT; path=/ Set-Cookie: ADRUM_BT1=R:84\|i:371912\|e:9; expires=Wed, 29-May-2024 10:15:16 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:46 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.10	49754	54.228.71.178	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:46 UTC	580	OUT	GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://mail.fnbo-in.selfip.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-29 10:14:46 UTC	372	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Wed, 29 May 2024 10:14:46 GMT Content-Type: audio/mpeg Content-Length: 504 Connection: close Content-Disposition: inline; filename=time.mp3 Content-Range: bytes 0-503/504 Accept-Ranges: bytes Pragma: public Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-29 10:14:46 UTC	504	IN	Data Raw: ff e3 48 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 69 6e 67 00 00 00 0f 08 2e 7b af 00 00 02 40 00 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 0a 4c 41 4d 45 33 2e 39 38 72 04 28 00 00 00 00 00 00 00 00 14 08 24 06 c0 2d 00 01 9a 00 00 02 40 c6 6c f8 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HdXing.{@@@@@@@@@@@@@@@@@@@@@@@@@LAME3.98r($-@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.10	49756	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:46 UTC	690	OUT	GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.fnbo-in.selfip.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:14:46 UTC	514	IN	HTTP/1.1 200 OK Content-Type: font/x-woff Content-Length: 24388 Connection: close Last-Modified: Tue, 17 Nov 2020 15:59:52 GMT Accept-Ranges: bytes ETag: "08c20affabcd61:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:46 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4d0l1Ai4gUsZYdEUFvx5KNRruFYU7T77L2UIyXn6qpOOCGp8zSz9bYQJt7m5TweN8Jk-E; path=/; SameSite=None; Secure
2024-05-29 10:14:46 UTC	15870	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 5f 44 00 12 00 00 00 00 b3 dc 00 07 00 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 5f 28 00 00 00 1c 00 00 00 1c 80 42 54 5c 47 44 45 46 00 00 48 40 00 00 00 32 00 00 00 36 03 b6 04 85 47 50 4f 53 00 00 4a 34 00 00 14 f3 00 00 32 4e f0 59 0d 67 47 53 55 42 00 00 48 74 00 00 01 c0 00 00 03 be cb 34 ff 55 4f 53 2f 32 00 00 02 0c 00 00 00 4e 00 00 00 60 53 a9 aa 1a 63 6d 61 70 00 00 04 c4 00 00 01 81 00 00 01 da 1f de 17 36 63 76 74 20 00 00 0d 74 00 00 00 5d 00 00 00 e4 2f 52 15 48 66 70 67 6d 00 00 06 48 00 00 06 70 00 00 0d 6d 4d 24 8e 7c 67 61 73 70 00 00 48 38 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0f ec 00 00 33 a6 00 00 5c 54 2c e1 59 b0 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFF_DFFTM_(BT\GDEFH@26GPOSJ42NYgGSUBHt4UOS/2N`Scmap6cvt t]/RHfpgmHpmM$\|gaspH8glyf3\T,Yhead

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.10	49761	66.22.0.11	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:48 UTC	975	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4d0gBMvJ8SyB6PD2s4xQiMPBX6B9O975NitLorflzf1HRY3wAhcx0dyY9U8c67QUh7FNQ; __uzmb=1716977680; __uzmd=1716977680; __uzma=6c06ca7c-483d-4fad-b1fb-d11f6291aa63; __uzme=7055; __uzmc=496131060034; __uzmf=7f60003f8684cd-2fd7-47ca-ab80-c60d8d4cac0617169776801390-361b3dce5970c7f410; uzmx=7f900025f0b33b-a3b8-4a8c-8c96-79b099e3b03c1-17169776801390-f25539bd83e54bf210; ADRUM_BTa=R:0\|g:72da773e-a256-496e-a4eb-4c42fe96868d\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; SameSite=None; ADRUM_BT1=R:0\|i:371912\|e:9
2024-05-29 10:14:48 UTC	1241	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzmc=545781377783; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:48 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977688; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:48 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60003f8684cd-2fd7-47ca-ab80-c60d8d4cac0617169776801397991-3d62526b686e5f7913; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:48 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f900025f0b33b-a3b8-4a8c-8c96-79b099e3b03c1-17169776801397991-788a95ae348e0ea013; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:14:48 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:0\|g:8a8a3062-2c63-42f0-bdac-2b4023319179\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:15:18 GMT; path=/ Set-Cookie: ADRUM_BT1=R:0\|i:371912\|e:9; expires=Wed, 29-May-2024 10:15:18 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:15:18 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:14:48 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.10	49752	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:49 UTC	700	OUT	GET /OnlineBanking/ HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:14:50 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 29 May 2024 10:14:50 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-29 10:14:50 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.10	49751	152.42.220.64	443	5852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:14:59 UTC	700	OUT	GET /OnlineBanking/ HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:14:59 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 29 May 2024 10:14:59 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-29 10:14:59 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6052, Parent PID: 6936

General

Target ID:	1
Start time:	06:14:25
Start date:	29/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5852, Parent PID: 6052

General

Target ID:	3
Start time:	06:14:28
Start date:	29/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2236,i,3752641880106210170,12902061291128347922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1732, Parent PID: 6936

General

Target ID:	10
Start time:	06:14:31
Start date:	29/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.fnbo-in.selfip.com/x/otp2.html"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mail.fnbo-in.selfip.com/x/otp2.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Windows Analysis Report
https://mail.fnbo-in.selfip.com/x/otp2.html